diff --git a/pkgs/os-specific/linux/nftables/default.nix b/pkgs/os-specific/linux/nftables/default.nix index 92eb4968f95d..675abcc38d7b 100644 --- a/pkgs/os-specific/linux/nftables/default.nix +++ b/pkgs/os-specific/linux/nftables/default.nix @@ -41,6 +41,28 @@ stdenv.mkDerivation rec { url = "https://lore.kernel.org/netfilter-devel/20241219231001.1166085-2-hi@alyssa.is/raw"; hash = "sha256-7vMBIoDWcI/JBInYP5yYWp8BnYbATRfMTxqyZr2L9Sk="; }) + + # Following 4 commits fix reproducibility. + (fetchurl { + name = "0001-build-fix-.-configure-with-non-bash-shell.patch"; + url = "https://git.netfilter.org/nftables/patch/?id=2e3c68f26d5bd60c8ea7467fa9018c282a7d8c47"; + hash = "sha256-gJi6Q6mpURynzpnTFs1VJmZ+SpnNhyOrCzKarJmu/6w="; + }) + (fetchurl { + name = "0002-build-simplify-the-instantation-of-nftversion.h.patch"; + url = "https://git.netfilter.org/nftables/patch/?id=2a0ec8a7246e5c5eb85270e3d4de43e20a00c577"; + hash = "sha256-gzlMHaZTXCqR8IcccIsLaMZie3CaMEPa4lnGr/x7b/o="; + }) + (fetchurl { + name = "0003-build-generate-build-time-stamp-once-at-configure.patch"; + url = "https://git.netfilter.org/nftables/patch/?id=b92571cc59ce49fdd9fe2daac9350529adfb2424"; + hash = "sha256-03nexKi/tH1pGNor2/q+Q5ps9+YQRGBbR/DR164Efpo="; + }) + (fetchurl { + name = "0004-build-support-SOURCE_DATE_EPOCH-for-build-time-stamp.patch"; + url = "https://git.netfilter.org/nftables/patch/?id=ca86f206c92704170a295b8dc7a41f6448835dde"; + hash = "sha256-vK/dsi9YXzEg2iShfbhnwlJJC27LTBA9fIjyJySoeFI="; + }) ]; nativeBuildInputs = [