feat: add SOURCE_DATE_EPOCH=0 byte compilation layer

Author: autumnjolitz

.github/workflows/development.yml

@@ -131,7 +131,7 @@ jobs:
           echo IMAGE_TAG_SAFE="$(echo "$IMAGE_TAG" | base64 -w 0 )"| tee -a "$GITHUB_OUTPUT"
           echo IMAGE_BUILDROOT_TAG_SAFE="$(echo "${IMAGE_TAG}-buildroot" | base64 -w 0 )"| tee -a "$GITHUB_OUTPUT"
           echo 'EXAMPLE_IMAGE_TAG='"${IMAGE_TAG}-example1" | tee -a "$GITHUB_OUTPUT"
-          echo EXAMPLE_IMAGE_TAG_SAFE="$(echo "${EXAMPLE_IMAGE_TAG}" | base64 -w 0 )"| tee -a "$GITHUB_OUTPUT"
+          echo EXAMPLE_IMAGE_TAG_SAFE="$(echo "${IMAGE_TAG}-example1" | base64 -w 0 )"| tee -a "$GITHUB_OUTPUT"
           echo REPOSITORY="${REPOSITORY}"| tee -a "$GITHUB_OUTPUT"
           echo REPOSITORY_SAFE="$(echo "${REPOSITORY}" | base64 -w 0 )"| tee -a "$GITHUB_OUTPUT"
           echo BASE_IMAGE_DIGEST="$(digest_of "$SOURCE_IMAGE")"| tee -a "$GITHUB_OUTPUT"
@@ -318,25 +318,24 @@ jobs:
               --src-tls-verify=false \
               --quiet \
               --multi-arch all \
-                docker://${{ steps.image_env.outputs.IMAGE_TAG }} \
+                docker://${{ steps.image_env.outputs.IMAGE_TAG }}@${{ steps.runtime.outputs.digest }} \
                 oci-archive://${{ steps.image_env.outputs.IMAGE_HOME }}/image-${{ steps.image_env.outputs.IMAGE_TAG_SAFE }}.tar \
               &
           skopeo copy \
               --src-no-creds \
               --src-tls-verify=false \
               --quiet \
               --multi-arch all \
-                docker://${{ steps.image_env.outputs.IMAGE_TAG }}-buildroot \
+                docker://${{ steps.image_env.outputs.IMAGE_TAG }}-buildroot@${{steps.buildroot.outputs.digest}} \
                 oci-archive://${{ steps.image_env.outputs.IMAGE_HOME }}/image-${{ steps.image_env.outputs.IMAGE_BUILDROOT_TAG_SAFE }}.tar \
               &
           skopeo copy \
               --src-no-creds \
               --src-tls-verify=false \
               --quiet \
               --multi-arch all \
-                docker://${{ steps.image_env.outputs.EXAMPLE_IMAGE_TAG }} \
+                docker://${{ steps.image_env.outputs.EXAMPLE_IMAGE_TAG }}@${{steps.build_test.outputs.digest}} \
                 oci-archive://${{ steps.image_env.outputs.IMAGE_HOME }}/image-${{ steps.image_env.outputs.EXAMPLE_IMAGE_TAG_SAFE }}.tar \
-              &
           wait
           docker stop '${{ steps.setup.outputs.REGISTRY_CONTAINER_ID }}'
 

buildroot/Dockerfile.alpine

@@ -92,6 +92,7 @@ RUN --security=insecure \
 RUN \
     --mount=type=cache,id=pip-cache-${TARGETARCH}${TARGETVARIANT},sharing=shared,target=/root/.cache/pip \
     set -eu ; \
+    export SOURCE_DATE_EPOCH=0 ; \
     chroot-apk add \
         coreutils-env \
         $(apk info -R .python-rundeps | grep -vE ':$') \