fedora-reproducible-builds / project

#4 Some packages aren't rebuilt during mass rebuilds
Opened by dcavalca. Modified

Open
Close Issue

https://sourcegraph.com/search?q=context%3Aglobal+repo%3A%5Esrc.fedoraproject.org%2F+noautobuild&patternType=regexp&sm=0&groupBy=repo

Of these, shim and grub2 (and systemd-boot eventually) are the only ones that actually need this, everything else should be cleaned up.

Also kernel.

kernel needs to be rebuilt because of the impact on kmod stuff when distribution changes occur.

We're down to:

bcm283x-firmware - https://src.fedoraproject.org/rpms/bcm283x-firmware/pull-request/2
grub2, systemd-boot - bootloader, signed by MS
shim, shim-unsigned-aarch64, shim--unsigned-x86_64 - shim, signed by MS
pesign - used to sign shim (unclear if noautorebuild is needed)
pesign-test-app - used to validate that the signature process is working

shim-unsigned-* should not be exempt, because it isn't signed, and that is how we verify that we can build the sources.

shim-unsigned-aarch64, shim--unsigned-x64 don't actually need to be opted out, put up https://src.fedoraproject.org/rpms/shim-unsigned-x64/pull-request/2 and https://src.fedoraproject.org/rpms/shim-unsigned-aarch64/pull-request/3
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.