[
https://issues.apache.org/jira/browse/MSOURCES-120?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16924814#comment-16924814
]
Hervé Boutemy commented on MSOURCES-120:
----------------------------------------
{quote}I think would be nice if the UTC logic is in Plexus Archiver so it can
be used by other plugins as well.{quote}
sure, I intend to test on Maven Assembly Plugin before doing releases, to check
the logic against other archive formats, like tar, to be sure to get adapted
API to plexus-archiver
{quote}I guess right now you just testing in the source plugin{quote}
Yes, I discovered in the past that working on Reproducible Builds by fixing
every issue separately, leading to plugins releases, just does not work: it's
when you run the plugin that you discover which is the next issue to fix.
This time, I'm doing a PoC at plugin level before dispatching code where it
will finally belong
> Reproducible Builds: make entries in output jar files reproducible (order +
> timestamp)
> --------------------------------------------------------------------------------------
>
> Key: MSOURCES-120
> URL: https://issues.apache.org/jira/browse/MSOURCES-120
> Project: Maven Source Plugin
> Issue Type: New Feature
> Affects Versions: 3.0.1
> Reporter: Hervé Boutemy
> Priority: Major
>
> since a jar file is a zip file, entries order and timestamp are a natural
> source of non Reproducible Builds:
> https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=74682318
--
This message was sent by Atlassian Jira
(v8.3.2#803003)
