Lei Zhang
unread,Nov 23, 2015, 3:51:15 PM11/23/15Sign in to reply to author
Sign in to forward
You do not have permission to delete messages in this group
Sign in to report message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Antoine Labour, Nico Weber, Dirk Pranke, Roland McGrath, Sam Clegg, chromium-dev, Michael Spang
On Mon, Nov 23, 2015 at 11:40 AM, Michael Spang <
sp...@chromium.org> wrote:
> +1 as this versions the system deps, it means we are one step closer to
> hermetic builds.
>
> It can only be less brittle because we are not at the mercy of the
> idiosyncrasies of the local system.
That's another good point. Keep in mind developers on non-Debian-based
distros have to come up with their own version of
install-build-deps.sh.
To further answer Antonie's questions, the scripts in
build/linux/sysroot_scripts/ generates the sysroot tarballs. I think
sbc@ will even write some form of documentation to explain the few
steps needed to generate the tarballs. The scripts download .deb files
from Debian/Ubuntu to generate the sysroot. The system's GPG keyring
is used to verify the Packages file from the server, and then the
SHA256s in the Packages file are used to verify the .debs, just like
Debian-based systems do with apt.