Some topic branches are never built reproducibly during Jenkins daily runs => add option to specify which APT snapshot serials to use during build
Our branches based on devel use “latest” snapshots for every APT
archive used at build time => their “reproducibly” (sic) job will fail
if one these APT snapshots is updated between the start of the original
build job and the start of the “reproducibly” job. Our branches based on
stable are also affected, but to a lesser degree: they use the
“latest” snapshot only for the debian-security archive. Daily
Jenkins runs are scheduled deterministically, based on the name of the
branch. So inevitably, the automatic daily rebuild of some branches will
always fail to build reproducibly.
On #14924 (closed) we implemented a workaround for stable/testing/devel but long term, the only sane option is probably to teach our build system how to use snapshots specified on the command line (instead of “latest”), and to teach Jenkins to pass the correct parameters when trying to rebuild a given ISO image.
Feature Branch: bugfix/15107-specify-APT-snapshots-serial-to-build-with
Attachments
- tails-amd64-bugfix_15107-specify-APT-snapshots-serial-to-build-with-3.12-20190106T1750Z-ece9232b9d.buildlog
- tails-amd64-bugfix_15107-specify-APT-snapshots-serial-to-build-with-3.12-20190106T1948Z-ece9232b9d.buildlog
Related issues
- Related to #14924 (closed)
- Related to #14944 (closed)
Original created by @bertagaz on 15107 (Redmine)