8000 verus-latest: drop .fingerprint/incremental/build dirs and .d files from the shipped tree by bryan-minimal · Pull Request #880 · gominimal/pkgs · GitHub
[go: up one dir, main page]

Skip to content

verus-latest: drop .fingerprint/incremental/build dirs and .d files from the shipped tree - #880

Merged
bryan-minimal merged 2 commits into
mainfrom
verus-latest/no-fingerprint
Oct 20, 2026
Merged

bryan-minimal merged 2 commits into
mainfrom
verus-latest/no-fingerprint

Conversation

@bryan-minimal
Copy link
Copy Markdown
Member

Diffing the published verus-latest artifacts of two world rebuilds (build-servers early-cutoff study): 33 of 6603 files differed, 31 of them under usr/lib/ver 8000 us/.fingerprint/ (the Rust build system's state: timestamps and dep-info hashes that change on every build) plus two of its bookkeeping files. The binaries and rlibs were identical.

The recipe copies all of target-verus/release/ into the package. This removes .fingerprint/, incremental/, build/ and the make-style .d files after the copy. verus and cargo-verus load none of them at runtime; they need the binaries, deps/*.rlib/*.so and the private toolchain.

🤖 Generated with Claude Code

…dirs and .d files from the shipped tree

They came along with cp -R of target-verus/release and differ on every
build (timestamps, dep-info hashes); verus loads none of them.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
@bryan-minimal
bryan-minimal requested a review from a team as a code owner October 15, 2026 01:31
@coderabbitai
coderabbitai Bot commented Oct 15, 2026 •
Copy link
Copy Markdown
Contributor

Warning

Review limit reached

  • Run on-demand review

This review includes 1 billable file and costs up to $0.25.

  • Ask an admin to make reviews automatic

Open in CodeRabbit

Reviews can continue after your included limit without a manual trigger. An admin must approve usage-based billing.

Or wait 59 minutes for your next included review.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available. Your 74 included PR review attempts over the past 7 days set your current allowance at 1 review per hour.

Learn how review limits work.

Review configuration:

⚙️ Run configuration
  • Configuration used: Repository: gominimal/pkgs/.coderabbit.yaml
  • Review profile: CHILL
  • Plan: Essentials
  • Run ID: cf1c6cd0-e166-4d0c-8db5-889f903d920f
📥 Commits

Reviewing files that changed from the base of the PR and between 55bb002 and d4a7fe3.

📒 Files selected for processing: 1
  • packages/verus-latest/build.sh
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@bryan-minimal
Copy link
Copy Markdown
Member Author

Lab-box double build of verus-latest with this recipe over pkgs c930e31: 5 of 3999 files differ, down from 33. The 28 cargo bookkeeping files are gone; what remains is vstd itself: libvstd rlib/rmeta (same bytes in a different item order, e.g. arrow_v vs arrow_frac swapped) and vstd.vir (a 9.8 KB region). That is rust_verify/vir emitting in HashMap iteration order, i.e. per-process RandomState seeds from getrandom, not anything in this recipe. The fix for that class is build-time entropy pinning (repro-lab detrand, proposed as a sandbox default); this PR stands on its own for the files it removes.

…d and the vstd verification pass (libvstd/vstd.vir came out in HashMap order)

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
@bryan-minimal
Copy link
Copy Markdown
Member Author

Pushed the getrandom shim (the one zola and nushell already carry) for both the workspace build and the vstd verification pass; a lab-box double build with it is queued.

@bryan-minimal
Copy link
Copy Markdown
Member Author

With the getrandom shim: two forced lab-box builds of verus-latest (recipe over pkgs c930e31, separate fresh caches) are byte-identical, 0 of 3999 files differ. Before this PR the same double build differed in 33 files; after the first commit in 5 (libvstd rlib/rmeta/vir in HashMap order); now none.

8000

@norrietaylor norrietaylor left a comment
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. The double build shows 0 of 3999 files differing, down from 33. Nothing removed at build.sh:134-135 is needed at runtime, and the smoke test runs a real verification. The build is offline (vendored crates, CARGO_NET_OFFLINE), so the entropy shim doesn't have #878's TLS concern here. Once #884 is sound, this should switch to the shared shim.


Generated by Claude Code

@bryan-minimal
bryan-minimal added this pull request to the merge queue Oct 20, 2026
Merged via the queue into main with commit 57cd982 Oct 20, 2026
11 checks passed
@bryan-minimal
bryan-minimal deleted the verus-latest/no-fingerprint branch October 20, 2026 15:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

0