From a29f82670b96380a0f148a9bea223e603802e47b Mon Sep 17 00:00:00 2001
From: Konstantin Akimov <knstqq@gmail.com>
Date: Wed, 3 Apr 2024 23:41:31 +0700
Subject: [PATCH] guix: exclude debug symbols for apple from list of hash sums
 due to its undeterminism

---
 contrib/guix/guix-attest | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/contrib/guix/guix-attest b/contrib/guix/guix-attest
index 7c71ff3508..a64b659fe7 100755
--- a/contrib/guix/guix-attest
+++ b/contrib/guix/guix-attest
@@ -192,6 +192,7 @@ mkdir -p "$outsigdir"
 
     if (( ${#noncodesigned_fragments[@]} )); then
         cat "${noncodesigned_fragments[@]}" \
+            | grep -v apple-darwin-debug.tar \
             | sort -u \
             | sort -k2 \
             | basenameify_SHA256SUMS \
@@ -220,6 +221,7 @@ mkdir -p "$outsigdir"
         # Note: all.SHA256SUMS attests to all of $sha256sum_fragments, but is
         #       not needed if there are no $codesigned_fragments
         cat "${sha256sum_fragments[@]}" \
+            | grep -v apple-darwin-debug.tar \
             | sort -u \
             | sort -k2 \
             | basenameify_SHA256SUMS \