commit c4e74d1e531b06d2c8be2fd7c265a14abbd2fc4f
author Lukacs Berki <lberki@google.com> Tue Nov 10 15:28:00 2015 +0000
committer Dmitry Lomov <dslomov@google.com> Wed Nov 11 13:06:37 2015 +0000
tree b4e943736e788db81088743bc32b271e6f8f91dd
parent 8a3622e2595a6e728ed52c0a2d80c75e46916078

Make building Bazel more hermetic.

The -X option removes UID/GID information from the zip file, which of course is non-hermetic. There is still some weirdness with install_base_key, but I couldn't figure out what that is: the files that are checksummed are always the same and they are in the same order.

--
MOS_MIGRATED_REVID=107484288

src/package-bazel.sh

diff --git a/src/package-bazel.sh b/src/package-bazel.sh
index 9181d81..27d0f5e 100755
--- a/src/package-bazel.sh
+++ b/src/package-bazel.sh
@@ -42,4 +42,4 @@
   (cd ${PACKAGE_DIR}/embedded_tools && unzip -q ${WORKDIR}/${EMBEDDED_TOOLS})
 fi
 
-(cd ${PACKAGE_DIR}; zip -qrD ${WORKDIR}/${OUT} *)
+(cd ${PACKAGE_DIR} && find . -type f | sort | zip -qDX@ ${WORKDIR}/${OUT})