You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When using extensions to extend the run image, it appears that timestamps within the layers are not zeroed out. This hurts reproducibility.
Reproduction
Steps
Following the tutorial from Demo run image extension docs#581, modify the output image tag to be localhost:5000/hello-extensions (including the registry) and provide --publish to pack build
Use crane manifest localhost:5000/hello-extensions to get the digest of the extension layer (it should be the 6th layer)
Use crane blob localhost:5000/hello-extensions@sha256:<extension layer digest> > blob.tar.gz
Expand the tarball and ls -lt from the root directory
Current behavior
The timestamps are not zeroed out:
$ ls -lt
total 0
drwxr-xr-x 3 narellano staff 96 Aug 10 11:33 etc
drwxr-xr-x 3 narellano staff 96 Jul 26 08:16 lib
drwxr-xr-x 6 narellano staff 192 Jul 26 08:16 usr
drwxr-xr-x 3 narellano staff 96 Jun 14 11:03 var
Expected behavior
The timestamps should be zeroed out.
Context
lifecycle version
0.17.0
anything else?
We don't use Reproducible: true in kaniko for reasons having to do with the fact that we don't pull the complete base image (since we are already running in the context of the image that is being extended). See where we override image.RetrieveRemoteImage and set InitialFSUnpacked: true. Available options seem to be:
Try to modify kaniko
Have the exporter zero out timestamps when streaming the layer to the target (this may be easier)
The text was updated successfully, but these errors were encountered:
Summary
When using extensions to extend the run image, it appears that timestamps within the layers are not zeroed out. This hurts reproducibility.
Reproduction
Steps
localhost:5000/hello-extensions
(including the registry) and provide--publish
topack build
crane manifest localhost:5000/hello-extensions
to get the digest of the extension layer (it should be the 6th layer)crane blob localhost:5000/hello-extensions@sha256:<extension layer digest> > blob.tar.gz
ls -lt
from the root directoryCurrent behavior
The timestamps are not zeroed out:
Expected behavior
The timestamps should be zeroed out.
Context
lifecycle version
0.17.0
anything else?
We don't use
Reproducible: true
in kaniko for reasons having to do with the fact that we don't pull the complete base image (since we are already running in the context of the image that is being extended). See where we overrideimage.RetrieveRemoteImage
and setInitialFSUnpacked: true
. Available options seem to be:The text was updated successfully, but these errors were encountered: