From 892d1dbb175c69a5a4b9871238cd4d3bcb264fe3 Mon Sep 17 00:00:00 2001 From: Igor Novgorodov Date: Wed, 15 Jul 2026 09:13:33 +0000 Subject: [PATCH 1/2] Fix reproducibility --- .github/workflows/build.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 99f0214..276772b 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -32,6 +32,10 @@ jobs: - name: Install deps run: sudo apt-get update && sudo apt-get -y install protobuf-compiler podman + # Improves reproducibility + - name: Set SOURCE_DATE_EPOCH + run: echo "SOURCE_DATE_EPOCH=$(git log -1 --format=%ct)" >> "$GITHUB_ENV" + - name: Build run: repro-env build --env CFLAGS="-fno-link-libatomic" -- cargo build --features sev-snp --release --target x86_64-unknown-linux-musl From 2d6c331e3b16adf066717001a30320f45a8aebc7 Mon Sep 17 00:00:00 2001 From: Igor Novgorodov Date: Wed, 15 Jul 2026 10:18:35 +0000 Subject: [PATCH 2/2] Add forgotten --env --- .github/workflows/build.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 276772b..c02d5bc 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -37,7 +37,7 @@ jobs: run: echo "SOURCE_DATE_EPOCH=$(git log -1 --format=%ct)" >> "$GITHUB_ENV" - name: Build - run: repro-env build --env CFLAGS="-fno-link-libatomic" -- cargo build --features sev-snp --release --target x86_64-unknown-linux-musl + run: repro-env build --env CFLAGS="-fno-link-libatomic" --env SOURCE_DATE_EPOCH -- cargo build --features sev-snp --release --target x86_64-unknown-linux-musl - name: Generate SHA checksum run: shasum target/x86_64-unknown-linux-musl/release/ic-http-lb > ic-http-lb.shasum @@ -46,7 +46,7 @@ jobs: run: rm -rf target - name: Build again - run: repro-env build --env CFLAGS="-fno-link-libatomic" -- cargo build --features sev-snp --release --target x86_64-unknown-linux-musl + run: repro-env build --env CFLAGS="-fno-link-libatomic" --env SOURCE_DATE_EPOCH -- cargo build --features sev-snp --release --target x86_64-unknown-linux-musl - name: Check SHA checksum run: shasum -c ic-http-lb.shasum