Share feedback
Answers are generated based on the documentation.

在 GitHub Actions 中构建可复现的镜像

Table of contents

SOURCE_DATE_EPOCH 是一个标准化的环境变量， 用于指示构建工具产生可复现的输出。为构建设置该环境变量后， 镜像索引、配置以及文件元数据中的时间戳都会反映为指定的 Unix 时间。

要在 GitHub Actions 中设置该环境变量， 可使用构建步骤内置的 env 属性。

Unix epoch timestamps

下面的示例将 SOURCE_DATE_EPOCH 变量设置为 0，即 Unix epoch 时间。

name: ci

on:
  push:

jobs:
  docker:
    runs-on: ubuntu-latest
    steps:
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v4

      - name: Build
        uses: docker/build-push-action@v7
        with:
          tags: user/app:latest
        env:
          SOURCE_DATE_EPOCH: 0
name: ci

on:
  push:

jobs:
  docker:
    runs-on: ubuntu-latest
    steps:
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v4

      - name: Build
        uses: docker/bake-action@v7
        env:
          SOURCE_DATE_EPOCH: 0

Git commit timestamps

下面的示例将 SOURCE_DATE_EPOCH 设置为 Git 提交时间戳。

name: ci

on:
  push:

jobs:
  docker:
    runs-on: ubuntu-latest
    steps:
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v4

      - name: Get Git commit timestamps
        run: echo "TIMESTAMP=$(git log -1 --pretty=%ct)" >> $GITHUB_ENV

      - name: Build
        uses: docker/build-push-action@v7
        with:
          tags: user/app:latest
        env:
          SOURCE_DATE_EPOCH: ${{ env.TIMESTAMP }}
name: ci

on:
  push:

jobs:
  docker:
    runs-on: ubuntu-latest
    steps:
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v4

      - name: Get Git commit timestamps
        run: echo "TIMESTAMP=$(git log -1 --pretty=%ct)" >> $GITHUB_ENV

      - name: Build
        uses: docker/bake-action@v7
        env:
          SOURCE_DATE_EPOCH: ${{ env.TIMESTAMP }}

Additional information

有关 BuildKit 中 SOURCE_DATE_EPOCH 支持的更多信息， 请参阅 BuildKit documentation。