From efe7f684a66b54bf133e6b377b19653a163c89e0 Mon Sep 17 00:00:00 2001 From: "Yann E. MORIN" Date: Sat, 2 Jan 2016 16:06:42 +0100 Subject: [PATCH] support/download: generate reproducible Bazaar archives Similarly to what has previously been done for the Hg download backend, instruct bzr to generate the archive on stdout, so that we can generate reproducible archives. When instructing bzr to generate the output file by itself, it uses a temporary file that is then fed to gzip, which in turn stores the timestamp of that file in the generated archive, whereas when the output is generated on stdout, there is no timestamp, so the archive is then reproducible. Bizarely enough, we can tell 'bazaar' not to generate a bazaar in the archive. Cool, uh? ;-] Signed-off-by: "Yann E. MORIN" Signed-off-by: Peter Korsgaard --- support/download/bzr | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/support/download/bzr b/support/download/bzr index cec9ce8f37..a8a8887151 100755 --- a/support/download/bzr +++ b/support/download/bzr @@ -32,4 +32,6 @@ _bzr() { eval ${BZR} "${@}" } -_bzr export ${verbose} --root="'${basename}/'" --format=tgz "'${output}'" "'${repo}'" -r "'${rev}'" +_bzr export ${verbose} --root="'${basename}/'" --format=tgz \ + --per-file-timestamps - "'${repo}'" -r "'${rev}'" \ + >"${output}"