commit 4f00f90934c3eb969b1490582b8194d8706a3e81
author Serge Bazanski <serge@monogon.tech> Tue Dec 19 13:54:04 2023 +0100
committer Lorenz Brun <lorenz@monogon.tech> Thu Dec 21 14:10:22 2023 +0000
tree 341594cd4a4768c155777032f04c7f8558723d30
parent 7f14f91765c6b32a95aac5d2b40a25bba1eae695

rust, toolchains: make EFI builds reproducible

This makes Rust EFI builds bit-for-bit reproducible by stripping
BuildConfiguration dependent output paths and timestamps from target
binaries and intermediary files.

Change-Id: I845be61f32ed304883460fca9006aa398d035b08
Reviewed-on: https://review.monogon.dev/c/monogon/+/2583
Reviewed-by: Lorenz Brun <lorenz@monogon.tech>
Tested-by: Jenkins CI

WORKSPACE

diff --git a/WORKSPACE b/WORKSPACE
index 96372c6..8bc9c00 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -151,6 +151,7 @@
     patches = [
         "//third_party:rust-uefi-platform.patch",
         "//third_party:rust-prost-nostd.patch",
+        "//third_party:rust-reproducibility.patch",
     ],
     sha256 = "c46bdafc582d9bd48a6f97000d05af4829f62d5fee10a2a3edddf2f3d9a232c1",
     urls = ["https://github.com/bazelbuild/rules_rust/releases/download/0.28.0/rules_rust-v0.28.0.tar.gz"],