Job orb on freebsd-14
README
Skip to buildsorb: check opam package reproducibility
This tool can check if an opam package build is reproductible (cf. https://reproducible-builds.org). It has two subcommands: build and rebuild.
The orb build conducts a build of an opam package, and collects the build result (and hashes thereof) and the build input (or build info), consisting of:
- build-environment (the environment variables plus OS/OS_DISTRIBUTION/OS_FAMILY/OS_VERSION/ORB_VERSION)
- system-packages (the installed packages on the system)
- opam-switch (opam switch export --full --freeze - a textual representation containing all installed opam packages)
- *.build-hashes with maps of installed files to their hashes
The orb rebuild takes this data as input and conducts a second build with the same environment, and compares that the hashes of the produced binaries are identical.
The orb build also has a command-line flag "--twice" to conduct a build and a rebuild directly afterwards. For debugging reproducibility, the "--keep-build-dir" option is provided that allows to compare intermediate build products as well.
Please have a look at "--out", "--switch-name", "--solver-timeout", "--date", and other command line parameters.
It is currently used as a payload of builder-worker to run the reproducible MirageOS unikernels infrastructure.
Binary packages for different platforms (Debian, Ubuntu, FreeBSD) are available at https://builds.robur.coop
Install & use
$ opam pin git+https://github.com/robur-coop/orb#next
$ orb build --twice --repos=default:https://opam.ocaml.org cmdliner
Simple (and fast) failing and successful reproducible opam packages are in the reproducible-testing-repo.
History
The initial development was done by Raja Boujbel (working at OCamlPro) in spring 2019 at the MirageOS retreat in Marrakesh. Another iteration was done in December 2019 by Hannes Mehnert at the reproducible builds summit. In 2020 and 2021, Reynir Björnsson contributed together with Hannes Mehnert more adjustments to use orb on FreeBSD and Debian for conducting reproducible builds of MirageOS unikernels. In 2022, the robur team contributed work to use orb with MirageOS 4, which uses opam-monorepo.
Builds
Back to readme- ☑ freebsd-14 2024-10-04 15:09:31Z orb.pkg
SHA256:a3d486b8987eb1723a616660b5f7ea876f9630188b5e0836cf26d8587adb66e3
(3.91MB) - ☑ freebsd-14 2024-09-18 14:49:40Z orb.pkg
SHA256:aa92865ee68c298487c53aa9620ea7704ce4f07a7846083bfe0cba1c8949d77e
(3.91MB) - ☑ freebsd-14 2024-09-13 14:50:21Z orb.pkg
SHA256:9fff4d48381d72ee5a6ed5895ea8bbf7f5a86c3a5da3933ce7f5e8e2854bfecc
(3.91MB) - ☑ freebsd-14 2024-09-03 14:35:34Z orb.pkg
SHA256:a29aa0494b42429178104d865db182fa9b3c92f86692d69f1a18a10112318d23
(3.9MB) - ☑ freebsd-14 2024-08-26 14:28:05Z orb.pkg
SHA256:2d87c30b9c2e879aebf80675ebc59e6f20c5ea38dc96b20bda4a1240921a177a
(3.57MB) - ☑ freebsd-14 2024-08-21 14:30:31Z orb.pkg
SHA256:cd0289face9cf5407c97f6168cf5c0442e3c120ccca1ec7d4c995b9e7f9cff8f
(3.57MB) - ☑ freebsd-14 2024-08-08 10:25:00Z orb.pkg
SHA256:548cefc5da0356af92722d575926457d0e72acfbdc23699136e161497d962892
(3.57MB) - ☑ freebsd-14 2024-08-08 09:30:09Z orb.pkg
SHA256:4954baaf638685e6c74281bb769e16e6e7b66c0ad71db126ba8517bd84a6d36f
(3.89MB) - ☑ freebsd-14 2024-08-08 09:18:43Z orb.pkg
SHA256:25846300d04950629144e723d73730a9c700028d1ee7839f7ca28924cd2bf97e
(3.9MB) - ☑ freebsd-14 2024-08-07 14:16:31Z orb.pkg
SHA256:41389474ca4f3a041966c679462dcfd7e27dd58b2d759f5d64552fb9c45d3bc6
(3.57MB)
Including failed builds here.