Add reproducible build infrastructure

mirror of https://github.com/jmcorgan/fips.git synced 2026-07-30 19:46:15 +00:00

Pin Rust toolchain to 1.94.0 via rust-toolchain.toml for deterministic
compiler output across environments. Set SOURCE_DATE_EPOCH from git
commit timestamp in CI workflows and packaging scripts to normalize
embedded timestamps.

Make packaging archives reproducible: pass --mtime=@$SOURCE_DATE_EPOCH
to tar in .deb, .ipk, and systemd tarball builds. Normalize ownership
to root:root in systemd tarballs. Pin cargo-zigbuild to 0.19.8 for
cross-compilation stability.

Add SHA-256 hash output to CI build and OpenWrt packaging workflows
for binary verification.

This commit is contained in:

Origami74

2026-03-20 20:36:02 -07:00

committed by

Johnathan Corgan

parent fed6cc6987

commit c164de8808

6 changed files with 43 additions and 4 deletions

									
										rust-toolchain.toml
									
		+2
		
												View File
												
				@@ -0,0 +1,2 @@

				[toolchain]

				channel = "1.94.0"