[jira] [Resolved] (GROOVY-9628) Initial support for reproducible builds

["Paul King (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/GROOVY-9628?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Paul King resolved GROOVY-9628.
-------------------------------
    Fix Version/s: 4.0.0-beta-1
       Resolution: Fixed

I have applied the same approach as Gradle which seems to use a fixed date in the release manager's timezone. I am unsure whether we should just use GMT in order to get identical bytes. I'll leave as is until we can test. If we do change, we'll also have to do that for Gradle.

> Initial support for reproducible builds
> ---------------------------------------
>
>                 Key: GROOVY-9628
>                 URL: https://issues.apache.org/jira/browse/GROOVY-9628
>             Project: Groovy
>          Issue Type: Improvement
>            Reporter: Paul King
>            Assignee: Paul King
>            Priority: Major
>             Fix For: 4.0.0-beta-1
>
>
> It would be good if two folks on different operating systems and at different times build a Groovy distribution from the same tag, that they will get bit for bit the same artifacts.
> For info, see:
> https://en.wikipedia.org/wiki/Reproducible_builds
> https://reproducible-builds.org/
> Out of scope:
> * No ability to adjust default timestamp
> * No .buildinfo file will be generated (initially)
> * Not catering for if different JDKs are used (that sort of info would be part of .buildinfo)



--
This message was sent by Atlassian Jira
(v8.3.4#803005)