Reproducible build should not run as root inside docker

2023-01-16 17:01:58 +01:00
parent 951b8026f5
commit 71a80c5e36
1 changed files with 72 additions and 0 deletions
@@ -0,0 +1,72 @@
+# Building 1.8.10
+
+This tutorial explains how to build release [1.8.10](https://github.com/JetBrains/kotlin/releases/tag/v1.8.10) locally.
+
+## Prerequisites
+
+You must have:
+* Linux or macOS.
+* Docker installed.
+* 14 GB memory available and configured in Docker.
+* To get reproducible artifacts, [umask](https://en.wikipedia.org/wiki/Umask) command without parameters should
+  produce `0022` or `022` output.
+
+## Set environment variables
+
+The following environment variables must be set:
+
+```shell
+export DEPLOY_VERSION=1.8.10
+export BUILD_NUMBER=1.8.10-release-1
+export KOTLIN_NATIVE_VERSION=1.8.10
+export DOCKER_CONTAINER_URL=kotlin.registry.jetbrains.space/p/kotlin/containers/kotlin-build-env:v6
+```
+
+## Clone Kotlin repository
+
+In a new folder, clone the release tag from the Kotlin repository, and change directory to the build folder:
+
+```shell
+git clone --depth 1 --branch v$DEPLOY_VERSION https://github.com/JetBrains/kotlin.git kotlin-build-$DEPLOY_VERSION
+cd kotlin-build-$DEPLOY_VERSION
+```
+
+## Build and verify the compiler
+
+```shell
+docker run --rm -it --name kotlin-build-$DEPLOY_VERSION \
+  --workdir="/repo" \
+  --volume="$(pwd):/repo" \
+  --user="$(id -u):$(id -g)" \
+  $DOCKER_CONTAINER_URL \
+  /bin/bash -c "./scripts/build-kotlin-compiler.sh $DEPLOY_VERSION $BUILD_NUMBER"
+```
+
+This generates a ZIP file: `dist/kotlin-compiler-1.8.10.zip`.
+
+Check that the SHA 256 checksum is equal to the published one for [kotlin-compiler-1.8.10.zip](https://github.com/JetBrains/kotlin/releases/download/v1.8.10/kotlin-compiler-1.8.10.zip):
+
+`0bb9419fac9832a56a3a19cad282f8f2d6f1237d2d467dc8dfe9bd4a2a43c42e`
+
+## Build and verify maven artifacts
+
+```shell
+export BUILD_NUMBER="1.8.10-release-345(1.8.10)"
+docker run --rm -it --name kotlin-build-$DEPLOY_VERSION \
+  --workdir="/repo" \
+  --volume="$(pwd):/repo" \
+  --user="$(id -u):$(id -g)" \
+  $DOCKER_CONTAINER_URL \
+  /bin/bash -c "./scripts/build-kotlin-maven.sh $DEPLOY_VERSION '$BUILD_NUMBER' $KOTLIN_NATIVE_VERSION"
+docker run --rm -it --name kotlin-build-repack-zip-with-stable-entries-order-$DEPLOY_VERSION \
+  --workdir="/repo" \
+  --volume="$(pwd):/repo" \
+  --user="$(id -u):$(id -g)" \
+  $DOCKER_CONTAINER_URL \
+  /bin/bash -c "cd build/repo-reproducible && rm reproducible-maven-$DEPLOY_VERSION.zip || true && find . -type f | sort | zip -X reproducible-maven-$DEPLOY_VERSION.zip -@"
+```
+
+This generates a ZIP file: `build/repo-reproducible/reproducible-maven-1.8.10.zip`.
+
+Check that the SHA 256 checksum is equal to
+`98573938b708c193ca68c7269d29e6ac777dfe780b3935bc733d4c428a45d4e5`.