sonic-net / sonic-fips

SONiC FIPS module
Other
0 stars 9 forks source link

Fix the lib not overwritten issue in docker build #33

Closed xumia closed 2 years ago

xumia commented 2 years ago

Fix the lib not overwritten issue in docker build, to fix the wrong libcrypto.so.1.1 in docker images.

The timestamp in the changelog will be used if SOURCE_DATE_EPOCH not specified, we have some patches, but not change the timestamp, so need to increase it. See https://reproducible-builds.org/specs/source-date-epoch/

When the timestamp and the file size are the same, the old files will not be overwritten, even use "dpkg -i --force-all" in docker build. But if we install it manually, not by docker build, then it works fine.

The PR only changes the timestamp of the libs.

Before change:

# ls /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
-rw-r--r-- 1 root root 3076992 Jun 24 20:22 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1

After change:

# ls -l /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
-rw-r--r-- 1 root root 3076992 Jun 25 20:22 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1