[MASSEMBLY-921] Reproducible Builds: make entries in output archive reproducible (order + timestamp)

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.1.1
• Fix Version/s: 3.2.0
• Component/s: maven-archiver
• Assignee: Herve Boutemy
• Reporter: Herve Boutemy
• Created: 13/Sep/19 20:54
• Updated: 02/May/23 06:02
• Resolved: 29/Oct/19 22:00

Description

see Maven Reproducible Builds: https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=74682318

in addition to expected order and timestamp work, we had also to update UID/GID in tar files and file+directory permissions

Issue Links

• breaks: MASSEMBLY-941 file permissions removed during assembly:single since 3.2.0
• causes: MASSEMBLY-986 Minimal default Manifest configuration of jar archiver should be respected
• Is contained by: MNG-6276 Support Reproducible Builds (https://reproducible-builds.org)
• is depended upon by: MNG-6789 Make Maven distribution build Reproducible
• relates to: MSOURCES-120 Reproducible Builds: make entries in output jar files reproducible (order + timestamp)
• links to: plexus-archiver PR #121 prerequisite