You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@maven.apache.org by hb...@apache.org on 2020/07/11 21:30:38 UTC
[maven-site] branch master updated (543bb41 -> e14bcf2)
This is an automated email from the ASF dual-hosted git repository.
hboutemy pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/maven-site.git.
from 543bb41 more extensive timestamp update strategies
new d4fa801 try to improve maven-release-plugin instructions
new e14bcf2 buildinfo goal is not necessary for initial build
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../apt/guides/mini/guide-reproducible-builds.apt | 27 +++++++++++++++-------
1 file changed, 19 insertions(+), 8 deletions(-)
[maven-site] 02/02: buildinfo goal is not necessary for initial
build
Posted by hb...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
hboutemy pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/maven-site.git
commit e14bcf2355f1b29779fe0621289a223e009d777b
Author: Hervé Boutemy <hb...@apache.org>
AuthorDate: Sat Jul 11 23:30:27 2020 +0200
buildinfo goal is not necessary for initial build
---
content/apt/guides/mini/guide-reproducible-builds.apt | 8 +++++---
1 file changed, 5 insertions(+), 3 deletions(-)
diff --git a/content/apt/guides/mini/guide-reproducible-builds.apt b/content/apt/guides/mini/guide-reproducible-builds.apt
index 00ff0a4..cce302f 100644
--- a/content/apt/guides/mini/guide-reproducible-builds.apt
+++ b/content/apt/guides/mini/guide-reproducible-builds.apt
@@ -54,14 +54,16 @@ Configuring for Reproducible Builds
* How to test and fix my Maven build reproducibility?
Using {{{https://github.com/apache/maven-artifact-plugin}<<<maven-artifact-plugin>>>'s <<<buildinfo>>> goal}},
- you can check that two builds produce the same output:
+ you can check that the second build of your project produce the same output than an initial build:
- [[1]] build and install: <<<mvn clean install -e -DskipTests artifact:buildinfo>>>
+ [[1]] build and install your project: <<<mvn clean install -e -DskipTests>>> (don't hesitate to customize arguments to better match your project)
- [[2]] rebuild and check against the previous install: <<<mvn clean verify -e -DskipTests artifact:buildinfo -Dreference.repo=central>>>
+ [[2]] rebuild (without installing) and check against the previous install: <<<mvn clean verify -e -DskipTests artifact:buildinfo -Dreference.repo=central>>>
[]
+ The <<<buildinfo>>> goal in the second run will calculate fingerprints for the second build output and for the initial installed output, then compare the 2 build informations and display result.
+
If something is still not reproducible:
[[1]] Use {{{https://diffoscope.org/}diffoscope}} to find the unstable output. The <<<artifact:buildinfo>>> goal proposes a command with path to files: just copy/paste to launch.
[maven-site] 01/02: try to improve maven-release-plugin instructions
Posted by hb...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
hboutemy pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/maven-site.git
commit d4fa80147b55c68c1e059909a6cb1d45a79dec7b
Author: Hervé Boutemy <hb...@apache.org>
AuthorDate: Sat Jul 11 23:20:09 2020 +0200
try to improve maven-release-plugin instructions
---
.../apt/guides/mini/guide-reproducible-builds.apt | 21 +++++++++++++++------
1 file changed, 15 insertions(+), 6 deletions(-)
diff --git a/content/apt/guides/mini/guide-reproducible-builds.apt b/content/apt/guides/mini/guide-reproducible-builds.apt
index ec9d9f0..00ff0a4 100644
--- a/content/apt/guides/mini/guide-reproducible-builds.apt
+++ b/content/apt/guides/mini/guide-reproducible-builds.apt
@@ -40,7 +40,7 @@ Configuring for Reproducible Builds
[[1]] Upgrade your plugins to reproducible versions, particularly <<<maven-jar-plugin>>>, <<<maven-source-plugin>>> and <<<maven-assembly-plugin>>> to version 3.2.0 minimum.
- [[2]] Add a <<<project.build.outputTimestamp>>> property to the project's pom.xml with the timestamp value that will be used in zip/jar/tar archives (see FAQ for future value update strategy):
+ [[2]] Add a <<<project.build.outputTimestamp>>> property to the project's <<<pom.xml>>> with the timestamp value that will be used in zip/jar/tar archives (see FAQ for future value update strategy):
+--------+
<properties>
@@ -54,7 +54,7 @@ Configuring for Reproducible Builds
* How to test and fix my Maven build reproducibility?
Using {{{https://github.com/apache/maven-artifact-plugin}<<<maven-artifact-plugin>>>'s <<<buildinfo>>> goal}},
- you can check that two builds give the same output:
+ you can check that two builds produce the same output:
[[1]] build and install: <<<mvn clean install -e -DskipTests artifact:buildinfo>>>
@@ -93,11 +93,20 @@ Configuring for Reproducible Builds
* FAQ
- * Q. Can the <<<project.build.outputTimestamp>>> property be updated automatically at release time?
+ * Q. Can the <<<project.build.outputTimestamp>>> property in <<<pom.xml>>> be updated automatically at release time?
- A. Yes. Details depend on your release process tooling: if you use maven-release-plugin, you'll need version 3.0.0-M1 or later
- (see {{{https://issues.apache.org/jira/browse/MRELEASE-1029}MRELEASE-1029}}). If you have a custom release process tooling, you'll
- need to add the feature to your tooling. Don't hesitate to share your questions or solution on {{{/mailing-lists.html}user mailing-list}}.
+ A. Yes.
+
+ Details depend on your release process tooling:
+
+ * if you use {{{/plugins/maven-release-plugin/}maven-release-plugin}}, you'll need <<version 3.0.0-M1 or later>>:
+ it will automatically update the timestamp value in <<<pom.xml>>> during the release in the same commit that updates version,
+
+ * if you have a custom release process tooling, you'll need to add the feature to your release tooling.
+
+ []
+
+ Don't hesitate to share your questions or solutions on {{{/mailing-lists.html}user mailing-list}}.
* Q. Which additional plugins need to be updated for Reproducible Builds?