You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@kie.apache.org by ricardo zanini fernandes <ri...@gmail.com> on 2024/02/16 19:26:30 UTC

Quarkus Jar Builds are NOT reproducible

Folks,

We have a thread on Zulip about this [1], but since it's urgent, I thought
it would be good to raise it here.

I've found out that Quarkus builds (fast/uber jar) are NOT reproducible.
See a few references here:

- https://github.com/quarkusio/quarkus/issues/676
-
https://quarkusio.zulipchat.com/#narrow/stream/187038-dev/topic/Quarkus.20Fast.20Jar.20build.20is.20not.20reproducible/near/421910804

That means that we won't achieve the non-reproducible requirements for ASF.

The uber-jar is not reproducible at all, the fast-jar app is semantically
equivalent, but the other files within the `quarkus-app` directory are not.

I think we need to have a call to sort this out.

Cheers!

[1]
https://kie.zulipchat.com/#narrow/stream/382044-kogito-dev/topic/Reproducible.20build/near/421910954
--
Ricardo Zanini Fernandes
Vida longa e próspera.