ENT-13792: Made Windows MSI assembly fully reproducible

[larsewi]

The issue was that wixl bakes a random package code, wall-clock summary-info timestamps, and per-file CAB timestamps into the MSI. Further more the wxs file used a random ProductCode. Hence, two builds of identical source produced different MSIs.

Fixed it by deriving the ProductCode and package code deterministically from the version, pinning the CAB file mtimes and summary-info to SOURCE_DATE_EPOCH.

$ ./build-in-container.py --platform ubuntu-24-mingw --project nova --role agent --build-type DEBUG --rebuild-image --output-dir out-a/
$ ./build-in-container.py --platform ubuntu-24-mingw --project nova --role agent --build-type DEBUG --rebuild-image --output-dir out-b/
$ sha256sum out-{a,b}/*.msi
21f7cca0b26cf4164d2c40c019dbdfc9ed842d1750fac9e7126a3d60eced0f85  out-a/cfengine-nova-3.29.0a-1-x86_64.msi
21f7cca0b26cf4164d2c40c019dbdfc9ed842d1750fac9e7126a3d60eced0f85  out-b/cfengine-nova-3.29.0a-1-x86_64.msi

• Test bootstrap

  PS C:\Users\Administrator> msiexec /i "C:\Users\Administrator\Desktop\cfengine-nova-3.29.0a-1-x86_64.msi" /qn /l*v "C:\Users\Administrator\Desktop\cfengine-install-3.29.log"
PS C:\Users\Administrator> & 'C:\Program Files\Cfengine\bin\cf-agent.exe' -V
CFEngine Core 3.29.0a.e8a605dd9
CFEngine Enterprise 3.29.0a.22cb72acf
PS C:\Users\Administrator> & 'C:\Program Files\Cfengine\bin\cf-agent.exe' -B 172.31.7.249
  notice: Bootstrap mode: implicitly trusting server, use --trust-server=no if server trust is already established
  notice: Trusting new key: SHA=601bd5305ac7c8b70ecaddc64159f2f3dcd392f793edc7906290fbb36fd2a966
R: Bootstrapping from host '172.31.7.249' via built-in policy 'C:\Program Files\Cfengine\inputs\failsafe.cf'
R: This autonomous node assumes the role of voluntary client
R: Updated local policy from policy server
R: Triggered an initial run of the policy
R: Started the scheduler
  notice: Bootstrap to '172.31.7.249' completed successfully!

• Test upgrade

PS C:\Users\Administrator> & 'C:\Program Files\Cfengine\bin\cf-agent.exe' -V
CFEngine Core 3.29.0
CFEngine Enterprise 3.29.0
PS C:\Users\Administrator> & 'C:\Program Files\Cfengine\bin\cf-agent.exe' -V
CFEngine Core 3.30.0
CFEngine Enterprise 3.30.0 

[larsewi]

Packages: http://buildcache.cfengine.com/packages/testing-pr/jenkins-pr-pipeline-14260/

[larsewi]

^ packages-based tests are unrealted to MinGW only build