(tomcat) branch 9.0.x updated: Add instructions for comparing release artifacts with a local release build.

[sc...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

schultz pushed a commit to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git


The following commit(s) were added to refs/heads/9.0.x by this push:
     new 3ad83488ec Add instructions for comparing release artifacts with a local release build.
3ad83488ec is described below

commit 3ad83488ec03082f2b1875a2d2d49b7cb298ce4c
Author: Christopher Schultz <ch...@christopherschultz.net>
AuthorDate: Fri Feb 16 10:03:21 2024 -0500

    Add instructions for comparing release artifacts with a local release build.
---
 build.xml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/build.xml b/build.xml
index 9f878e0d79..638df5ecc6 100644
--- a/build.xml
+++ b/build.xml
@@ -4213,6 +4213,20 @@ reproducible-10=${reproducible-10}
 
     <fail unless="reproducible">
 One or more signatures failed.
+
+Considering using a tool such as "diffoscope"[1] to inspect the differences
+between the official release and your local-build. There may be trivial
+differences that should not be considered troublesome.
+
+For example:
+$ wget https://dist.apache.org/repos/dist/release/tomcat/tomcat-${version.major}/v${version}/src/apache-tomcat-${version}-src.tar.gz
+  or, for a release candidate:
+$ wget https://dist.apache.org/repos/dist/dev/tomcat/tomcat-${version.major}/v${version}/src/apache-tomcat-${version}-src.tar.gz
+  then:
+$ diffoscope apache-tomcat-${version}-src.tar.gz output/release/v${version}/src/apache-tomcat-${version}-src.tar.gz
+
+
+[1] https://diffoscope.org/
 </fail>
     <echo>
 


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org