Uploaded image for project: 'Felix'
  1. Felix
  2. FELIX-6304

bundle:bundle generates non-reproducible JAR archives (timestamps)

Attach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Won't Fix
    • Affects Version/s: maven-bundle-plugin-5.1.1
    • Fix Version/s: None
    • Component/s: Maven Bundle Plugin

      Description

      The JAR archives built by maven-bundle-plugin are not reproducible (as in reproducible builds) because the timestamps of their entries are variable and are using the current system time.

      The maven-jar-plugin supports using a fixed timestamp via the outputTimestamp setting (default: ${project.build.outputTimestamp}) while the maven-bundle-plugin doesn't expose a similar setting.

      Support for reproducible builds in the maven-jar-plugin was added with this commit: https://github.com/apache/maven-jar-plugin/commit/64c5e6530b4712cd95501fffb2de6bb1a202cd89

        Attachments

        Issue Links

          Activity

            People

            • Assignee:
              jbonofre Jean-Baptiste Onofré
              Reporter:
              joschi Jochen Schalanda

              Dates

              • Created:
                Updated:
                Resolved:

                Issue deployment