[GitHub] [sis] desruisseaux commented on a diff in pull request #36: enable Reproducible Builds

["desruisseaux (via GitHub)" <gi...@apache.org>]

desruisseaux commented on code in PR #36:
URL: https://github.com/apache/sis/pull/36#discussion_r1266439346


##########
pom.xml:
##########
@@ -545,6 +545,7 @@
        =================================================================== -->
   <properties>
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+    <project.build.outputTimestamp>2023-07-15T16:42:39Z</project.build.outputTimestamp>

Review Comment:
   Thanks. But what would be the maintenance mechanism? Would it be necessary to update this line manually during merges?
   
   Alternatively (I know it is a much larger debate), I wonder why reproductive build proponents insist on bit-by-bit reproducibility instead of creating a `jar-diff` tools which ignores the order of entries in the JAR files, and ignores a small selected set of `META-INF/MANIFEST.MF` entries such as the build timestamp?



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@sis.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org