commit 4f00f90934c3eb969b1490582b8194d8706a3e81
author Serge Bazanski <serge@monogon.tech> Tue Dec 19 13:54:04 2023 +0100
committer Lorenz Brun <lorenz@monogon.tech> Thu Dec 21 14:10:22 2023 +0000
tree 341594cd4a4768c155777032f04c7f8558723d30
parent 7f14f91765c6b32a95aac5d2b40a25bba1eae695

rust, toolchains: make EFI builds reproducible

This makes Rust EFI builds bit-for-bit reproducible by stripping
BuildConfiguration dependent output paths and timestamps from target
binaries and intermediary files.

Change-Id: I845be61f32ed304883460fca9006aa398d035b08
Reviewed-on: https://review.monogon.dev/c/monogon/+/2583
Reviewed-by: Lorenz Brun <lorenz@monogon.tech>
Tested-by: Jenkins CI

build/toolchain/llvm-efi/cc_toolchain_config.bzl

diff --git a/build/toolchain/llvm-efi/cc_toolchain_config.bzl b/build/toolchain/llvm-efi/cc_toolchain_config.bzl
index 697b675..f9fd239 100644
--- a/build/toolchain/llvm-efi/cc_toolchain_config.bzl
+++ b/build/toolchain/llvm-efi/cc_toolchain_config.bzl
@@ -126,6 +126,7 @@
                             "-Wl,-entry:efi_main",
                             "-Wl,-subsystem:efi_application",
                             "-Wl,/BASE:0x0",
+                            "-Wl,/Brepro",
                             "-nostdlib",
                             "build/toolchain/llvm-efi/fltused.o",
                         ],