Uploaded image for project: 'Maven JAR Plugin'
  1. Maven JAR Plugin
  2. MJAR-263

Reproducible Builds: make entries in output jar files reproducible (order + timestamp)

    XMLWordPrintableJSON

Details

    • New Feature
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 3.2.0
    • None
    • None

    Description

      since a jar file is a zip file, entries order and timestamp are a natural source of non Reproducible Builds: https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=74682318

      notice: on MANIFEST.MF content, MJAR-262 is expected to make the default content reproducible

      Attachments

        Issue Links

          causes

          Bug - A problem which impairs or prevents the functions of the product. MJAR-300 maven jar plugin does not interpret build outputTimestamp correctly

          • Major - Major loss of function.
          • Open
          Is contained by

          New Feature - A new feature of the product, which has yet to be developed. MNG-6276 Support Reproducible Builds (https://reproducible-builds.org)

          • Major - Major loss of function.
          • Closed
          is depended upon by

          Task - A task that needs to be done. MNG-6789 Make Maven distribution build Reproducible

          • Major - Major loss of function.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. MJAR-275 outputTimestamp not applied to module-info; breaks reproducible builds

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. MSHADE-347 Reproducible Builds: make entries in output jar files reproducible

          • Major - Major loss of function.
          • Closed
          supercedes

          New Feature - A new feature of the product, which has yet to be developed. MJAR-257 Option to strip non-deterministic aspects of jars post-creation

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          links to

          Web Link GitHub Pull Request #53

          There are no Sub-Tasks for this issue.

          Activity

            People

              hboutemy Herve Boutemy
              hboutemy Herve Boutemy
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: