[YUNIKORN-2420] [Shim] Create reproducible binaries

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.5.0
• Component/s: shim - kubernetes
• Labels: pull-request-available
• Target Version: 1.5.0
• Assignee: Craig Condit
• Reporter: Craig Condit
• Created: 15/Feb/24 16:27
• Updated: 20/Mar/24 14:32
• Resolved: 15/Feb/24 19:33

Description

The binaries produced by the k8shim Makefile currently differ from one run to the next in 2 ways:

• Go-generated BuildID (random)
• Build timestamp (current time/date)

The first one can be solved by explicitly setting an empty string for the buildid in the go linker flags. The second can be solved by using a constently-derived build timestamp:

1. If possible, use the latest git commit timestamp, normalized to ISO8601 UTC
2. If the current source tree is not a git tree, use the contents of the build.date file in the top-level directory.
3. Fallback to the current date.
4. In all cases, save the result to build.date.

Using this process allows us to ensure that a reasonable build date is always used (if available). When we generate release tarballs, as long as the build.date file is generated as part of the release process, the results will be reproducible as well. The build.date file should be ignored by git, but supplied with the generated source tarball to ensure consistency.

Issue Links

• links to: GitHub Pull Request #790