improve release reproducibility

- trim paths - set build ID to empty string - set binary timestamp to commit timestamp - strip binary (reduces size from 9.2MB to 8.5MB) Signed-off-by: Paul Meyer <[email protected]>
qweeah · Sep 12, 2023 · bdc9b48 · bdc9b48
1 parent 12a0bac
commit bdc9b48
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/.goreleaser.yml b/.goreleaser.yml
@@ -19,6 +19,8 @@ builds:
   binary: ./oras
   env:
   - CGO_ENABLED=0
+  flags:
+  - -trimpath
   goos:
   - darwin
   - linux
@@ -42,7 +44,8 @@ builds:
   ldflags:
   # one-line ldflags to bypass the goreleaser bugs
   # the git tree state is guaranteed to be clean by goreleaser
-  - -w -X oras.land/oras/internal/version.Version={{.Version}} -X oras.land/oras/internal/version.GitCommit={{.FullCommit}} -X oras.land/oras/internal/version.BuildMetadata= -X oras.land/oras/internal/version.GitTreeState=clean
+  - -w -s -buildid= -X oras.land/oras/internal/version.Version={{.Version}} -X oras.land/oras/internal/version.GitCommit={{.FullCommit}} -X oras.land/oras/internal/version.BuildMetadata= -X oras.land/oras/internal/version.GitTreeState=clean
+  mod_timestamp: "{{ .CommitTimestamp }}"
 
 archives:
   - format: tar.gz