kylekrein/live-bootstrap
1
0
Fork 0
mirror of https://github.com/fosslinux/live-bootstrap.git synced 2026-03-19 01:35:24 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Improve reproducibility of tarball packages

Browse source 
This ensures the user running the bootstrap and its umask don't
affect the permission metadata in the tar archive.
This commit is contained in:
Dor Askayo 2022-05-13 12:45:23 +03:00
parent fba7ecf96a
commit 3c60bdebc3
2 changed files with 79 additions and 73 deletions
Download patch file Download diff file Expand all files Collapse all files

14
sysa/helpers.sh
View file

@ -261,17 +261,23 @@ create_tarball_pkg() {
# If grep is unavailable, then tar --sort is unavailable.
# So this does not need a command -v grep.
if tar --help | grep ' \-\-sort' >/dev/null 2>&1; then
tar -C "${DESTDIR}" --sort=name --hard-dereference -cf "/usr/src/repo/${pkg}_${revision}.tar" .
tar -C "${DESTDIR}" --sort=name --hard-dereference \
--numeric-owner --owner=0 --group=0 --mode=go=rX,u+rw,a-s \
-cf "/usr/src/repo/${pkg}_${revision}.tar" .
elif command -v find >/dev/null 2>&1 && command -v sort >/dev/null 2>&1; then
cd "${DESTDIR}"
tar --no-recursion --null -T /tmp/filelist.txt -cf "/usr/src/repo/${pkg}_${revision}.tar"
tar --no-recursion --null -T /tmp/filelist.txt \
--numeric-owner --owner=0 --group=0 --mode=go=rX,u+rw,a-s \
-cf "/usr/src/repo/${pkg}_${revision}.tar"
cd -
else
echo -n > /dev/null
tar -cf "/usr/src/repo/${pkg}_${revision}.tar" -T /dev/null
tar --numeric-owner --owner=0 --group=0 --mode=go=rX,u+rw,a-s \
-cf "/usr/src/repo/${pkg}_${revision}.tar" -T /dev/null
cd "${DESTDIR}"
for f in $(get_files .); do
tar -rf "/usr/src/repo/${pkg}_${revision}.tar" "${f}"
tar --numeric-owner --owner=0 --group=0 --mode=go=rX,u+rw,a-s \
-rf "/usr/src/repo/${pkg}_${revision}.tar" "${f}"
done
cd -
fi