nixpkgs/nixos
Thomas Watson af25692214 nixos/stage-1: Examine binaries for libraries in a consistent order
To reduce size, stage 1 (the initrd) is populated by copying specific
binaries in, then copying the libraries specifically needed by those
binaries. `patchelf` is then used to make the binaries search in the
directory where these libraries are copied to instead of their original
store paths.

Some filesystems (e.g. ZFS) do not guarantee that copying the same files
in the same order into a given directory will result in `find` returning
them in any particular order (though the order appears consistent so
long as the directory is not modified).

Therefore, when the binaries are scanned for libraries to copy in, they
might be scanned in a different order each time the derivation is built.
If two binaries need two different libraries with the same name, then a
different instance of the library might be copied in first, changing the
derivation contents and breaking reproducibility.

This turns out to be the case with `libudev.so.1` from both `systemd`
(needed by e.g. `mdadm`) and `systemdMinimal` (needed by e.g.
`dmsetup`). This issue is fixed by sorting the list of binaries to be
scanned instead of relying on filesystem order so that the same instance
always gets seen and copied first.

Both before this change (at least on ext4) and after this change
(without any options that affect stage 1), this is the `libudev.so.1`
from `systemdMinimal` by way of `dmsetup`. Whether this is appropriate
and how much the two different systemd configurations and udev libraries
need to be involved is a topic left for future work.
2022-12-20 08:24:19 +01:00
..
doc Merge pull request #205561 from symphorien/nginx-conf-validate 2022-12-19 19:52:33 +00:00
lib nixos: fix typos 2022-12-17 19:31:14 -05:00
maintainers nixos/lxc-container: undo some of the minimal profile stuff 2022-12-09 23:18:37 +03:00
modules nixos/stage-1: Examine binaries for libraries in a consistent order 2022-12-20 08:24:19 +01:00
tests Merge pull request #172084 from priegger/prometheus-statsd-exporter 2022-12-19 23:16:02 +01:00
COPYING
default.nix
README
release-combined.nix Merge pull request #197254 from Atemu/fstab-escape-options 2022-11-19 18:08:40 +01:00
release-small.nix nixos/release: add acme to tested set 2022-10-25 07:22:27 +10:00
release.nix nixos/release-combined: Build graphical ISOs for aarch64-linux 2022-10-11 15:33:41 +02:00

*** NixOS ***

NixOS is a Linux distribution based on the purely functional package
management system Nix.  More information can be found at
https://nixos.org/nixos and in the manual in doc/manual.