You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@maven.apache.org by "Michael Osipov (Jira)" <ji...@apache.org> on 2019/09/05 20:44:00 UTC

[jira] [Comment Edited] (MSOURCES-120) Reproducible Builds: make entries in output jar files reproducible (order + timestamp)

    [ https://issues.apache.org/jira/browse/MSOURCES-120?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16923718#comment-16923718 ] 

Michael Osipov edited comment on MSOURCES-120 at 9/5/19 8:43 PM:
-----------------------------------------------------------------

As far as I understand the format, there is no timezone notion. I assume that we have to provide two options: local timezone and UTC. [~hboutemy], why not serialize UTC value? Here is a similar discussion: [https://github.com/Stuk/jszip/issues/369]


was (Author: michael-o):
As far as I understand the format, there is no timezone notion. I assume that we have to provide two options: local timezone and UTC. [~hboutemy], why not serialize UTC value?

> Reproducible Builds: make entries in output jar files reproducible (order + timestamp)
> --------------------------------------------------------------------------------------
>
>                 Key: MSOURCES-120
>                 URL: https://issues.apache.org/jira/browse/MSOURCES-120
>             Project: Maven Source Plugin
>          Issue Type: New Feature
>    Affects Versions: 3.0.1
>            Reporter: Hervé Boutemy
>            Priority: Major
>
> since a jar file is a zip file, entries order and timestamp are a natural source of non Reproducible Builds: https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=74682318



--
This message was sent by Atlassian Jira
(v8.3.2#803003)