Support reproducible XZ Linux archives without changing runtime contents

This commit is contained in:
karl committed 2026-10-13 12:31:17 +02:00
1 parent 193ab08f62
commit a8080f061f
4 files changed
+33 -5

No files matched your search

+1 -1
View File
@@ -25,7 +25,7 @@ def sha256(path):
def extract_checked(archive_path, destination):
from package_linux import safe_name
with tarfile.open(archive_path, "r:gz") as archive:
with tarfile.open(archive_path, "r:*") as archive:
members = archive.getmembers()
if not 1 <= len(members) <= 128 or len({item.name for item in members}) != len(members):
raise ValueError("Invalid candidate member inventory")