You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Herve Boutemy (Jira)" <ji...@apache.org> on 2020/01/18 17:59:00 UTC
[jira] [Commented] (MSOURCES-126) reproducible IT failing since
January 1st 2020
[ https://issues.apache.org/jira/browse/MSOURCES-126?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17018661#comment-17018661 ]
Herve Boutemy commented on MSOURCES-126:
----------------------------------------
tested on a VM forcing date to get reproducible-1.0-sources.jar as built in 2019-12-18 and 2020-01-18, then see what is the difference between the 2 archives using diffoscope:
{noformat}$ diffoscope reproducible-20191218/target/reproducible-1.0-sources.jar reproducible-20200118/target/reproducible-1.0-sources.jar
--- reproducible-20191218/target/reproducible-1.0-sources.jar
+++ reproducible-20200118/target/reproducible-1.0-sources.jar
├── zipinfo -v {}
│ @@ -366,15 +366,15 @@
│ minimum file system compatibility required: MS-DOS, OS/2 or NT FAT
│ minimum software version required to extract: 2.0
│ compression method: deflated
│ compression sub-type (deflation): normal
│ file security status: not encrypted
│ extended local header: no
│ file last modified on (DOS date/time): 2019 Aug 21 18:28:52
│ - 32-bit CRC value (hex): aeabb55c
│ + 32-bit CRC value (hex): 62b3bac9
│ compressed size: 129 bytes
│ uncompressed size: 183 bytes
│ length of filename: 15 characters
│ length of extra field: 0 bytes
│ length of file comment: 0 characters
│ disk number on which file begins: disk 1
│ apparent file type: binary
├── META-INF/NOTICE
│ @@ -1,8 +1,8 @@
│
│ Test for reproducibility of jar
│ -Copyright 2019 The Apache Software Foundation
│ +Copyright 2020 The Apache Software Foundation
│
│ This product includes software developed at
│ The Apache Software Foundation (http://www.apache.org/).{noformat}
generated META-INF/NOTICE contains current year...
> reproducible IT failing since January 1st 2020
> ----------------------------------------------
>
> Key: MSOURCES-126
> URL: https://issues.apache.org/jira/browse/MSOURCES-126
> Project: Maven Source Plugin
> Issue Type: Bug
> Affects Versions: 3.2.1
> Reporter: Herve Boutemy
> Priority: Major
> Fix For: 3.2.2
>
>
> {noformat}[INFO] Building: reproducible/pom.xml
> [INFO] run post-build script verify.groovy
> [INFO] reproducible/pom.xml ............................. FAILED (2.2 s)
> [INFO] The post-build script did not succeed. assert buf.startsWith( "reproducible-1.0-sources.jar sha1 = 3a3687b063cfc164fbbccd1b9573b4232f540e8a" )
> | |
> | false
> reproducible-1.0-sources.jar sha1 = 499c6f39564643f1e55da33967121fc56fe24537{noformat}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)