Use deterministic SOURCE_DATE_EPOCH

oxidize-rb · Feb 1, 2025 · e6d194f · e6d194f
1 parent c21f978
commit e6d194f
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 1 deletion.
diff --git a/docker/setup/rb-sys-dock.sh b/docker/setup/rb-sys-dock.sh
@@ -3,7 +3,7 @@
 set -e
 
 setup_sudoers() {
-  echo "Defaults        env_keep += \"BUNDLE_PATH RB_SYS_CARGO_TARGET_DIR RAKEOPT RUBY_TARGET\"" >> /etc/sudoers.d/rb-sys-dock
+  echo "Defaults        env_keep += \"BUNDLE_PATH RB_SYS_CARGO_TARGET_DIR RAKEOPT RUBY_TARGET GEM_PRIVATE_KEY_PASSPHRASE SOURCE_DATE_EPOCH\"" >> /etc/sudoers.d/rb-sys-dock
 }
 
 main() {

diff --git a/gem/exe/rb-sys-dock b/gem/exe/rb-sys-dock
@@ -392,6 +392,7 @@ def rcd(input_args)
       -e RB_SYS_CARGO_TARGET_DIR=#{tmp_target_dir.inspect} \
       -e RUBY_CC_VERSION="#{ruby_versions}" \
       -e RUBY_TARGET="#{OPTIONS.fetch(:platform)}" \
+      -e SOURCE_DATE_EPOCH="#{source_date_epoch}" \
       -e RAKEOPT \
       -e TERM \
       -w #{working_directory} \
@@ -410,6 +411,19 @@ def rcd(input_args)
   exec(cmd)
 end
 
+def source_date_epoch
+  return ENV["SOURCE_DATE_EPOCH"] if ENV.key?("SOURCE_DATE_EPOCH")
+
+  stdout, status = Open3.capture2("git log -1 --pretty=%ct")
+
+  if status.success?
+    stdout.strip
+  else
+    logger.warn("Could not determine SOURCE_DATE_EPOCH from git log, using current time")
+    Time.now.to_i.to_s
+  end
+end
+
 def download_image
   image = ENV.fetch("RCD_IMAGE")