nordic-dev.net/nixpkgs
nordic-dev.net/nixpkgs
2
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-02-24 05:00:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

mkosi: apply verity seed patch to systemd

Browse Source 
This patch enables setting the a seed for systemd repart, which is usually
non-deterministic. It enables reproducible builds with mkosi.

Co-authored-by: Malte Poll <mp@edgeless.systems>
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
This commit is contained in:
Paul Meyer 2023-08-25 13:14:15 +02:00
parent c7d925bbe5
commit 123eeffafc
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
pkgs/tools/virtualization/mkosi/default.nix
View File

@ -1,5 +1,6 @@
{ lib
, fetchFromGitHub
, fetchpatch
, stdenv
, python3
, bubblewrap
@ -21,7 +22,15 @@
let
# For systemd features used by mkosi, see
# https://github.com/systemd/mkosi/blob/19bb5e274d9a9c23891905c4bcbb8f68955a701d/action.yaml#L64-L72
systemdForMkosi = systemd.override {
systemdForMkosi = (systemd.overrideAttrs (oldAttrs: {
patches = oldAttrs.patches ++ [
# Enable setting a deterministic verity seed for systemd-repart. Remove when upgrading to systemd 255.
(fetchpatch {
url = "https://github.com/systemd/systemd/commit/81e04781106e3db24e9cf63c1d5fdd8215dc3f42.patch";
hash = "sha256-KO3poIsvdeepPmXWQXNaJJCPpmBb4sVmO+ur4om9f5k=";
})
];
})).override {
withRepart = true;
withBootloader = true;
withSysusers = true;