reproducible builds of FreeBSD in a chroot on Linux

[Steven Chamberlain]

Hi!

> On 5/7/15 5:22 PM, Holger Levsen wrote:
>> So now I would like to build freebsd myself, twice, and compare the results
>> and show these results as in
>> https://reproducible.debian.net/rb-pkg/unstable/amd64/gcc-4.9.html - and then
>> quite probably set up a jenkins job on jenkins.debian.net and do this every
>> week.

Julian Elischer wrote:
> Cross compiling FreeBSD from another platform has been a "gee the 
> might be nice" goal for some years
> [...]
> If you really wanted to you could look at he kFreeBSD project and 
> maybe they have a way to do stuff..

That we do!

We package various FreeBSD stuff for Debian GNU/kFreeBSD and then build
some of it reproducibly already.

We already have in Debian - on kfreebsd and linux - the necessary
toolchain packages such as clang-3.4, bmake, freebsd-mk,
freebsd-buildutils and particular versions of byacc and flex.  We
prepend "/usr/lib/freebsd:" to $PATH in order to use these:
https://anonscm.debian.org/viewvc/glibc-bsd/trunk/kfreebsd-10/debian/rules?view=markup#l46

We were actually able to build our package of the FreeBSD kernel on
GNU/Linux, and the binary would match what we built on GNU/kFreeBSD.
(Which I think is the ultimate in securing against attacks on the
build/development systems).

I haven't tried building much else from FreeBSD - on Linux, or on
GNU/kFreeBSD - using only FreeBSD's original build system.  In our
packaging we tend to make changes as necessary to get individual bits
to build.

I understand wanting to do this on GNU/Linux, but if that's too
difficult, it may be easier trying this in a chroot on GNU/kFreeBSD
first.  You can even run a Debian GNU/kFreeBSD host system with
native FreeBSD binaries inside a chroot or jail, potentially a whole
native build system inside of it.

In any case, I'd like to someday see a GNU/kFreeBSD machine set up as a
http://jenkins.debian.net slave, doing rebuilds and alerting us if any
packages in sid are FTBFS, as well as other tests.

> There may also be a better mailing list for this...

Discussions are very welcome on debian-bsd at lists.debian.org, although
we are rather busy this week finalising a jessie-kfreebsd release.

Regards,
-- 
Steven Chamberlain
steven at pyro.eu.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 493 bytes
Desc: Digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-hackers/attachments/20150511/492441a6/attachment.sig>