mirror of https://github.com/k3s-io/k3s.git
500fd9cfd1
The tar command in package-cli produces a non-reproducible archive because file ordering and timestamps vary between builds. This causes bit-for-bit differences when rebuilding k3s from the same source, which breaks reproducible build systems such as Nix. Sort the archive entries by name and clamp modification times to the Unix epoch so the tarball content is deterministic regardless of filesystem ordering or build time. Ref: NixOS/nixpkgs#430225 Ref: NixOS/nixpkgs#502374 Signed-off-by: Jon Hermansen <jon@jh86.org> |
||
|---|---|---|
| .. | ||
| airgap | ||
| binary_size_check.sh | ||
| build | ||
| build-tests-sonobuoy | ||
| build-upload | ||
| ci | ||
| clean | ||
| download | ||
| entry.sh | ||
| git_version.sh | ||
| image_scan.sh | ||
| manifest | ||
| package | ||
| package-airgap | ||
| package-cli | ||
| package-image | ||
| sonobuoy-config.json | ||
| tag-image-latest | ||
| test | ||
| test-mods | ||
| validate | ||
| validate-artifacts | ||
| version.sh | ||