blob: 36d1f512147905553afe6bb837c54ee3e0b50437 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
|
#!/bin/sh
# Build the same committed source in two different absolute paths and compare
# the unsigned APKs byte for byte.
set -eu
root=$(CDPATH='' cd -- "$(dirname -- "$0")/.." && pwd)
# shellcheck source=versions
. "$root/versions"
tmp=$(mktemp -d)
trap 'rm -rf "$tmp"' 0 1 2 3 15
a="$tmp/a/src"
b="$tmp/a-much-longer-path/b/src"
status=$(git -C "$root" status --porcelain --untracked-files=normal)
[ -z "$status" ] || {
echo "verify-repro: tracked and untracked source must be clean" >&2
exit 1
}
mkdir -p "$a" "$b"
archive="$tmp/source.tar"
git -C "$root" archive --format=tar HEAD > "$archive"
tar -xf "$archive" -C "$a"
tar -xf "$archive" -C "$b"
# Reuse a locally cached, verified source tarball when present. Otherwise the
# first build fetches it and the second consumes that exact verified file.
tarball="rsync/rsync-${RSYNC_VERSION}.tar.gz"
if [ -f "$root/$tarball" ]; then
( cd "$root/rsync" && sha256sum -c "rsync-${RSYNC_VERSION}.tar.gz.sha256" )
cp "$root/$tarball" "$a/$tarball"
cp "$root/$tarball" "$b/$tarball"
fi
make -C "$a" app
if [ ! -f "$b/$tarball" ]; then
cp "$a/$tarball" "$b/$tarball"
fi
make -C "$b" app
first="$a/app/build/outputs/apk/release/app-release-unsigned.apk"
second="$b/app/build/outputs/apk/release/app-release-unsigned.apk"
if cmp "$first" "$second"; then
echo "verify-repro: APKs are bit-identical across different paths"
else
echo "verify-repro: NONDETERMINISM detected" >&2
exit 1
fi
|