From 0c5664f660dd7244aeb7a54de4ffa4e6e4e9cd53 Mon Sep 17 00:00:00 2001 From: Philip Taron Date: Tue, 6 Oct 2026 11:40:48 -0700 Subject: [PATCH] vmTools: correct comment about Ubuntu snapshot hashes The comment claimed the snapshot service returns the same data for 22.04 whatever the timestamp. That only holds for the frozen release pockets; the -updates and -security lists change, as the last snapshot bump showed. Assisted-by: Claude Code (claude-opus-5-5) --- pkgs/build-support/vm/default.nix | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/pkgs/build-support/vm/default.nix b/pkgs/build-support/vm/default.nix index 50881e8ab4179..22da6a6b3aea0 100644 --- a/pkgs/build-support/vm/default.nix +++ b/pkgs/build-support/vm/default.nix @@ -1269,8 +1269,9 @@ let # The set of supported Dpkg-based distributions. debDistros = { - # Ubuntu's snapshot service returns the same data for 22.04 regardless of the timestamp in the - # URL. The hashes don't change between mirror://ubuntu and snapshot.ubuntu.com, so this is fine. + # The Ubuntu images pin package lists from snapshot.ubuntu.com. A release pocket (e.g. `jammy`) + # is frozen, so its hash stays put when the snapshot timestamp moves; the `-updates` and + # `-security` pockets keep changing, so their hashes need refreshing along with the timestamp. ubuntu2204i386 = { name = "ubuntu-22.04-jammy-i386"; fullName = "Ubuntu 22.04 Jammy (i386)";