From e469ac44946ff0afd68f1d19430b91715d269f8d Mon Sep 17 00:00:00 2001 From: Viktor Szakats Date: Tue, 9 Apr 2024 12:18:23 +0000 Subject: [PATCH] dist: verify tarball reproducibility in CI Closes #13327 --- .github/workflows/distcheck.yml | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/.github/workflows/distcheck.yml b/.github/workflows/distcheck.yml index 1a644ef7d1..c09927e7ce 100644 --- a/.github/workflows/distcheck.yml +++ b/.github/workflows/distcheck.yml @@ -38,8 +38,17 @@ jobs: - run: make V=1 && make V=1 clean name: 'make and clean' - - run: ./maketgz 99.98.97 - name: 'maketgz' + - name: 'maketgz' + run: | + SOURCE_DATE_EPOCH=1711526400 ./maketgz 99.98.97 + + - name: 'maketgz reproducibility test' + run: | + mkdir run1; mv ./curl-99.98.97.* run1/ + make V=1 && make V=1 clean + SOURCE_DATE_EPOCH=1711526400 ./maketgz 99.98.97 + mkdir run2; cp -p ./curl-99.98.97.* run2/ + diff run1 run2 - uses: actions/upload-artifact@v4 with: -- 2.47.3