Arnout Engelen

Good to have validation 'from the real world' here! Would you be interested in preparing a PR?

No, it's just that I didn't check these in ;). The reason for that is that those diffs add up to 2.6G of data - they'd quickly make this git...

> ghc isn't reproducible at all Interestingly *some* haskell packages appear to be reproducible, but indeed a ton of them aren't - refs https://github.com/NixOS/nixpkgs/issues/151347 > so perhaps ignore the ones...

I have updated this PR, fixing the merge conflict that appeared in the mean time. Much obliged if someone could have a look ;)

> We should create a JIRA for this btw. Created https://issues.apache.org/jira/browse/SOLR-16796 There's probably more to improve from here, such as: * Generating SBOMs 'per artifact' rather than one big one...

> Fetchers such as `fetchzip` since fetchzip is not a nix builtin but [implemented in nixpkgs](https://github.com/NixOS/nixpkgs/blob/master/pkgs/build-support/fetchzip/default.nix) ([based on fetchurl](https://github.com/NixOS/nixpkgs/blob/master/pkgs/build-support/fetchurl/default.nix)), this issue should perhaps be moved to the nixpkgs repo instead?

> What do you think? Hmm, indeed curl in nixpkgs [does reference `NIX_SSL_CERT_FILE`](https://github.com/NixOS/nixpkgs/blob/master/pkgs/tools/networking/curl/default.nix#L149) in a comment - not sure how this is intended to fit together. https://github.com/NixOS/nix/issues/3155 and https://discourse.nixos.org/t/nix-cannot-find-my-custom-ssl-certificate/27361/5 might...

Do we have anyone in the community who uses consul? If not perhaps we should perhaps add a note that this component is looking for a maintainer?

> Thanks @raboof , can you put a description for detailing the purpose of this pull request ? (updated the commit and PR message)

(looks like this missed the train for 3.3.4 but will likely be backported to LTS in 3.3.5)