about summary refs log tree commit diff
diff options
context:
space:
mode:
authorK900 <me@0upti.me>2024-06-16 17:20:08 +0300
committerGitHub <noreply@github.com>2024-06-16 17:20:08 +0300
commitc3b89ba0b3d838554dd9cd420219b7edb2529d4f (patch)
tree2d40728516530c895dbfb5d003f0dc4125e848e7
parent5e50f86a88a79f0201d2a5db9fbed91cef2ae2f4 (diff)
parent818bb3a82939a7af88fc1a0af199d5157c61bc05 (diff)
Merge pull request #318875 from athre0z/kernel-build-ids
linuxPackages: bring back GNU build ID for kernels
-rw-r--r--pkgs/os-specific/linux/kernel/manual-config.nix6
1 files changed, 0 insertions, 6 deletions
diff --git a/pkgs/os-specific/linux/kernel/manual-config.nix b/pkgs/os-specific/linux/kernel/manual-config.nix
index cb75f013b6241..3060ff9ef775a 100644
--- a/pkgs/os-specific/linux/kernel/manual-config.nix
+++ b/pkgs/os-specific/linux/kernel/manual-config.nix
@@ -172,12 +172,6 @@ let
         # Ensure that depmod gets resolved through PATH
         sed -i Makefile -e 's|= /sbin/depmod|= depmod|'
 
-        # Don't include a (random) NT_GNU_BUILD_ID, to make the build more deterministic.
-        # This way kernels can be bit-by-bit reproducible depending on settings
-        # (e.g. MODULE_SIG and SECURITY_LOCKDOWN_LSM need to be disabled).
-        # See also https://kernelnewbies.org/BuildId
-        sed -i Makefile -e 's|--build-id=[^ ]*|--build-id=none|'
-
         # Some linux-hardened patches now remove certain files in the scripts directory, so the file may not exist.
         [[ -f scripts/ld-version.sh ]] && patchShebangs scripts/ld-version.sh