Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

curl'ing stable.txt from cilium/cilium makes builds unreproducible. #2870

Closed
Foxboron opened this issue Nov 27, 2024 · 2 comments · Fixed by cilium/cilium#36344
Closed

curl'ing stable.txt from cilium/cilium makes builds unreproducible. #2870

Foxboron opened this issue Nov 27, 2024 · 2 comments · Fixed by cilium/cilium#36344
Assignees
Labels
kind/bug Something isn't working

Comments

@Foxboron
Copy link

Bug report

Currently the build is requiring to curl a stable.txt file from cilium/cilium upon building. It's unclear to me why this is needed, but as we are fetching from a continuously moving source the implication is that past releases of cilium-cli is going to be unreproducible as the build inputs will be moving.

This value should be hard coded pr release, and not fetched from main.

General Information

N/A

How to reproduce the issue

  1. Build a past executable with the stable.txt curl and see the checksum be different.
@Foxboron Foxboron added the kind/bug Something isn't working label Nov 27, 2024
@Foxboron
Copy link
Author

And to be clear, this is relevant for downstream packagers as there is no clear indication what the CILIUM_VERSION should be for any version of cilium-cli. The current version of v0.16.20 is going to have either v1.16.4 or v1.16.3 embedded into the binary.

michi-covalent added a commit that referenced this issue Dec 3, 2024
Get the default Cilium version from vendored cilium/charts repo so that
the build is reproducible.

Fixes: #2870

Signed-off-by: Michi Mutsuzaki <[email protected]>
@michi-covalent michi-covalent self-assigned this Dec 3, 2024
michi-covalent added a commit to cilium/cilium that referenced this issue Dec 3, 2024
Derive the default Cilium version from the source using vendored
cilium/charts instead of injecting it at compile time. This helps ensure
that the default version is consistent across all the downstream
cilium-cli packages.

Fixes: cilium/cilium-cli#2870

Signed-off-by: Michi Mutsuzaki <[email protected]>
github-merge-queue bot pushed a commit to cilium/cilium that referenced this issue Dec 4, 2024
Derive the default Cilium version from the source using vendored
cilium/charts instead of injecting it at compile time. This helps ensure
that the default version is consistent across all the downstream
cilium-cli packages.

Fixes: cilium/cilium-cli#2870

Signed-off-by: Michi Mutsuzaki <[email protected]>
@Foxboron
Copy link
Author

Foxboron commented Dec 4, 2024

@michi-covalent Thanks for fixing this!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug Something isn't working
Projects
None yet
2 participants