oci_tarball: fix user and group to numeric 0

Tar saves not only the time, but also the user and group. Applied suggestion from for these two pieces of information from: http://h2.jaguarpaw.co.uk/posts/reproducible-tar/.
bazel-contrib · Oct 2, 2023 · 005a4d4 · 005a4d4
1 parent 96582a4
commit 005a4d4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/oci/private/tarball.sh.tpl b/oci/private/tarball.sh.tpl
@@ -35,4 +35,4 @@ layers="${LAYERS}" \
         --output-format json > "${STAGING_DIR}/manifest.json"
 
 # TODO: https://github.com/bazel-contrib/rules_oci/issues/217
-tar -C "${STAGING_DIR}" -cf "${TARBALL_PATH}" --mtime='2000-01-01' manifest.json blobs
+tar -C "${STAGING_DIR}" -cf "${TARBALL_PATH}" --mtime='2000-01-01' --owner=0 --group=0 --numeric-owner manifest.json blobs