You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Herve Boutemy (Jira)" <ji...@apache.org> on 2020/06/19 06:20:00 UTC
[jira] [Created] (SUREFIRE-1802) improve Reproducible Builds after
Surefire 3.0.0-M5 release
Herve Boutemy created SUREFIRE-1802:
---------------------------------------
Summary: improve Reproducible Builds after Surefire 3.0.0-M5 release
Key: SUREFIRE-1802
URL: https://issues.apache.org/jira/browse/SUREFIRE-1802
Project: Maven Surefire
Issue Type: Improvement
Affects Versions: 3.0.0-M5
Reporter: Herve Boutemy
Surefire 3.0.0-M5 was released with build enhancements that sould make the build reproducible: results are good but not perfect
the good part: the release manager (Tibor) is able to rebuild on his local environment and get the full set of artifacts exactly as they are published to Central
the not perfect part: trying to reproduce independantly shows a few issues that are build with a little difference to the reference artifacts from Central
see [https://github.com/jvm-repo-rebuild/reproducible-central] for automated rebuild script, that when run on my own machine give followinf results: [https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/maven/surefire/surefire-shared-utils-3.0.0-M5.buildinfo.compare]
* the build produces 45 artifacts exactly like reference in Central
* 5 artifacts are not produced exactly like the reference in Central:
** surefire-shadefire-3.0.0-M5.jar
** maven-surefire-plugin-3.0.0-M5.jar
** maven-failsafe-plugin-3.0.0-M5.jar
** maven-surefire-plugin-3.0.0-M5-sources.jar
** maven-failsafe-plugin-3.0.0-M5-sources.jar
We need to investigate how to make the build more independant from the environment, discovering how the environment impacts
--
This message was sent by Atlassian Jira
(v8.3.4#803005)