rebuilderd
rebuilderd copied to clipboard
kpcyrd
Independent verification of binary packages - reproducible builds
``` $ rebuildctl pkgs sync-profile --sync-config /etc/rebuilderd-sync.conf tails […] Aug 08 16:03:53 rebuilderd rebuilderd-worker[575]: ==> box: Box file was not detected as metadata. Adding it directly... Aug 08 16:03:53 rebuilderd...
To avoid having difficult to configure external dependencies we've decided to use sqlite to track the rebuilderd state. We had some starting issues with sqlite locking up. It got better...
There's a background job for cleanup that's likely looking up the database for extended periods of time: https://github.com/kpcyrd/rebuilderd/blob/8ff458ff71381db01e1fba8abe01e974c7eacbf4/daemon/src/lib.rs#L36 This could be split up so the select is executed on its...
Currently, when rebuilderd records an in-toto link after a successful rebuild, the absolute path of both the input and output packages are recorded. Typically, this looks something like `/tmp/rebuilderd/{inputs,out}/`. This...
I'd like to be able to use some workers exclusively to rebuild selected profiles, for example, Arch Linux's `community` repository which has significantly more packages than `core` and `extra`. This...
There's currently only a setup guide for tails (that happens to be on debian), there should also be a guide specifically for debian in docs/
There's currently only a setup guide for tails and a page in the Arch wiki, there should also be a guide in docs/
Especially on the debian rebuilder builds get frequently stuck during tests and the kill-after-timeout doesn't seem to work reliably. The code that configures the timeout: https://github.com/kpcyrd/rebuilderd/blob/9b586829d858ef130ef0a234e7da27020bf01357/worker/src/rebuild.rs#L186-L193 The code that's supposed...