371a819607
This was reproducible with substitution of large NARs with a lot of files and a dedup=on Nix store. While Nix would correctly produce a signature verification error if the hash was known, builds could silently be corrupt. TrueNAS backported this, so let's as well so this doesn't bite anyone else. See: https://github.com/truenas/zfs/pull/390 See: https://github.com/openzfs/zfs/issues/18366 See: https://github.com/openzfs/zfs/pull/18544 Signed-off-by: Morgan Jones <me@numin.it>