You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@jackrabbit.apache.org by "Konrad Windszus (Jira)" <ji...@apache.org> on 2020/05/26 21:04:00 UTC

[jira] [Updated] (JCRVLT-439) Support reproducible builds

     [ https://issues.apache.org/jira/browse/JCRVLT-439?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Konrad Windszus updated JCRVLT-439:
-----------------------------------
    Description: 
According to http://maven.apache.org/guides/mini/guide-reproducible-builds.html
# project needs to derive from ASF parent 23 (/) for the newest plugins
# project needs a timestamp property (x)

It would be good to adjust https://dist.apache.org/repos/dist/dev/jackrabbit/check-release.sh to also check reproducability with https://github.com/apache/maven-studies/tree/maven-buildinfo-plugin. At the same time the staged repository could be cross-checked.

  was:
According to http://maven.apache.org/guides/mini/guide-reproducible-builds.html
# project needs to derive from ASF parent 23 (/) for the newest plugins
# project needs a timestamp property (x)

It would be good to adjust https://dist.apache.org/repos/dist/dev/jackrabbit/check-release.sh to also check reproducability with https://github.com/apache/maven-studies/tree/maven-buildinfo-plugin


> Support reproducible builds
> ---------------------------
>
>                 Key: JCRVLT-439
>                 URL: https://issues.apache.org/jira/browse/JCRVLT-439
>             Project: Jackrabbit FileVault
>          Issue Type: Improvement
>          Components: Misc
>            Reporter: Konrad Windszus
>            Priority: Major
>             Fix For: 3.4.6
>
>
> According to http://maven.apache.org/guides/mini/guide-reproducible-builds.html
> # project needs to derive from ASF parent 23 (/) for the newest plugins
> # project needs a timestamp property (x)
> It would be good to adjust https://dist.apache.org/repos/dist/dev/jackrabbit/check-release.sh to also check reproducability with https://github.com/apache/maven-studies/tree/maven-buildinfo-plugin. At the same time the staged repository could be cross-checked.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)