From 4108382f36f3dc56fd3335c61850c9ab23cfcdfb Mon Sep 17 00:00:00 2001 From: Arnout Engelen Date: Wed, 20 Aug 2025 17:01:55 +0200 Subject: [PATCH] compress-man-pages: don't leak build timestamp into archive without `-n`, gzip leaks the file timestamp into the compressed file, which is likely to leak the build timestamp into the output. This fixes #434930, a regression introduced in c5252e1 / #406922 --- pkgs/build-support/setup-hooks/compress-man-pages.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkgs/build-support/setup-hooks/compress-man-pages.sh b/pkgs/build-support/setup-hooks/compress-man-pages.sh index 26059b7d9401..77b2eb2d83fa 100644 --- a/pkgs/build-support/setup-hooks/compress-man-pages.sh +++ b/pkgs/build-support/setup-hooks/compress-man-pages.sh @@ -11,7 +11,7 @@ compressManPages() { # Compress all uncompressed manpages. Don't follow symlinks, etc. # gzip -f is needed to not error out on hard links. find "$dir"/share/man/ -type f -a '!' -regex '.*\.\(bz2\|gz\|xz\)$' -print0 \ - | xargs -0 -n1 -P "$NIX_BUILD_CORES" gzip -f + | xargs -0 -n1 -P "$NIX_BUILD_CORES" gzip -n -f # Point symlinks to compressed manpages. find "$dir"/share/man/ -type l -a '!' -regex '.*\.\(bz2\|gz\|xz\)$' -print0 \