You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@maven.apache.org by Hervé BOUTEMY <he...@free.fr> on 2020/03/28 17:21:25 UTC
welcome reproducible-central
Hi,
I'd like to announce a new important step for Reproducible Builds for the JVM:
reproducible-central.
The intent is to provide easy to run reproducible recipes, to let anyone
rebuild a component from Central Repository that is expected to be
reproducible and check that the result is as expected.
See https://github.com/jvm-repo-rebuild/reproducible-central for the current
list of project releases that are rebuilt and checked (with sometime only
partial success).
When someone publish a new release that is expected to be reproducible, don't
hesitate to provide a PR with the recipe (= a .buildspec file), testing it by
running "./rebuild.sh path-to-recipe.buildspec" (then updating README.md by
running "./update-reproducibility-summary.sh"
In the future, this little Github repository should become something better
than a git repository, but this is a first step: improvement ideas welcome.
Regards,
Hervé
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: welcome reproducible-central
Posted by Enrico Olivelli <eo...@gmail.com>.
Il Sab 28 Mar 2020, 18:21 Hervé BOUTEMY <he...@free.fr> ha scritto:
> Hi,
>
> I'd like to announce a new important step for Reproducible Builds for the
> JVM:
> reproducible-central.
>
> The intent is to provide easy to run reproducible recipes, to let anyone
> rebuild a component from Central Repository that is expected to be
> reproducible and check that the result is as expected.
>
> See https://github.com/jvm-repo-rebuild/reproducible-central for the
> current
> list of project releases that are rebuilt and checked (with sometime only
> partial success).
>
> When someone publish a new release that is expected to be reproducible,
> don't
> hesitate to provide a PR with the recipe (= a .buildspec file), testing it
> by
> running "./rebuild.sh path-to-recipe.buildspec" (then updating README.md
> by
> running "./update-reproducibility-summary.sh"
>
>
> In the future, this little Github repository should become something
> better
> than a git repository, but this is a first step: improvement ideas welcome.
>
Cool
I will try to add some of my public projects !
Enrico
> Regards,
>
> Hervé
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> For additional commands, e-mail: dev-help@maven.apache.org
>
>
Re: welcome reproducible-central
Posted by Hervé BOUTEMY <he...@free.fr>.
I had an idea to improve the rebuild script: sdkman and jenv can do the job!
https://github.com/jvm-repo-rebuild/reproducible-central/issues/1
if someone is using sdkman or jenv, PR welcome
Regards,
Hervé
Le dimanche 29 mars 2020, 18:18:16 CEST Hervé BOUTEMY a écrit :
> Le dimanche 29 mars 2020, 13:55:07 CEST Michael Osipov a écrit :
> > Am 2020-03-29 um 09:27 schrieb Hervé BOUTEMY:
> > > I'll try to make this more visible, without introducing too much
> > > complexity
> > > into the scripts: one of the intents is also to stay simple
> >
> > Please update the README by not claiming that it can be reproduced on
> > any Unix with that setup. I creates false expectations.
>
> it is not claimed: you're reading something that is not written
>
> don't hesitate to provide a PR to improve the content
>
> Regards,
>
> Hervé
>
> > Michael
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> > For additional commands, e-mail: dev-help@maven.apache.org
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> For additional commands, e-mail: dev-help@maven.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: welcome reproducible-central
Posted by Hervé BOUTEMY <he...@free.fr>.
I had an idea to improve the rebuild script: sdkman and jenv can do the job!
https://github.com/jvm-repo-rebuild/reproducible-central/issues/1
if someone is using sdkman or jenv, PR welcome
Regards,
Hervé
Le dimanche 29 mars 2020, 18:18:16 CEST Hervé BOUTEMY a écrit :
> Le dimanche 29 mars 2020, 13:55:07 CEST Michael Osipov a écrit :
> > Am 2020-03-29 um 09:27 schrieb Hervé BOUTEMY:
> > > I'll try to make this more visible, without introducing too much
> > > complexity
> > > into the scripts: one of the intents is also to stay simple
> >
> > Please update the README by not claiming that it can be reproduced on
> > any Unix with that setup. I creates false expectations.
>
> it is not claimed: you're reading something that is not written
>
> don't hesitate to provide a PR to improve the content
>
> Regards,
>
> Hervé
>
> > Michael
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> > For additional commands, e-mail: dev-help@maven.apache.org
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> For additional commands, e-mail: dev-help@maven.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: welcome reproducible-central
Posted by Hervé BOUTEMY <he...@free.fr>.
Le dimanche 29 mars 2020, 13:55:07 CEST Michael Osipov a écrit :
> Am 2020-03-29 um 09:27 schrieb Hervé BOUTEMY:
> > I'll try to make this more visible, without introducing too much
> > complexity
> > into the scripts: one of the intents is also to stay simple
>
> Please update the README by not claiming that it can be reproduced on
> any Unix with that setup. I creates false expectations.
it is not claimed: you're reading something that is not written
don't hesitate to provide a PR to improve the content
Regards,
Hervé
>
> Michael
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> For additional commands, e-mail: dev-help@maven.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: welcome reproducible-central
Posted by Michael Osipov <mi...@apache.org>.
Am 2020-03-29 um 09:27 schrieb Hervé BOUTEMY:
> Le samedi 28 mars 2020 20:56:25 CEST, vous avez écrit :
>> Am 2020-03-28 um 18:21 schrieb Hervé BOUTEMY:
>>> Hi,
>>>
>>> I'd like to announce a new important step for Reproducible Builds for the
>>> JVM: reproducible-central.
>>>
>>> The intent is to provide easy to run reproducible recipes, to let anyone
>>> rebuild a component from Central Repository that is expected to be
>>> reproducible and check that the result is as expected.
>>>
>>> See https://github.com/jvm-repo-rebuild/reproducible-central for the
>>> current list of project releases that are rebuilt and checked (with
>>> sometime only partial success).
>>>
>>> When someone publish a new release that is expected to be reproducible,
>>> don't hesitate to provide a PR with the recipe (= a .buildspec file),
>>> testing it by running "./rebuild.sh path-to-recipe.buildspec" (then
>>> updating README.md by running "./update-reproducibility-summary.sh"
>>>
>>>
>>> In the future, this little Github repository should become something
>>> better
>>> than a git repository, but this is a first step: improvement ideas
>>> welcome.
>>
>> The entire approach looks non-portable and absolutely Docker-centric,
>> confined to Linux distros only. This violates the Java and portability
>> principle for me.
> had a bad week?
The worst is yet to come the next couple of weeks...
> the provided recipes are not expected to be the only ones possible to get the
> output: they are meant to be a choice on simple way for anyone to execute
> them, without having complex setup
> Hence my choice of Docker as default rebuild prerequisite.
>
> But you can write your own rebuild.sh equivalent if you want, writing your own
> way to setup your local JVM.
>
> I'll try to make this more visible, without introducing too much complexity
> into the scripts: one of the intents is also to stay simple
Please update the README by not claiming that it can be reproduced on
any Unix with that setup. I creates false expectations.
Michael
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: welcome reproducible-central
Posted by Hervé BOUTEMY <he...@free.fr>.
Le samedi 28 mars 2020 20:56:25 CEST, vous avez écrit :
> Am 2020-03-28 um 18:21 schrieb Hervé BOUTEMY:
> > Hi,
> >
> > I'd like to announce a new important step for Reproducible Builds for the
> > JVM: reproducible-central.
> >
> > The intent is to provide easy to run reproducible recipes, to let anyone
> > rebuild a component from Central Repository that is expected to be
> > reproducible and check that the result is as expected.
> >
> > See https://github.com/jvm-repo-rebuild/reproducible-central for the
> > current list of project releases that are rebuilt and checked (with
> > sometime only partial success).
> >
> > When someone publish a new release that is expected to be reproducible,
> > don't hesitate to provide a PR with the recipe (= a .buildspec file),
> > testing it by running "./rebuild.sh path-to-recipe.buildspec" (then
> > updating README.md by running "./update-reproducibility-summary.sh"
> >
> >
> > In the future, this little Github repository should become something
> > better
> > than a git repository, but this is a first step: improvement ideas
> > welcome.
>
> The entire approach looks non-portable and absolutely Docker-centric,
> confined to Linux distros only. This violates the Java and portability
> principle for me.
had a bad week?
the provided recipes are not expected to be the only ones possible to get the
output: they are meant to be a choice on simple way for anyone to execute
them, without having complex setup
Hence my choice of Docker as default rebuild prerequisite.
But you can write your own rebuild.sh equivalent if you want, writing your own
way to setup your local JVM.
I'll try to make this more visible, without introducing too much complexity
into the scripts: one of the intents is also to stay simple
Regards,
Hervé
stay safe, stay at home, but have fun
>
> Michael
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: welcome reproducible-central
Posted by Michael Osipov <mi...@apache.org>.
Am 2020-03-28 um 18:21 schrieb Hervé BOUTEMY:
> Hi,
>
> I'd like to announce a new important step for Reproducible Builds for the JVM:
> reproducible-central.
>
> The intent is to provide easy to run reproducible recipes, to let anyone
> rebuild a component from Central Repository that is expected to be
> reproducible and check that the result is as expected.
>
> See https://github.com/jvm-repo-rebuild/reproducible-central for the current
> list of project releases that are rebuilt and checked (with sometime only
> partial success).
>
> When someone publish a new release that is expected to be reproducible, don't
> hesitate to provide a PR with the recipe (= a .buildspec file), testing it by
> running "./rebuild.sh path-to-recipe.buildspec" (then updating README.md by
> running "./update-reproducibility-summary.sh"
>
>
> In the future, this little Github repository should become something better
> than a git repository, but this is a first step: improvement ideas welcome.
The entire approach looks non-portable and absolutely Docker-centric,
confined to Linux distros only. This violates the Java and portability
principle for me.
Michael
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org