You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sling.apache.org by "Bertrand Delacretaz (Jira)" <ji...@apache.org> on 2020/05/25 11:56:00 UTC
[jira] [Commented] (SLING-9463) Document reproducible builds and
check automatically via check-staged-release
[ https://issues.apache.org/jira/browse/SLING-9463?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17115963#comment-17115963 ]
Bertrand Delacretaz commented on SLING-9463:
--------------------------------------------
I'm playing with this and collecting random notes that might or might not need to be in the documentation. No need to comment on each of these random notes, we can sort them out when we create the docs!
Note #1: as per https://maven.apache.org/pom/asf/ this property needs to be defined:
{code}
<properties>
<project.build.outputTimestamp>2019-10-02T08:04:00Z</project.build.outputTimestamp>
</properties>
{code}
> Document reproducible builds and check automatically via check-staged-release
> -----------------------------------------------------------------------------
>
> Key: SLING-9463
> URL: https://issues.apache.org/jira/browse/SLING-9463
> Project: Sling
> Issue Type: Improvement
> Components: Documentation, General
> Reporter: Konrad Windszus
> Priority: Major
> Fix For: Parent 40
>
>
> With SLING-9307 and SLING-8951 all builds relying Parent 39 or newer should be reproducible. Still some parts are missing:
> # buildinfo files should be uploaded along with the artifacts ([https://maven.apache.org/guides/mini/guide-reproducible-builds.html]) which allows to easily reproduce build (as they contain info about linebreaks and major JDK versions).
> # The check-staged-release.sh should be updated accordingly to optionally try rebuilding and comparing with the given checksums.
> # [https://sling.apache.org/documentation/development/release-management.html] should be extended with how to properly check a release after a vote.
> # There should be some documentation covering how end-users could reproduce builds.
> # On the downloads page ([https://sling.apache.org/downloads.cgi]) there should be a link to the buildinfo files for new/reproducible releases pointing to downloads.apache.org.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)