[
https://issues.apache.org/jira/browse/JCRVLT-439?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Konrad Windszus updated JCRVLT-439:
-----------------------------------
Description:
According to http://maven.apache.org/guides/mini/guide-reproducible-builds.html
# project needs to derive from ASF parent 23 (/) for the newest plugins
# project needs a timestamp property (x)
# configure bnd-maven-plugin
(https://github.com/bndtools/bnd/tree/master/maven/bnd-maven-plugin#reproducible-builds)
(/)
It would be good to adjust
https://dist.apache.org/repos/dist/dev/jackrabbit/check-release.sh to also
check reproducability with
https://github.com/apache/maven-studies/tree/maven-buildinfo-plugin. At the
same time the staged repository could be cross-checked.
was:
According to http://maven.apache.org/guides/mini/guide-reproducible-builds.html
# project needs to derive from ASF parent 23 (/) for the newest plugins
# project needs a timestamp property (x)
It would be good to adjust
https://dist.apache.org/repos/dist/dev/jackrabbit/check-release.sh to also
check reproducability with
https://github.com/apache/maven-studies/tree/maven-buildinfo-plugin. At the
same time the staged repository could be cross-checked.
> Support reproducible builds
> ---------------------------
>
> Key: JCRVLT-439
> URL: https://issues.apache.org/jira/browse/JCRVLT-439
> Project: Jackrabbit FileVault
> Issue Type: Improvement
> Components: Misc
> Reporter: Konrad Windszus
> Priority: Major
> Fix For: 3.4.6
>
>
> According to
> http://maven.apache.org/guides/mini/guide-reproducible-builds.html
> # project needs to derive from ASF parent 23 (/) for the newest plugins
> # project needs a timestamp property (x)
> # configure bnd-maven-plugin
> (https://github.com/bndtools/bnd/tree/master/maven/bnd-maven-plugin#reproducible-builds)
> (/)
> It would be good to adjust
> https://dist.apache.org/repos/dist/dev/jackrabbit/check-release.sh to also
> check reproducability with
> https://github.com/apache/maven-studies/tree/maven-buildinfo-plugin. At the
> same time the staged repository could be cross-checked.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
