[MPOM-229] make build reproducible by default

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: ASF-21
• Fix Version/s: ASF-22
• Component/s: asf
• Assignee: Herve Boutemy
• Reporter: Herve Boutemy
• Created: 21/Dec/19 17:32
• Updated: 11/Jul/21 15:17
• Resolved: 22/Dec/19 10:46

Description

Plugins are reproducible since MPOM-224

But without project.build.outputTimestamp property, the reproducible mode is not activated: defining a value in ASF parent POM will de-facto activate reproducible builds not only for the POM but also for any project that uses the POM as parent.

Child projects can define their own value of project.build.outputTimestamp property (that will automatically be updated by maven-release-plugin, thanks to MPOM-228), to have their own tmestamp instead of the value that will be inherited.

To deactivate Reproducible Builds, Child projects can also define the property with a 1-character value.

Issue Links

• depends upon: MPOM-224 upgrade jar/source/assembly plugins for Reproducible Builds
• depends upon: MPOM-228 upgrade maven-release-plugin to 3.0.0-M1 for project.build.outputTimestamp automatic update
• is broken by: MPOM-255 Enforce local property "project.build.outputTimestamp" for reproducible builds