guix: exclude debug symbols for apple from list of hash sums due to i…

…ts undeterminism
dashpay · Apr 3, 2024 · a29f826 · a29f826
1 parent e1532db
commit a29f826
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/contrib/guix/guix-attest b/contrib/guix/guix-attest
@@ -192,6 +192,7 @@ mkdir -p "$outsigdir"
 
     if (( ${#noncodesigned_fragments[@]} )); then
         cat "${noncodesigned_fragments[@]}" \
+            | grep -v apple-darwin-debug.tar \
             | sort -u \
             | sort -k2 \
             | basenameify_SHA256SUMS \
@@ -220,6 +221,7 @@ mkdir -p "$outsigdir"
         # Note: all.SHA256SUMS attests to all of $sha256sum_fragments, but is
         #       not needed if there are no $codesigned_fragments
         cat "${sha256sum_fragments[@]}" \
+            | grep -v apple-darwin-debug.tar \
             | sort -u \
             | sort -k2 \
             | basenameify_SHA256SUMS \