[GitHub] [db-jdo] tzaeschke commented on pull request #36: upgrade Felix maven-bundle-plugin for Reproducible

[GitBox <gi...@apache.org>]

tzaeschke commented on pull request #36:
URL: https://github.com/apache/db-jdo/pull/36#issuecomment-1042985338


   @hboutemy I had a look around and I do not fully understand how this works, maybe you can help or point us to some additional documentation?
   * `mvn clean install` & `mvn clean package artifact:compare`: What is the purpose? As far as I understand it simply compares two local builds that were created on the same machine + environment. This will never detect problems resulting from different environments...?
   * Should the second line be `mvn clean verify artifact:compare`?
   * At what point in the release process is this best executed? It feels like it would need to be in the middle of `release:perform` in order to compare the final build (including version numbers) but before it is being uploaded. Still, it would only compare builds executed on the same environment....? 
   
   References:
   * https://reproducible-builds.org/docs/jvm/
   * https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/BUILDSPEC.md
   * https://maven.apache.org/guides/mini/guide-reproducible-builds.html


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jdo-dev-unsubscribe@db.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org