Skip to content

feat: add linglong.lock for reproducible builds #2177

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
dengbo11 merged 1 commit into from
Oct 22, 2026
Merged

feat: add linglong.lock for reproducible builds #2177

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
193 changes: 157 additions & 36 deletions api/schema/v1.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -287,6 +287,144 @@
}
}
},
"BuilderSourceLockResolved": {
"title": "BuilderSourceLockResolved",
"description": "resolved identity of a locked builder source",
"type": "object",
"required": [
"hash"
],
"properties": {
"hash": {
"type": "string",
"description": "locked content identity: sha256:<digest> or git-commit:<commit SHA>"
}
}
},
"BuilderProjectSource": {
"title": "BuilderProjectSource",
"description": "items of sources of builder project",
"type": "object",
"required": [
"kind"
],
"properties": {
"kind": {
"type": "string",
"description": "kind of source"
},
"url": {
"type": "string",
"description": "url of source"
},
"digest": {
"type": "string",
"description": "digest of source"
},
"name": {
"type": "string",
"description": "name of source"
},
"commit": {
"type": "string",
"description": "commit of source"
},
"version": {
"type": "string",
"description": "version of source"
},
"submodules": {
"type": "boolean",
"description": "whether to checkout submodules"
}
}
},
"BuilderSourceLockEntry": {
"title": "BuilderSourceLockEntry",
"description": "one source lock entry",
"type": "object",
"required": [
"source",
"resolved"
],
"properties": {
"source": {
"$ref": "#/$defs/BuilderProjectSource"
},
"resolved": {
"$ref": "#/$defs/BuilderSourceLockResolved"
}
}
},
"BuilderProjectLockDependency": {
"title": "BuilderProjectLockDependency",
"description": "requested and resolved builder dependency",
"type": "object",
"required": [
"type",
"requested",
"resolved"
],
"properties": {
"type": {
"type": "string"
},
"requested": {
"type": "string"
},
"resolved": {
"$ref": "#/$defs/BuilderProjectLockDependencyResolved"
}
}
},
"BuilderProjectLockDependencyResolved": {
"title": "BuilderProjectLockDependencyResolved",
"description": "selected reference and modules of a builder dependency",
"type": "object",
"required": [
"reference",
"modules"
],
"properties": {
"reference": {
"type": "string",
"description": "locked channel, package ID and exact version; architecture preserves the declaration or uses unknown when unspecified"
},
"modules": {
"type": "array",
"items": {
"type": "string"
}
}
}
},
"BuilderProjectLock": {
"title": "BuilderProjectLock",
"description": "content lock for builder project sources and dependencies",
"type": "object",
"required": [
"version",
"sources",
"dependencies"
],
"properties": {
"version": {
"type": "integer"
},
"sources": {
"type": "array",
"items": {
"$ref": "#/$defs/BuilderSourceLockEntry"
}
},
"dependencies": {
"type": "array",
"items": {
"$ref": "#/$defs/BuilderProjectLockDependency"
}
}
}
},
"BuilderProject": {
"title": "BuilderProject",
"description": "Linglong project build file.",
Expand Down Expand Up @@ -397,42 +535,7 @@
"type": "array",
"description": "sources of package",
"items": {
"title": "BuilderProjectSource",
"description": "items of sources of builder project",
"type": "object",
"required": [
"kind"
],
"properties": {
"kind": {
"type": "string",
"description": "kind of source"
},
"url": {
"type": "string",
"description": "url of source"
},
"digest": {
"type": "string",
"description": "digest of source"
},
"name": {
"type": "string",
"description": "name of source"
},
"commit": {
"type": "string",
"description": "commit of source"
},
"version": {
"type": "string",
"description": "version of source"
},
"submodules": {
"type": "boolean",
"description": "whether to checkout submodules"
}
}
"$ref": "#/$defs/BuilderProjectSource"
}
},
"build": {
Expand Down Expand Up @@ -1659,6 +1762,24 @@
"UABMetaInfo": {
"$ref": "#/$defs/UABMetaInfo"
},
"BuilderSourceLockResolved": {
"$ref": "#/$defs/BuilderSourceLockResolved"
},
"BuilderProjectSource": {
"$ref": "#/$defs/BuilderProjectSource"
},
"BuilderSourceLockEntry": {
"$ref": "#/$defs/BuilderSourceLockEntry"
},
"BuilderProjectLockDependency": {
"$ref": "#/$defs/BuilderProjectLockDependency"
},
"BuilderProjectLockDependencyResolved": {
"$ref": "#/$defs/BuilderProjectLockDependencyResolved"
},
"BuilderProjectLock": {
"$ref": "#/$defs/BuilderProjectLock"
},
"BuilderProject": {
"$ref": "#/$defs/BuilderProject"
},
Expand Down
115 changes: 88 additions & 27 deletions api/schema/v1.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -234,6 +234,93 @@ $defs:
minified:
description: Whether this layer file is minified or not.
type: boolean
BuilderSourceLockResolved:
title: BuilderSourceLockResolved
description: resolved identity of a locked builder source
type: object
required: [hash]
properties:
hash:
type: string
description: "locked content identity: sha256:<digest> or git-commit:<commit SHA>"
BuilderProjectSource:
title: BuilderProjectSource
description: items of sources of builder project
type: object
required: [kind]
properties:
kind:
type: string
description: kind of source
url:
type: string
description: url of source
digest:
type: string
description: digest of source
name:
type: string
description: name of source
commit:
type: string
description: commit of source
version:
type: string
description: version of source
submodules:
type: boolean
description: whether to checkout submodules
BuilderSourceLockEntry:
title: BuilderSourceLockEntry
description: one source lock entry
type: object
required: [source, resolved]
properties:
source:
$ref: '#/$defs/BuilderProjectSource'
resolved:
$ref: '#/$defs/BuilderSourceLockResolved'
BuilderProjectLockDependency:
title: BuilderProjectLockDependency
description: requested and resolved builder dependency
type: object
required: [type, requested, resolved]
properties:
type:
type: string
requested:
type: string
resolved:
$ref: '#/$defs/BuilderProjectLockDependencyResolved'
BuilderProjectLockDependencyResolved:
title: BuilderProjectLockDependencyResolved
description: selected reference and modules of a builder dependency
type: object
required: [reference, modules]
properties:
reference:
type: string
description: "locked channel, package ID and exact version; architecture preserves the declaration or uses unknown when unspecified"
modules:
type: array
items:
type: string
BuilderProjectLock:
title: BuilderProjectLock
description: content lock for builder project sources and dependencies
type: object
required: [version, sources, dependencies]
properties:
version:
type: integer
sources:
type: array
items:
$ref: '#/$defs/BuilderSourceLockEntry'
dependencies:
type: array
items:
$ref: '#/$defs/BuilderProjectLockDependency'
BuilderProject:
title: BuilderProject
description: Linglong project build file.
Expand Down Expand Up @@ -326,33 +413,7 @@ $defs:
type: array
description: sources of package
items:
title: BuilderProjectSource
description: items of sources of builder project
type: object
required:
- kind
properties:
kind:
type: string
description: kind of source
url:
type: string
description: url of source
digest:
type: string
description: digest of source
name:
type: string
description: name of source
commit:
type: string
description: commit of source
version:
type: string
description: version of source
submodules:
type: boolean
description: whether to checkout submodules
$ref: '#/$defs/BuilderProjectSource'
build:
title: BuilderProjectBuildScript
description: build script of builder project
Expand Down
Loading
Loading