[opensuse-kernel] Is hiding the build host really needed?
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all - For quite some time we've carried a patch to obscure the build host in /proc/version so that it's always the same. It will always show up as (geeko@buildhost), even if it's not actually built for distribution. I looked at Ubuntu and Fedora, and they don't bother to obscure it. Is there any reason we should carry this patch indefinitely if nobody else bothers? - -Jeff - -- Jeff Mahoney SUSE Labs -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/ iEYEARECAAYFAk3EgkkACgkQLPWxlyuTD7KFjwCgh5DzvykRtyVC/Eh52GFm9Vh8 QukAnjVBkDlpBDFOPgxW3yY4vPTQFcGC =5iZQ -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-kernel+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-kernel+help@opensuse.org
On Fri, May 06, 2011 at 07:20:41PM -0400, Jeff Mahoney wrote:
Hi all -
For quite some time we've carried a patch to obscure the build host in /proc/version so that it's always the same. It will always show up as (geeko@buildhost), even if it's not actually built for distribution.
I looked at Ubuntu and Fedora, and they don't bother to obscure it. Is there any reason we should carry this patch indefinitely if nobody else bothers?
It would ensure that rebuilds with no changes are identical to the last rebuild, as who knows what machine the kernel package would be built on, so that seems like a good reason to keep it to me. But that's just my opinion :) thanks, greg k-h -- To unsubscribe, e-mail: opensuse-kernel+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-kernel+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 05/06/2011 07:55 PM, Greg KH wrote:
On Fri, May 06, 2011 at 07:20:41PM -0400, Jeff Mahoney wrote:
Hi all -
For quite some time we've carried a patch to obscure the build host in /proc/version so that it's always the same. It will always show up as (geeko@buildhost), even if it's not actually built for distribution.
I looked at Ubuntu and Fedora, and they don't bother to obscure it. Is there any reason we should carry this patch indefinitely if nobody else bothers?
It would ensure that rebuilds with no changes are identical to the last rebuild, as who knows what machine the kernel package would be built on, so that seems like a good reason to keep it to me.
But that's just my opinion :)
That doesn't actually happen, though, since the timestamp is also updated during rebuild. - -Jeff - -- Jeff Mahoney SUSE Labs -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/ iEYEARECAAYFAk3Ei0QACgkQLPWxlyuTD7LvbwCeNjyAK8UQimaG0JJK36O2ylv/ e2gAn0RHHeJjIycgt1vKtLBWWYAyuT8m =cXhy -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-kernel+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-kernel+help@opensuse.org
On Fri, May 06, 2011 at 07:59:00PM -0400, Jeff Mahoney wrote:
On 05/06/2011 07:55 PM, Greg KH wrote:
On Fri, May 06, 2011 at 07:20:41PM -0400, Jeff Mahoney wrote:
Hi all -
For quite some time we've carried a patch to obscure the build host in /proc/version so that it's always the same. It will always show up as (geeko@buildhost), even if it's not actually built for distribution.
I looked at Ubuntu and Fedora, and they don't bother to obscure it. Is there any reason we should carry this patch indefinitely if nobody else bothers?
It would ensure that rebuilds with no changes are identical to the last rebuild, as who knows what machine the kernel package would be built on, so that seems like a good reason to keep it to me.
But that's just my opinion :)
That doesn't actually happen, though, since the timestamp is also updated during rebuild.
Ah. But I thought we had patches to keep that from happening (well, to keep the time from affecting the binary image at least.) Oh well, I kind of always liked seeing "geeko", but if you want to get rid of it, I understand :( greg k-h -- To unsubscribe, e-mail: opensuse-kernel+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-kernel+help@opensuse.org
On Fri, May 06, 2011 at 05:32:10PM -0700, Greg KH wrote:
On Fri, May 06, 2011 at 07:59:00PM -0400, Jeff Mahoney wrote:
On 05/06/2011 07:55 PM, Greg KH wrote:
On Fri, May 06, 2011 at 07:20:41PM -0400, Jeff Mahoney wrote:
Hi all -
For quite some time we've carried a patch to obscure the build host in /proc/version so that it's always the same. It will always show up as (geeko@buildhost), even if it's not actually built for distribution.
I looked at Ubuntu and Fedora, and they don't bother to obscure it. Is there any reason we should carry this patch indefinitely if nobody else bothers?
It would ensure that rebuilds with no changes are identical to the last rebuild, as who knows what machine the kernel package would be built on, so that seems like a good reason to keep it to me.
But that's just my opinion :)
That doesn't actually happen, though, since the timestamp is also updated during rebuild.
Ah. But I thought we had patches to keep that from happening (well, to keep the time from affecting the binary image at least.)
Oh well, I kind of always liked seeing "geeko", but if you want to get rid of it, I understand :(
Ask Adrian, perhaps the real hostname is queriable ... ;) Ciao, Marcus -- To unsubscribe, e-mail: opensuse-kernel+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-kernel+help@opensuse.org
Dne 7.5.2011 01:59, Jeff Mahoney napsal(a):
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 05/06/2011 07:55 PM, Greg KH wrote:
On Fri, May 06, 2011 at 07:20:41PM -0400, Jeff Mahoney wrote:
Hi all -
For quite some time we've carried a patch to obscure the build host in /proc/version so that it's always the same. It will always show up as (geeko@buildhost), even if it's not actually built for distribution.
I looked at Ubuntu and Fedora, and they don't bother to obscure it. Is there any reason we should carry this patch indefinitely if nobody else bothers?
I think debian has a similar patch.
It would ensure that rebuilds with no changes are identical to the last rebuild, as who knows what machine the kernel package would be built on, so that seems like a good reason to keep it to me.
But that's just my opinion :)
Yes, and actually 2.6.40 is going to have support for exactly this: KBUILD_BUILD_USER=geeko KBUILD_BUILD_HOST=suse so the patch will die a natural death if you leave it alone now :).
That doesn't actually happen, though, since the timestamp is also updated during rebuild.
Support for KBUILD_BUILD_TIMESTAMP has been there for quite some time and we set it to the timestamp of the git commit in the spec file. 2.6.40 will also kill (hopefully) all these "Built on " __DATE__ " at " __TIME__ strings found in some drivers, so that builds from same source will be identical. Michal -- To unsubscribe, e-mail: opensuse-kernel+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-kernel+help@opensuse.org
participants (4)
-
Greg KH
-
Jeff Mahoney
-
Marcus Meissner
-
Michal Marek