From c6b8de409d2e3c4a023aa332e80259332276e0ba Mon Sep 17 00:00:00 2001 From: Rasmus Villemoes Date: Wed, 6 Nov 2024 14:16:51 +0100 Subject: [PATCH] rpi-eeprom-digest: honour SOURCE_DATE_EPOCH If used in a build environment that sets SOURCE_DATE_EPOCH, we should honour that in order to generate reproducible binaries. See https://reproducible-builds.org/specs/source-date-epoch/ . --- rpi-eeprom-digest | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/rpi-eeprom-digest b/rpi-eeprom-digest index c02012a..2eae2ea 100755 --- a/rpi-eeprom-digest +++ b/rpi-eeprom-digest @@ -92,7 +92,11 @@ writeSig() { sha256sum "${IMAGE}" | awk '{print $1}' > "${OUTPUT}" # Include the update-timestamp - echo "ts: $(date -u +%s)" >> "${OUTPUT}" + if [ -n "${SOURCE_DATE_EPOCH}" ] ; then + echo "ts: ${SOURCE_DATE_EPOCH}" >> "${OUTPUT}" + else + echo "ts: $(date -u +%s)" >> "${OUTPUT}" + fi if [ -n "${KEY}" ]; then [ -f "${KEY}" ] || die "RSA private \"${KEY}\" not found"