Job orb-freebsd

README

Skip to build

orb: check opam package reproductibility

This tool can check if an opam package build is reproductible (cf. https://reproducible-builds.org). It installs the package twice (different path & time) and check that installed files have the same hash.

Install & use

$ opam pin git+https://github.com/hannesm/orb#active
$ orb pkg [--diiffoscope]

This project is currently in early beta.

How does it work?

orb uses an already installed opam & opam root, and it follows those steps:

With option --diffoscope, mismatching files are copied locally and their diff generated, using diffoscope.

As orb generates temporary switches, packages dependencies are installed each time (also compiler), which can be time consuming when working on a package.

--keep-switches option permit to keep those generated switches for investigation needs. To manually remove them, don't just remove directory, but use opam switch remove <sw>.

Build 2021-10-13 13:49:12 -00:00

Back to readme

Build took 6min53s.

Execution result: exited 0.

Reproduced by builds

2021-10-15 13:49:58 -00:00, 2021-10-14 13:49:36 -00:00,

Build info

Comparisons with other builds

With latest build
With build 2021-10-12 13:48:49 -00:00 (output is identical binary)
With build 2021-10-08 13:47:19 -00:00 (output is identical binary)
With build 2021-10-04 13:45:33 -00:00 (output is identical binary)

Build artifacts

bin/orb.pkg
SHA256:f59083fdc44e3f20cf1e8154565d26dafc999cf904d4dede8fe426e15f41240c (3.45MB)
build-environment
SHA256:5a4087a0bca20787b604ada329af6a5c64ad6e5822ecf66aebaf4c5d90806e3c (230B)
opam-switch
SHA256:8d2b77e56f890476fdc5aba5314ea3ae073aa90ffa1b679cca3745545f608016 (52.8kB)
system-packages
SHA256:7c1cef4d19c30a477162ba14dabf67a9da6dfb382878dbf90ba038382dde1a8f (168B)