nftables: fix reproducibility (#485918)

This commit is contained in:
Arnout Engelen
2026-02-07 09:27:08 +00:00
committed by GitHub
@@ -41,6 +41,28 @@ stdenv.mkDerivation rec {
url = "https://lore.kernel.org/netfilter-devel/20241219231001.1166085-2-hi@alyssa.is/raw";
hash = "sha256-7vMBIoDWcI/JBInYP5yYWp8BnYbATRfMTxqyZr2L9Sk=";
})
# Following 4 commits fix reproducibility.
(fetchurl {
name = "0001-build-fix-.-configure-with-non-bash-shell.patch";
url = "https://git.netfilter.org/nftables/patch/?id=2e3c68f26d5bd60c8ea7467fa9018c282a7d8c47";
hash = "sha256-gJi6Q6mpURynzpnTFs1VJmZ+SpnNhyOrCzKarJmu/6w=";
})
(fetchurl {
name = "0002-build-simplify-the-instantation-of-nftversion.h.patch";
url = "https://git.netfilter.org/nftables/patch/?id=2a0ec8a7246e5c5eb85270e3d4de43e20a00c577";
hash = "sha256-gzlMHaZTXCqR8IcccIsLaMZie3CaMEPa4lnGr/x7b/o=";
})
(fetchurl {
name = "0003-build-generate-build-time-stamp-once-at-configure.patch";
url = "https://git.netfilter.org/nftables/patch/?id=b92571cc59ce49fdd9fe2daac9350529adfb2424";
hash = "sha256-03nexKi/tH1pGNor2/q+Q5ps9+YQRGBbR/DR164Efpo=";
})
(fetchurl {
name = "0004-build-support-SOURCE_DATE_EPOCH-for-build-time-stamp.patch";
url = "https://git.netfilter.org/nftables/patch/?id=ca86f206c92704170a295b8dc7a41f6448835dde";
hash = "sha256-vK/dsi9YXzEg2iShfbhnwlJJC27LTBA9fIjyJySoeFI=";
})
];
nativeBuildInputs = [