Commit 878e2a50 authored by Vagrant Cascadian's avatar Vagrant Cascadian Committed by Tom Rini
Browse files

Set time and umask on fit-dtb.blob to ensure reproducibile builds.

Support for compressed fit-dtb.blob was added in:

  commit 95f4bbd5 ("lib: fdt: Allow LZO and GZIP DT compression in

When building compressed (lzop, gzip) fit-dtb.blob images, the
compression tool may embed the time or umask in the image.

Work around this by manually setting the time of the source file using
SOURCE_DATE_EPOCH and a hard-coded 0600 umask.

With gzip, this could be accomplished by using -n/--no-name, but lzop
has no current workaround:

This is essentially the same fix applied to multi-dtb fit SPL images in:

  commit 8664ab7d

 ("Set time and umask on multi-dtb fit images to
  ensure reproducibile builds.")
Signed-off-by: default avatarVagrant Cascadian <>
parent 3ee8d913
......@@ -1058,6 +1058,10 @@ fit-dtb.blob.lzo: fit-dtb.blob
fit-dtb.blob: dts/dt.dtb FORCE
$(call if_changed,mkimage)
touch -d @$(SOURCE_DATE_EPOCH) fit-dtb.blob
chmod 0600 fit-dtb.blob
MKIMAGEFLAGS_fit-dtb.blob = -f auto -A $(ARCH) -T firmware -C none -O u-boot \
-a 0 -e 0 -E \
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment