From b4d871d28cda1e1b15653d2aafceb57c9480dc82 Mon Sep 17 00:00:00 2001
From: Fabian Keil <fk@fabiankeil.de>
Date: Mon, 11 May 2015 18:45:24 +0200
Subject: [PATCH 073/257] release: Use a hack to recreate dist tarballs with
 reproducible timestamps

Obtained from: ElectroBSD
---
 release/Makefile                  |  3 ++
 release/scripts/tar-time-reset.sh | 64 +++++++++++++++++++++++++++++++++++++++
 2 files changed, 67 insertions(+)
 create mode 100755 release/scripts/tar-time-reset.sh

diff --git a/release/Makefile b/release/Makefile
index fbc252ea486f..627b6ea6bd7d 100644
--- a/release/Makefile
+++ b/release/Makefile
@@ -266,6 +266,9 @@ mini-memstick.img: bootonly
 	sh ${.CURDIR}/${TARGET}/make-memstick.sh bootonly ${.TARGET}
 
 packagesystem: base.txz kernel.txz ${EXTRA_PACKAGES}
+	for tarball in *.txz; do \
+	    sh ${.CURDIR}/scripts/tar-time-reset.sh $${tarball}; \
+	done
 	sh ${.CURDIR}/scripts/make-manifest.sh *.txz > MANIFEST
 	touch ${.TARGET}
 
diff --git a/release/scripts/tar-time-reset.sh b/release/scripts/tar-time-reset.sh
new file mode 100755
index 000000000000..8186fd8d3e26
--- /dev/null
+++ b/release/scripts/tar-time-reset.sh
@@ -0,0 +1,64 @@
+#!/bin/sh
+
+##########################################################################
+# Copyright (c) 2015 Fabian Keil <fk@fabiankeil.de>
+#
+# Permission to use, copy, modify, and distribute this software for any
+# purpose with or without fee is hereby granted, provided that the above
+# copyright notice and this permission notice appear in all copies.
+#
+# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+##########################################################################
+#
+# This script resets the timestamps in a given tarfile to hopefully make
+# it reproducible. This is a rather wasteful approach, but works for now.
+#
+# A better solution would be to patch bsdtar to optionally use a fixed
+# time (without having to clown around with mtree specs).
+#
+##########################################################################
+
+main() {
+    local tarfile="${1}" \
+          tempdir mtree_spec
+
+    if [ $# -ne 1 ]; then
+	echo "$0 /path/to/tarfile"
+	exit 1
+    fi
+
+    if [ -z "${tarfile}" ]; then
+        echo "No tar file given"
+        return 1
+    fi
+    tarfile="$(realpath "$tarfile")"
+
+    tempdir=$(mktemp -d) || return 1
+    mtree_spec=$(mktemp) || return 1
+
+    echo "Extracting tarfile ${tarfile}"
+    (cd "${tempdir}" && tar xvf "${tarfile}") || return 1
+
+    echo "Ditching original tarfile ${tarfile}"
+    rm "${tarfile}"
+
+    echo "Creating mtree spec in ${mtree_spec}"
+    (cd "${tempdir}" && mtree -L -c -k time) | \
+        sed "s@time=.*@time=${EPOCH_DATE-0}.000000000@" > "${mtree_spec}"
+
+    echo "Creating tarfile ${tarfile}"
+    (cd "${tempdir}" && tar acLvf "${tarfile}" @"${mtree_spec}") || return 1
+
+    echo "Ditching ${tempdir}"
+    rm -r "${tempdir}" || return 1
+    echo "Ditching ${mtree_spec}"
+    rm "${mtree_spec}" || return 1
+}
+
+main "${@}"
-- 
2.11.0