You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Michael Osipov (Jira)" <ji...@apache.org> on 2020/02/01 18:52:00 UTC

[jira] [Commented] (MNG-6789) Make Maven distribution build Reproducible

    [ https://issues.apache.org/jira/browse/MNG-6789?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17028187#comment-17028187 ] 

Michael Osipov commented on MNG-6789:
-------------------------------------

[~hboutemy], do you think it is worth to do this:

{noformat}
diff --git a/maven-core/src/main/resources/org/apache/maven/messages/build.properties b/maven-core/src/main/resources/org/apache/maven/messages/build.properties
index 20f386ba0..8725e70bd 100644
--- a/maven-core/src/main/resources/org/apache/maven/messages/build.properties
+++ b/maven-core/src/main/resources/org/apache/maven/messages/build.properties
@@ -16,6 +16,7 @@
 # under the License.

 buildNumber=${buildNumber}
+timestamp=${project.build.outputTimestamp}
 version=${project.version}
 distributionId=${distributionId}
 distributionShortName=${distributionShortName}
{noformat}

?

> Make Maven distribution build Reproducible
> ------------------------------------------
>
>                 Key: MNG-6789
>                 URL: https://issues.apache.org/jira/browse/MNG-6789
>             Project: Maven
>          Issue Type: Task
>          Components: Bootstrap &amp; Build
>    Affects Versions: 3.6.2
>            Reporter: Herve Boutemy
>            Assignee: Herve Boutemy
>            Priority: Major
>             Fix For: 3.6.3
>
>
> with [Maven native Reproducible Builds|https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=74682318] near available, it would be great to have Maven itself being the first Maven project that gets Reproducible Builds
> there is already a proof of concept available in reproducible branch: https://github.com/apache/maven/tree/reproducible with corresponding Jenkins build https://builds.apache.org/view/M-R/view/Maven/job/maven-box/job/maven/job/reproducible/
> once maven-jar-plugin, maven-assembly-plugin and maven-source-plugin have a reproducible release available, the last 2 plugins that bring non reproducible result in this build are plexus-component-metadata 2.0.0 and sisu-maven-plugin



--
This message was sent by Atlassian Jira
(v8.3.4#803005)