0.16.2

• Switch worker-debian Dockerfile to use debrebuild.py by @fepitre

Thanks

We'd like to thank @SantiagoTorres and @repi for their support on github sponsors.

0.16.1

• Fix a regression in the container image: Revert REBUILDERD_COOKIE_PATH=/secret/auth default - When using rebuildctl from the container image this would always attempt to load the auth cookie from /secret/auth and fail if it doesn't exist, instead of attempting to load the auth cookie from /etc/rebuilderd.conf.

Thanks

We'd like to thank @SantiagoTorres and @repi for their support on github sponsors.

0.16.0

• This release lands build groups, which allows reproducing multiple packages with a single build, if they share a common base (pkgbase in Arch Linux, source package in debian, or a common release number in tails). This reduces the cpu load of running a rebuilder because it's using the resources more efficiently.
• Update tails documentation (thanks to @jvoisin)

Important: the build group change impacts the size of the report POST body, both because the build log is submitted multiple times for each package and because each package can have its own diffoscope. If you're using nginx to limit the request body (on by default) please adjust your config accordingly, either by setting a lower size limit in rebuilderd, or allowing larger request bodies in nginx.

Thanks

We'd like to thank @SantiagoTorres and @repi for their support on github sponsors.

v0.15.0

• distro field is now an opaque string instead of an enum
• url has been renamed to artifact_url in a few places
• It's now possible to pass --input-url to support eg. external buildinfo files
• /data and /secret are now volumes in the rebuilderd docker image
• Avoid double-slash in request if endpoint url ends with slash
• Correctly load auth-cookie in rebuildctl pkgs sync-stdin

Breaking changes

• The worker config format has been updated, the rebuilder backends now need to be explicitly registered. This may look like this:

[backend."archlinux"]
path = "/usr/libexec/rebuilderd/rebuilder-archlinux.sh"

[backend."debian"]
path = "/usr/libexec/rebuilderd/rebuilder-debian.sh"

[backend."tails"]
path = "/usr/libexec/rebuilderd/rebuilder-tails.sh"

• The url field is now called artifact_url in some api responses, using 0.14.2 rebuildctl and 0.15.0 rebuilderd may not be compatible with each other

Thanks

We'd like to thank @SantiagoTorres and @repi for their support on github sponsors.

v0.14.2

• Make stdio-read fixes for #71 more reliable. Shoutout to @stoeckmann and @c3h2_ctf for helping debug this.

Thanks

We'd like to thank @SantiagoTorres and @repi for their support on github sponsors.

v0.14.1

• Fix race when reading from stdio and waiting for process to exit. This has (very rarely) caused incomplete logs, diffoscopes, and flaky tests
• libsodium is not required anymore since in-toto and the dependency has been removed

Thanks

We'd like to thank @SantiagoTorres and @repi for their support on github sponsors.

v0.14.0

• Add in-toto attestation to rebuilderd by @joyliu-q during Google Summer of Code
• Add experimental tails support
• Add subcommand to download attestation with rebuildctl
• Dynamically link zstd
• Arch Linux: Detect compression with tree_magic
• Change default cpu and io priority of rebuilderd-worker to idle
• Fix auth cookie discovery for docker-compose
• Bugfixes for the work-in-progress debian setup by @SantiagoTorres
• Update debrebuild flag to --buildresults=
• Convert blocking reqwest client to async

Breaking changes

• The worker keys are automatically regenerated when migrating from 0.13.0 to 0.14.0
• Authenticating by the public key alone is not allowed anymore

Thanks

This work was sponsored by Google, The Linux Foundation, and people like you and me! We'd like to thank @SantiagoTorres and @repi in particular for their support on github sponsors.

v0.13.0

• Track if a diffoscope report is available and publish this info on /api/v0/pkgs/list for the frontend to use

Thanks

This work was sponsored by Google, The Linux Foundation, and people like you and me! We'd like to thank @SantiagoTorres and @repi in particular for their support on github sponsors.

v0.12.0

• Automatically garbage collect old builds in a background thread
• Add a subcommand to fetch build logs
• Add a subcommand to fetch diffoscope
• Add pager to log and diffoscope when writing to tty

Thanks

We'd like to thank @repi for their support on github sponsors.

v0.11.0

• The output directory for repro is now managed by rebuilderd
• In preparation for pkgbase aware rebuilds, we now ignore the exit code of the rebuilder backend and instead verify the file written to the outdir is equal to the rebuild input
• The ./build/ folders in /var/lib/rebuilderd-worker are now unused and can be deleted
• The rebuild artifacts are not stored anymore, only the status and optionally the diffoscope are stored

Thanks

We'd like to thank @repi for their support on github sponsors.