From: Viktor Szakats <commit@vsz.me>
Date: Tue, 9 Apr 2024 12:18:23 +0000 (+0000)
Subject: dist: verify tarball reproducibility in CI
X-Git-Tag: curl-8_8_0~262
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=e469ac44946ff0afd68f1d19430b91715d269f8d;p=thirdparty%2Fcurl.git

dist: verify tarball reproducibility in CI

Closes #13327
---

diff --git a/.github/workflows/distcheck.yml b/.github/workflows/distcheck.yml
index 1a644ef7d1..c09927e7ce 100644
--- a/.github/workflows/distcheck.yml
+++ b/.github/workflows/distcheck.yml
@@ -38,8 +38,17 @@ jobs:
       - run: make V=1 && make V=1 clean
         name: 'make and clean'
 
-      - run: ./maketgz 99.98.97
-        name: 'maketgz'
+      - name: 'maketgz'
+        run: |
+          SOURCE_DATE_EPOCH=1711526400 ./maketgz 99.98.97
+
+      - name: 'maketgz reproducibility test'
+        run: |
+          mkdir run1; mv ./curl-99.98.97.* run1/
+          make V=1 && make V=1 clean
+          SOURCE_DATE_EPOCH=1711526400 ./maketgz 99.98.97
+          mkdir run2; cp -p ./curl-99.98.97.* run2/
+          diff run1 run2
 
       - uses: actions/upload-artifact@v4
         with: