From a2917c5bd73e230d9b2cb13ec25250bd36b6d5ad Mon Sep 17 00:00:00 2001
From: edouardparis <m@edouard.paris>
Date: Wed, 4 Dec 2024 17:21:26 +0100
Subject: [PATCH] Add SOURCE_DATE_EPOCH and TAR_OPTIONS for reproducibility

close #1474
close #1479
---
 contrib/release/release.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/contrib/release/release.sh b/contrib/release/release.sh
index 00ee6dde..fc7e52e0 100755
--- a/contrib/release/release.sh
+++ b/contrib/release/release.sh
@@ -25,6 +25,10 @@ create_dir() {
     test -d "$1" || mkdir "$1"
 }
 
+# Determine the reference time used for determinism (overridable by environment)
+export SOURCE_DATE_EPOCH="${SOURCE_DATE_EPOCH:-$(git -c log.showSignature=false log --format=%at -1)}"
+export TAR_OPTIONS="--owner=0 --group=0 --numeric-owner --mtime='@${SOURCE_DATE_EPOCH}' --sort=name"
+
 # We'll use a folder for the builds output and another one for the final assets.
 RELEASE_DIR="$PWD/release_assets"
 BUILD_DIR="$PWD/release_build"