Change 'grub-mkrescue' to honor the 'GRUB_FAT_SERIAL_NUMBER'
environment variable.  That way, the caller can specify a fixed
serial number (instead of the randomly chosen one) to create EFI
images (the 'efi.img' file) that are reproducible bit-for-bit.

Patch by Ludovic Courtès <ludo@gnu.org>.
Mangled (for GRUB 2.04) by Tobias Geerinckx-Rice <me@tobias.gr>.

--- grub-2.04/util/grub-mkrescue.c	2019-05-20 13:01:11.000000000 +0200
+++ grub-2.04/util/grub-mkrescue.c	2019-07-08 23:57:36.912104652 +0200
@@ -809,8 +809,15 @@
       free (efidir_efi_boot);
 
       efiimgfat = grub_util_path_concat (2, iso9660_dir, "efi.img");
-      rv = grub_util_exec ((const char * []) { "mformat", "-C", "-f", "2880", "-L", "16", "-i",
-	    efiimgfat, "::", NULL });
+
+      const char *fat_serial_number = getenv ("GRUB_FAT_SERIAL_NUMBER");
+      const char *mformat_args[] =
+       { "mformat", "-C", "-f", "2880", "-L", "16",
+         fat_serial_number != NULL ? "-N" : "-C",
+         fat_serial_number != NULL ? fat_serial_number : "-C",
+         "-i", efiimgfat, "::", NULL };
+
+      rv = grub_util_exec (mformat_args);
       if (rv != 0)
 	grub_util_error ("`%s` invocation failed\n", "mformat");
       rv = grub_util_exec ((const char * []) { "mcopy", "-s", "-i", efiimgfat, efidir_efi, "::/", NULL });
f='/guix/commit/gnu/packages/kde.scm?id=dc01978288318a8155e2e2657be9b278a754ebac'>commit</a><a href='/guix/diff/gnu/packages/kde.scm?id=dc01978288318a8155e2e2657be9b278a754ebac'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/packages/kde.scm'>
<input type='hidden' name='id' value='dc01978288318a8155e2e2657be9b278a754ebac'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=dc01978288318a8155e2e2657be9b278a754ebac'>root</a>/<a href='/guix/log/gnu?id=dc01978288318a8155e2e2657be9b278a754ebac'>gnu</a>/<a href='/guix/log/gnu/packages?id=dc01978288318a8155e2e2657be9b278a754ebac'>packages</a>/<a href='/guix/log/gnu/packages/kde.scm?id=dc01978288318a8155e2e2657be9b278a754ebac'<tr><td><span title='2021-09-12 22:52:58 -0400'>2021-09-12</span></td><td><a href='/guix/commit/THANKS?id=53f54d4aa252fed425180641f27094600522c4f1'>Thank Christine under her updated name.</a></td><td>Christine Lemmer-Webber</td></tr>
owmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2019-04-04 08:45:30 +0300'>2019-04-04</span></td><td><a href='/guix/commit/gnu/packages/kde.scm?id=ce8964b601bdb70e4eadb2f04a8402d8d4ba83ad'>gnu: Add kdeconnect.</a><span class='msg-avail'>...</span></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2019-02-14 00:13:06 +0100'>2019-02-14</span></td><td><a href='/guix/commit/gnu/packages/kde.scm?id=d3065c87854a102d5435d41aa0a0976d59719fdf'>gnu: Restore copyright header.</a><span class='msg-avail'>...</span></td><td>Marius Bakke</td></tr>
<tr><td><span title='2019-02-12 23:49:02 +0100'>2019-02-12</span></td><td><a href='/guix/commit/gnu/packages/kde.scm?id=bec2a2e10e199d6ee671ec5713bd103242e91b62'>gnu: Move KDE Plasma components to separate module.</a><span class='msg-avail'>...</span></td><td>Marius Bakke</td></tr>
<tr><td><span title='2019-01-28 09:43:53 +0100'>2019-01-28</span></td><td><a href='/guix/commit/gnu/packages/kde.scm?id=818f317a4d3672405f9d6f20f0fd4373c6f86cb2'>gnu: Krita: Update to 4.1.7.101.</a><span class='msg-avail'>...</span></td><td>Björn Höfling</td></tr>
<tr><td><span title='2019-01-26 14:42:06 +0100'>2019-01-26</span></td><td><a href='/guix/commit/gnu/packages/kde.scm?id=92b344dd056fdcc483ae32bc6c5acd5686ed661a'>gnu: libksysguard: Use INVOKE.</a><span class='msg-avail'>...</span></td><td>Ricardo Wurmus</td></tr>