From c788316a54859fae236a3e12a20f34b8ccfe0480 Mon Sep 17 00:00:00 2001
From: Michael Tibben <mtibben@groq.com>
Date: Thu, 16 Oct 2025 18:15:09 +1100
Subject: [PATCH] google-cloud-sdk: ensure determinism by not writing python
 bytecode

---
 pkgs/by-name/go/google-cloud-sdk/package.nix             | 2 ++
 pkgs/by-name/go/google-cloud-sdk/withExtraComponents.nix | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/pkgs/by-name/go/google-cloud-sdk/package.nix b/pkgs/by-name/go/google-cloud-sdk/package.nix
index 1d37ebf1c416..e5c4399649a0 100644
--- a/pkgs/by-name/go/google-cloud-sdk/package.nix
+++ b/pkgs/by-name/go/google-cloud-sdk/package.nix
@@ -161,6 +161,8 @@ stdenv.mkDerivation rec {
   installCheckPhase = ''
     # Avoid trying to write logs to homeless-shelter
     export HOME=$(mktemp -d)
+    # Prevent Python from writing bytecode to ensure build determinism
+    export PYTHONDONTWRITEBYTECODE=1
     $out/bin/gcloud version --format json | jq '."Google Cloud SDK"' | grep "${version}"
     $out/bin/gsutil version | grep -w "$(cat platform/gsutil/VERSION)"
   '';
diff --git a/pkgs/by-name/go/google-cloud-sdk/withExtraComponents.nix b/pkgs/by-name/go/google-cloud-sdk/withExtraComponents.nix
index 986ee2ba4884..e13ea25caac9 100644
--- a/pkgs/by-name/go/google-cloud-sdk/withExtraComponents.nix
+++ b/pkgs/by-name/go/google-cloud-sdk/withExtraComponents.nix
@@ -81,6 +81,8 @@ symlinkJoin {
   postBuild = ''
     sed -i ';' $out/google-cloud-sdk/bin/.gcloud-wrapped
     sed -i -e "s#${google-cloud-sdk}#$out#" "$out/google-cloud-sdk/bin/gcloud"
+    # Prevent Python from writing bytecode to ensure build determinism
+    export PYTHONDONTWRITEBYTECODE=1
     ${installCheck}
   '';
 }