From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752505AbdBIA0g (ORCPT ); Wed, 8 Feb 2017 19:26:36 -0500 Received: from mx0b-001b2d01.pphosted.com ([148.163.158.5]:44499 "EHLO mx0a-001b2d01.pphosted.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1752076AbdBIA0e (ORCPT ); Wed, 8 Feb 2017 19:26:34 -0500 Subject: Re: Build Linux kernel to have comparable zImages To: Lukasz Majewski , linux-kernel@vger.kernel.org References: <20170208102032.3c96ed31@jawa> From: Andrew Donnellan Date: Thu, 9 Feb 2017 11:25:15 +1100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Icedove/45.6.0 MIME-Version: 1.0 In-Reply-To: <20170208102032.3c96ed31@jawa> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-TM-AS-MML: disable X-Content-Scanned: Fidelis XPS MAILER x-cbid: 17020900-0052-0000-0000-000002147029 X-IBM-AV-DETECTION: SAVI=unused REMOTE=unused XFE=unused x-cbparentid: 17020900-0053-0000-0000-000007BF1170 Message-Id: <0e866eb6-8080-1c2b-9759-b02b2bd84ed9@au1.ibm.com> X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:,, definitions=2017-02-08_14:,, signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 spamscore=0 suspectscore=0 malwarescore=0 phishscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1612050000 definitions=main-1702090002 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 08/02/17 20:20, Lukasz Majewski wrote: > Dear All, > > Maybe somebody can point me to solution to the following problem: > > Problem: > > I do want to be able to compare (with e.g. md5sum, sha1) two linux > zImages. The problem is that Linux compiles in current build time into > the binary. Hence, even two identical builds will have different hash. > > Why: > > I do want to do some considerable Kconfig rework and avoid situation > where some option would be left not enabled. You might want to look at https://github.com/hardenedlinux/grsecurity-reproducible-build, I'm not familiar with it at all but it seems to be somewhat in the direction you're after. -- Andrew Donnellan OzLabs, ADL Canberra andrew.donnellan@au1.ibm.com IBM Australia Limited