You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@grails.apache.org by jd...@apache.org on 2025/06/01 07:33:54 UTC
(grails-core) branch 7.0.x updated (1cd1fe3d45 -> bd6bbc3e0a)
This is an automated email from the ASF dual-hosted git repository.
jdaugherty pushed a change to branch 7.0.x
in repository https://gitbox.apache.org/repos/asf/grails-core.git
from 1cd1fe3d45 [skip ci] set directory & file dates to the same, visiting files first
new c9af64cc3c [skip ci] disable signing when verifying build is reproducible
new bd6bbc3e0a [skip ci] add rsync to docker verification image
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
etc/bin/Dockerfile | 2 +-
etc/bin/verify-reproducible.sh | 1 +
gradle/publish-config.gradle | 8 ++++++++
grails-gradle/gradle/checksum-config.gradle | 9 +++++++++
4 files changed, 19 insertions(+), 1 deletion(-)
(grails-core) 01/02: [skip ci] disable signing when verifying build is reproducible
Posted by jd...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
jdaugherty pushed a commit to branch 7.0.x
in repository https://gitbox.apache.org/repos/asf/grails-core.git
commit c9af64cc3c8dca4be01a707463bcd1eefdb83553
Author: James Daugherty <jd...@jdresources.net>
AuthorDate: Sun Jun 1 03:30:05 2025 -0400
[skip ci] disable signing when verifying build is reproducible
---
etc/bin/verify-reproducible.sh | 1 +
gradle/publish-config.gradle | 8 ++++++++
grails-gradle/gradle/checksum-config.gradle | 9 +++++++++
3 files changed, 18 insertions(+)
diff --git a/etc/bin/verify-reproducible.sh b/etc/bin/verify-reproducible.sh
index 4c914bb6d4..298ed8821c 100755
--- a/etc/bin/verify-reproducible.sh
+++ b/etc/bin/verify-reproducible.sh
@@ -48,6 +48,7 @@ else
exit 1
fi
export SOURCE_DATE_EPOCH=$(cat "${DOWNLOAD_LOCATION}/grails/BUILD_DATE")
+export TEST_BUILD_REPRODUCIBLE='true'
if [[ -d "${DOWNLOAD_LOCATION}/grails/etc/bin/results/first" ]]; then
echo "✅ Directory 'first' exists."
diff --git a/gradle/publish-config.gradle b/gradle/publish-config.gradle
index 7a59d95422..4ff213ade6 100644
--- a/gradle/publish-config.gradle
+++ b/gradle/publish-config.gradle
@@ -35,6 +35,14 @@ extensions.configure(GrailsPublishExtension) {
apply plugin: 'org.gradle.crypto.checksum'
afterEvaluate {
+ if (project.plugins.hasPlugin('signing')) {
+ if(System.getenv('TEST_BUILD_REPRODUCIBLE')) {
+ project.logger.lifecycle("Signing is disabled for this build to test build reproducibility.")
+ project.tasks.withType(Sign).configureEach {
+ it.enabled = false
+ }
+ }
+ }
if (project.plugins.hasPlugin("maven-publish")) {
def checksumTask = tasks.register("publishedChecksums", Checksum)
checksumTask.configure { Checksum check ->
diff --git a/grails-gradle/gradle/checksum-config.gradle b/grails-gradle/gradle/checksum-config.gradle
index 066bd4091b..875d0f56e7 100644
--- a/grails-gradle/gradle/checksum-config.gradle
+++ b/grails-gradle/gradle/checksum-config.gradle
@@ -21,6 +21,15 @@ import org.gradle.crypto.checksum.Checksum
apply plugin: 'org.gradle.crypto.checksum'
afterEvaluate {
+ if (project.plugins.hasPlugin('signing')) {
+ if(System.getenv('TEST_BUILD_REPRODUCIBLE')) {
+ project.logger.lifecycle("Signing is disabled for this build to test build reproducibility.")
+ project.tasks.withType(Sign).configureEach {
+ it.enabled = false
+ }
+ }
+ }
+
if (project.plugins.hasPlugin("maven-publish")) {
def checksumTask = tasks.register("publishedChecksums", Checksum)
checksumTask.configure { Checksum check ->
(grails-core) 02/02: [skip ci] add rsync to docker verification image
Posted by jd...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
jdaugherty pushed a commit to branch 7.0.x
in repository https://gitbox.apache.org/repos/asf/grails-core.git
commit bd6bbc3e0ab0fb778e7e1ec1f6c941d868dd8681
Author: James Daugherty <jd...@jdresources.net>
AuthorDate: Sun Jun 1 03:33:45 2025 -0400
[skip ci] add rsync to docker verification image
---
etc/bin/Dockerfile | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/etc/bin/Dockerfile b/etc/bin/Dockerfile
index c46380d676..cd3e9696cd 100644
--- a/etc/bin/Dockerfile
+++ b/etc/bin/Dockerfile
@@ -19,7 +19,7 @@
FROM bellsoft/liberica-openjdk-debian:17.0.14
USER root
-RUN apt-get update && apt-get install -y curl unzip coreutils libdigest-sha-perl gpg vim sudo psmisc locales groovy
+RUN apt-get update && apt-get install -y curl unzip coreutils libdigest-sha-perl gpg vim sudo psmisc locales groovy rsync
RUN sed -i -e 's/# en_US.UTF-8 UTF-8/en_US.UTF-8 UTF-8/' /etc/locale.gen && \
dpkg-reconfigure --frontend=noninteractive locales && \