Commit 9d34742d authored by Philipp Bartsch's avatar Philipp Bartsch
Browse files

nftables: fix reproducibility 

Closes: https://github.com/NixOS/nixpkgs/issues/478048
parent 8e883f43

pkgs/os-specific/linux/nftables/default.nix

+22 −0
Original line number Diff line number Diff line
@@ -41,6 +41,28 @@ stdenv.mkDerivation rec { 
      url = "https://lore.kernel.org/netfilter-devel/20241219231001.1166085-2-hi@alyssa.is/raw";

      hash = "sha256-7vMBIoDWcI/JBInYP5yYWp8BnYbATRfMTxqyZr2L9Sk=";

    })



    # Following 4 commits fix reproducibility.

    (fetchurl {

      name = "0001-build-fix-.-configure-with-non-bash-shell.patch";

      url = "https://git.netfilter.org/nftables/patch/?id=2e3c68f26d5bd60c8ea7467fa9018c282a7d8c47";

      hash = "sha256-gJi6Q6mpURynzpnTFs1VJmZ+SpnNhyOrCzKarJmu/6w=";

    })

    (fetchurl {

      name = "0002-build-simplify-the-instantation-of-nftversion.h.patch";

      url = "https://git.netfilter.org/nftables/patch/?id=2a0ec8a7246e5c5eb85270e3d4de43e20a00c577";

      hash = "sha256-gzlMHaZTXCqR8IcccIsLaMZie3CaMEPa4lnGr/x7b/o=";

    })

    (fetchurl {

      name = "0003-build-generate-build-time-stamp-once-at-configure.patch";

      url = "https://git.netfilter.org/nftables/patch/?id=b92571cc59ce49fdd9fe2daac9350529adfb2424";

      hash = "sha256-03nexKi/tH1pGNor2/q+Q5ps9+YQRGBbR/DR164Efpo=";

    })

    (fetchurl {

      name = "0004-build-support-SOURCE_DATE_EPOCH-for-build-time-stamp.patch";

      url = "https://git.netfilter.org/nftables/patch/?id=ca86f206c92704170a295b8dc7a41f6448835dde";

      hash = "sha256-vK/dsi9YXzEg2iShfbhnwlJJC27LTBA9fIjyJySoeFI=";

    })

  ];



  nativeBuildInputs = [