apk-tools scripts db preventing reproducible docker builds
When you pull an Alpine Docker image and add a package, the
/lib/apk/db/scripts.tar archive is updated with timing based on the current timestamp. Building multiple images using the same Dockerfile hence generates images which are not identical.
Similar to MR !63 (closed) (io_archive: Use SOURCE_DATE_EPOCH for meta files instead of current time) it would be great to have this timestamp based on SOURCE_DATE_EPOCH.
Suggestion: Perhaps change this behaviour by using the
apk_get_build_time() introduced based on the above mentioned MR in src/database.c instead of
time_t now = time(NULL)?