Uploaded image for project: 'Felix'
  1. Felix
  2. FELIX-6304

bundle:bundle generates non-reproducible JAR archives (timestamps)

    XMLWordPrintableJSON

    Details

      Description

      The JAR archives built by maven-bundle-plugin are not reproducible (as in reproducible builds) because the timestamps of their entries are variable and are using the current system time.

      The maven-jar-plugin supports using a fixed timestamp via the outputTimestamp setting (default: ${project.build.outputTimestamp}) while the maven-bundle-plugin doesn't expose a similar setting.

      Support for reproducible builds in the maven-jar-plugin was added with this commit: https://github.com/apache/maven-jar-plugin/commit/64c5e6530b4712cd95501fffb2de6bb1a202cd89

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                joschi Jochen Schalanda
              • Votes:
                1 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated: