search

reproducible-containers / repro-get

[Soft-deprecated] Reproducible apt/dnf/apk/pacman, with content-addressing
Apache License 2.0
106 stars 6 forks source link

Embed epoch timestamp to SHA256SUMS #85

Open AkihiroSuda opened 1 year ago

AkihiroSuda commented 1 year ago

https://github.com/reproducible-containers/repro-get/blob/22cee8dcbeb7d1ae05a1c4d0dbbb3d814ab2b0cc/pkg/filespec/filespec.go#L276-L279

ModTime() is not reliable on git repo, so it should be embedded in the hash file.

e.g.,

0000000000000000000000000000000000000000000000000000000000000000  /repro-get?epoch=1639958400