Hash-code of lambda function code file changes if run in diffrent shell/os

[hashicorp]

Hash-code of lambda function code file changes if run in diffrent shell/os

[mf-lit]

@wadhekarpankaj
I just ran foul of this, but found that the issue was down to permissions on the source files.

On one ubuntu host the source file had 0664 permissions, whilst on the other it had 0644. These read-write permissions aren't tracked by git, hence it was possible for them to be different between hosts. However, these permissions are stored in the resultant zip file.

I've not tried this on Windows, but I imagine it would be difficult (if not impossible) to get identical zip files as the permissions models are so different.

I don't think this is a terraform (or provider issue) really, it's just that we're stretching the usage of terraform a little far expecting it to create perfectly reproducible zip files across multiple platforms. It would be better to have some other tooling managing the zip files in an earlier part of the pipeline.

[wadhekarpankaj]

Hello @mf-lit ,
Thank you for your response.
I do agree with you regarding git not tracking file permissions.
I am also doing a few experiments to figure out how I can do this with the existing capabilities of terraform. I can try to avoid zipping or try another approach for the same.

Regards,
Pankaj

[ThinkBriK]

Actually I think there is even a PR that as never been reviewed for this issue, see #47

[chrisbloe]

I think this should be closed as a duplicate of #34 ?

[asaf-kali]

Adding output_file_mode = "0644" (or any other value) to the "archive_file" solved this for me, as the default file mode is different on different OS, causing the file hash to change.