guix: Explicitly set umask in build container

A difference in system umask value can cause non-determinism when zip
archives are produced. Set it to a reasonable default.
This commit is contained in:
Carl Dong 2021-02-22 16:22:26 -05:00
parent 1e7dd584a5
commit d98f4593cf

View file

@ -3,6 +3,16 @@ export LC_ALL=C
set -e -o pipefail
export TZ=UTC
# Althought Guix _does_ set umask when building its own packages (in our case,
# this is all packages in manifest.scm), it does not set it for `guix
# environment`. It does make sense for at least `guix environment --container`
# to set umask, so if that change gets merged upstream and we bump the
# time-machine to a commit which includes the aforementioned change, we can
# remove this line.
#
# This line should be placed before any commands which creates files.
umask 0022
if [ -n "$V" ]; then
# Print both unexpanded (-v) and expanded (-x) forms of commands as they are
# read from this file.