fixup! ci: Added nightly reprobuild test

Author: cdecker

.github/workflows/repro.yaml

@@ -19,6 +19,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          submodules: recursive
 
       - name: Build base image
         run: |
@@ -71,7 +73,8 @@ jobs:
 
       - name: Build with jammy
         run: |
-          docker run --rm -v $(pwd):/repo cl-repro-jammy
+          docker run --rm -v $(pwd):/repo cl-repro-jammy bash -c "git clone /repo . && uv sync --all-extras --all-groups && uv run tools/repro-build.sh --force-mtime=2000-01-01 && cp *.xz /repo/release/"
+
 
       - name: Generate checksums
         run: |
@@ -111,7 +114,7 @@ jobs:
 
       - name: Build with jammy
         run: |
-          docker run --rm -v $(pwd):/repo cl-repro-jammy
+          docker run --rm -v $(pwd):/repo cl-repro-jammy bash -c "git clone /repo . && uv sync --all-extras --all-groups && uv run tools/repro-build.sh --force-mtime=2000-01-01 && cp *.xz /repo/release/"
 
       - name: Generate checksums
         run: |

contrib/reprobuild/Dockerfile.focal

@@ -26,11 +26,9 @@ RUN apt-get update \
 	unzip \
 	wget \
 	git \
-	zip
-
-# Ensure correct ownership
-RUN chown root:root /etc/sudoers
-RUN chown root:root /usr/lib/sudo/sudoers.so
+        zip \
+    && rm -rf /var/cache/apt/archives /var/lib/apt/lists/*.
+RUN echo "ALL ALL=(ALL)       NOPASSWD: ALL" > /etc/sudoers
 
 # Download and install jq from official repository
 RUN wget -O /usr/local/bin/jq https://github.com/jqlang/jq/releases/download/jq-1.6/jq-linux64 \

contrib/reprobuild/Dockerfile.jammy

@@ -23,16 +23,17 @@ RUN apt-get update \
 	libsodium23 \
 	libtool \
 	m4 \
-	sudo \
 	unzip \
 	wget \
 	jq \
 	zip
 
-# Ensure correct ownership
-RUN chown root:root /etc/sudoers
-RUN chown root:root /etc/sudo.conf
-RUN chown root:root /usr/libexec/sudo/sudoers.so
+RUN printf 'root ALL=(ALL) ALL\n%%sudo ALL=(ALL) ALL\n' > /etc/sudoers && \
+    chmod 0440 /etc/sudoers
+
+# Since we're running as root, create a sudo wrapper that's a no-op
+RUN printf '#!/bin/sh\nexec "$@"\n' > /usr/local/bin/sudo && \
+    chmod +x /usr/local/bin/sudo
 
 # Install Python3.10 (more reproducible than relying on python3-setuptools)
 RUN git clone https://github.com/pyenv/pyenv.git /root/.pyenv && \