Build bindings reproducibly

`glob` output isn't guaranteed to be in any particular order, so `_sodium.*.so` wasn't always reproducible.
pyca · Aug 26, 2024 · 4427470 · 4427470
1 parent 56523d2
commit 4427470
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/src/bindings/build.py b/src/bindings/build.py
@@ -22,12 +22,16 @@
 __all__ = ["ffi"]
 
 
-HEADERS = glob.glob(
-    os.path.join(os.path.abspath(os.path.dirname(__file__)), "*.h")
+HEADERS = sorted(
+    glob.glob(os.path.join(os.path.abspath(os.path.dirname(__file__)), "*.h"))
 )
 
-MINIMAL_HEADERS = glob.glob(
-    os.path.join(os.path.abspath(os.path.dirname(__file__)), "minimal", "*.h")
+MINIMAL_HEADERS = sorted(
+    glob.glob(
+        os.path.join(
+            os.path.abspath(os.path.dirname(__file__)), "minimal", "*.h"
+        )
+    )
 )