modules/gpg2: add --build for deterministic configure output - #2172
Open
tlaurion wants to merge 1 commit into
Open
modules/gpg2: add --build for deterministic configure output#2172tlaurion wants to merge 1 commit into
tlaurion wants to merge 1 commit into
Conversation
tlaurion
force-pushed
the
gpg2-add-build-flag
branch
from
July 29, 2026 17:52
00237b8 to
2124fcd
Compare
10 tasks
10 tasks
tlaurion
force-pushed
the
gpg2-add-build-flag
branch
from
July 29, 2026 19:09
2124fcd to
933fe5b
Compare
Without --build, autoconf runs config.guess to determine the build system
triplet. Docker containers share the host kernel, so config.guess probes
the host via uname -r and /proc -- not a container-virtualized kernel.
Different CircleCI runners have different host kernels, producing different
build triplets and non-reproducible gpg-agent output.
Add --build x86_64-elf-linux following the pattern already proven in
modules/gpg (v1.4.21, present since its introduction). This prevents
config.guess from running entirely, making the configure output
independent of which CircleCI runner executes the build.
The --disable-asm flag (already present) only disables gpg2's own
assembly optimizations -- it does not prevent config.guess from probing
the host kernel. --build is the fix for that.
Convert single patch to multi-patch directory:
0001-force-cross-compile.patch: set cross_compiling=yes
0002-redirect-tty-to-stderr.patch: redirect tty for initrd
0003-fix-ac-unique-file.patch: fix source file check for --build
when --disable-gpgsm is used
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
tlaurion
force-pushed
the
gpg2-add-build-flag
branch
from
July 29, 2026 19:13
933fe5b to
2517e8d
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Without --build, config.guess probes the Docker host kernel and produces
different build triplets on different CI runners, causing gpg-agent output to
differ between CI and local builds at the same commit.
Add --build x86_64-elf-linux following the proven pattern from modules/gpg
(v1.4.21). Convert single patch to multi-patch directory:
Verified: CI pipeline on tlaurion/heads shows gpg-agent hash matches clean
local build at the same commit.