Reproducible deployment

Author: Brutus5000

apps/faf-legacy-deployment/scripts/deploy-coop.py

@@ -30,6 +30,8 @@
 
 import mysql.connector
 
+FIXED_ZIP_TIMESTAMP = (1980, 1, 1, 0, 0, 0)  # year, month, day, hour, min, sec
+
 
 def get_db_connection():
     """Establish and return a MySQL connection using environment variables."""
@@ -109,20 +111,29 @@ def calc_md5(fname):
     return hash_md5.hexdigest()
 
 def zipdir(path, ziph):
-    # ziph is zipfile handle
-
     if not os.path.exists(path):
         print(f"Warning: {path} does not exist, skipping")
         return
 
     if os.path.isdir(path):
         for root, dirs, files in os.walk(path):
+            files.sort()  # deterministic order
+            dirs.sort()   # deterministic order
             for file in files:
-                arcname = os.path.relpath(os.path.join(root, file), start=path)
-                ziph.write(os.path.join(root, file), arcname=arcname)
-
+                full_path = os.path.join(root, file)
+                arcname = os.path.relpath(full_path, start=path)  # preserve folder structure
+                info = zipfile.ZipInfo(arcname, FIXED_ZIP_TIMESTAMP)
+                with open(full_path, "rb") as f:
+                    data = f.read()
+                ziph.writestr(info, data, compress_type=zipfile.ZIP_DEFLATED)
     else:
-        ziph.write(path)
+        # single file outside a directory
+        arcname = os.path.basename(path)
+        info = zipfile.ZipInfo(arcname, FIXED_ZIP_TIMESTAMP)
+        with open(path, "rb") as f:
+            data = f.read()
+        ziph.writestr(info, data, compress_type=zipfile.ZIP_DEFLATED)
+
 
 
 def create_file(conn, mod, fileId, version, name, source, target_dir, old_md5, dryrun):