Adhere to SOURCE_DATE_EPOCH specification to fix reproducibility

Reproducible builds are ones where the same source code input produces the same binary output. This helps with caching, authentication of binaries, etc. SOURCE_DATE_EPOCH is a standardised variable which allows the build setup to specify date and time to be used in place of "current time" such that it will not change unless the source code changes. See: https://reproducible-builds.org/specs/source-date-epoch/ https://reproducible-builds.org/docs/source-date-epoch/ Signed-off-by: Oleksandr Hnatiuk <[email protected]>
aws · Aug 21, 2024 · d69fb96 · d69fb96
1 parent b2bdade
commit d69fb96
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/Makefile b/Makefile
@@ -15,7 +15,12 @@ ifndef CWAGENT_BUILD_MODE
 CWAGENT_BUILD_MODE=default
 endif
 
+ifdef SOURCE_DATE_EPOCH
+BUILD := $(shell date -u -d @$(SOURCE_DATE_EPOCH) +"%Y-%m-%dT%H:%M:%SZ")
+else
 BUILD := $(shell date -u +"%Y-%m-%dT%H:%M:%SZ")
+endif
+
 LDFLAGS = -s -w
 LDFLAGS +=  -X github.com/aws/amazon-cloudwatch-agent/cfg/agentinfo.VersionStr=${VERSION}
 LDFLAGS +=  -X github.com/aws/amazon-cloudwatch-agent/cfg/agentinfo.BuildStr=${BUILD}