You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@jackrabbit.apache.org by "Konrad Windszus (Jira)" <ji...@apache.org> on 2020/06/24 20:37:00 UTC
[jira] [Updated] (JCRVLT-439) Support reproducible builds
[ https://issues.apache.org/jira/browse/JCRVLT-439?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Konrad Windszus updated JCRVLT-439:
-----------------------------------
Description:
According to http://maven.apache.org/guides/mini/guide-reproducible-builds.html
# project needs to derive from ASF parent 23 (/) for the newest plugins
# project needs a timestamp property (x)
# configure bnd-maven-plugin (https://github.com/bndtools/bnd/tree/master/maven/bnd-maven-plugin#reproducible-builds) (/)
It would be good to adjust https://dist.apache.org/repos/dist/dev/jackrabbit/check-release.sh to also upload buildinfo with https://github.com/apache/maven-artifact-plugin.
was:
According to http://maven.apache.org/guides/mini/guide-reproducible-builds.html
# project needs to derive from ASF parent 23 (/) for the newest plugins
# project needs a timestamp property (x)
# configure bnd-maven-plugin (https://github.com/bndtools/bnd/tree/master/maven/bnd-maven-plugin#reproducible-builds) (/)
It would be good to adjust https://dist.apache.org/repos/dist/dev/jackrabbit/check-release.sh to also check reproducability with https://github.com/apache/maven-studies/tree/maven-buildinfo-plugin. At the same time the staged repository could be cross-checked.
> Support reproducible builds
> ---------------------------
>
> Key: JCRVLT-439
> URL: https://issues.apache.org/jira/browse/JCRVLT-439
> Project: Jackrabbit FileVault
> Issue Type: Improvement
> Components: Misc
> Reporter: Konrad Windszus
> Priority: Major
> Fix For: 3.4.6
>
>
> According to http://maven.apache.org/guides/mini/guide-reproducible-builds.html
> # project needs to derive from ASF parent 23 (/) for the newest plugins
> # project needs a timestamp property (x)
> # configure bnd-maven-plugin (https://github.com/bndtools/bnd/tree/master/maven/bnd-maven-plugin#reproducible-builds) (/)
> It would be good to adjust https://dist.apache.org/repos/dist/dev/jackrabbit/check-release.sh to also upload buildinfo with https://github.com/apache/maven-artifact-plugin.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)