Loading...

Linking RHIVOS CVEs to...

Migration: Automation ...

Sync from "Extern...

XML

Word

Printable

Epic Name:
[RHEL EPIC] Reproducible Container builds - RHEL 9.7
Acceptance Criteria:

Hide

In short, when creating an image, pushing it to a repository, and then recreating it with minor changes, the image should not pull down when a `podman pull` command is executed.

Full details, including test plans, are included in Nalin's "Reproducible Builds" document: https://docs.google.com/document/d/1nL-A6YFEY7vhhCdqOpll3LdbpMgZ4BlNEM0qvBSTSFs/edit?tab=t.0

Show
In short, when creating an image, pushing it to a repository, and then recreating it with minor changes, the image should not pull down when a `podman pull` command is executed. Full details, including test plans, are included in Nalin's "Reproducible Builds" document: https://docs.google.com/document/d/1nL-A6YFEY7vhhCdqOpll3LdbpMgZ4BlNEM0qvBSTSFs/edit?tab=t.0
Severity:
Moderate
Products:

Red Hat Enterprise Linux

Release Note Type:
Enhancement
Release Note Text:

Hide
.Improved support for reproducible container builds

Reproducible builds ensure that a given set of inputs consistently generates the same output. This enhancement addresses several factors that previously complicated reproducibility in container image builds. While using `-source-date-epoch` and `-rewrite-timestamp` improves the reproducibility of builds and better aligns with common practices like setting and looking for `$SOURCE_DATE_EPOCH`, it cannot guarantee complete reproducibility.

Show
.Improved support for reproducible container builds Reproducible builds ensure that a given set of inputs consistently generates the same output. This enhancement addresses several factors that previously complicated reproducibility in container image builds. While using `-source-date-epoch` and `-rewrite-timestamp` improves the reproducibility of builds and better aligns with common practices like setting and looking for `$SOURCE_DATE_EPOCH`, it cannot guarantee complete reproducibility.
Release Note Status:
Done
ProdDocsReview-CCS:
Done
ProdDocsReview-Dev:
Done
ProdDocsReview-QE:
Unspecified

Container images created using RHEL's container tools are reproducible when using the same inputs.

depends on

RHEL-62749 [RFE] ubi9 build is reproducible

is cloned by

RHEL-88522 [RHEL EPIC] Reproducible Container builds - RHEL 10.1

RUN-3272 [RHEL EPIC] [QE Test] Reproducible Container builds - RHEL 9.7