You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sling.apache.org by "Konrad Windszus (Jira)" <ji...@apache.org> on 2021/07/26 11:53:00 UTC
[jira] [Updated] (SLING-9463) Document reproducible builds and
check automatically via check-staged-release
[ https://issues.apache.org/jira/browse/SLING-9463?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Konrad Windszus updated SLING-9463:
-----------------------------------
Fix Version/s: (was: Parent 44)
Parent 45
> Document reproducible builds and check automatically via check-staged-release
> -----------------------------------------------------------------------------
>
> Key: SLING-9463
> URL: https://issues.apache.org/jira/browse/SLING-9463
> Project: Sling
> Issue Type: Improvement
> Components: Documentation, General
> Reporter: Konrad Windszus
> Priority: Major
> Fix For: Parent 45
>
>
> With SLING-9307 and SLING-8951 all builds relying Parent 39 or newer should be reproducible. Still some parts are missing:
> # buildinfo files should be uploaded along with the artifacts ([https://maven.apache.org/guides/mini/guide-reproducible-builds.html]) which allows to easily reproduce build (as they contain info about linebreaks and major JDK versions).
> # The check-staged-release.sh should be updated accordingly to optionally try rebuilding and comparing with the given checksums.
> # [https://sling.apache.org/documentation/development/release-management.html] should be extended with how to properly check a release after a vote.
> # There should be some documentation covering how end-users could reproduce builds.
> # On the downloads page ([https://sling.apache.org/downloads.cgi]) there should be a link to the buildinfo files for new/reproducible releases pointing to downloads.apache.org.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)