[
https://issues.apache.org/jira/browse/SUREFIRE-1802?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Herve Boutemy updated SUREFIRE-1802:
------------------------------------
Description:
Surefire 3.0.0-M5 was released with build enhancements that sould make the
build reproducible: results are good but not perfect
the good part: the release manager (Tibor) is able to rebuild on his local
environment and get the full set of artifacts exactly as they are published to
Central
the not perfect part: trying to reproduce independantly shows a few issues that
are build with a little difference to the reference artifacts from Central
see [https://github.com/jvm-repo-rebuild/reproducible-central] for automated
rebuild script, that when run on my own machine give followinf results:
[https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/maven/surefire/surefire-shared-utils-3.0.0-M5.buildinfo.compare]
* the build produces 45 artifacts exactly like reference in Central
* 5 artifacts are not produced exactly like the reference in Central:
** surefire-shadefire-3.0.0-M5.jar
** maven-surefire-plugin-3.0.0-M5.jar
** maven-failsafe-plugin-3.0.0-M5.jar
** maven-surefire-plugin-3.0.0-M5-sources.jar
** maven-failsafe-plugin-3.0.0-M5-sources.jar
We need to investigate how to make the build more independant from the
environment, discovering how the environment impacts
First level of investigation shows that there are 2 issues: SUREFIRE-1803
(DEPENDENCIES) and SUREFIRE-1804 (shading)
and one additional nice to have MASFRES-34 (
was:
Surefire 3.0.0-M5 was released with build enhancements that sould make the
build reproducible: results are good but not perfect
the good part: the release manager (Tibor) is able to rebuild on his local
environment and get the full set of artifacts exactly as they are published to
Central
the not perfect part: trying to reproduce independantly shows a few issues that
are build with a little difference to the reference artifacts from Central
see [https://github.com/jvm-repo-rebuild/reproducible-central] for automated
rebuild script, that when run on my own machine give followinf results:
[https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/maven/surefire/surefire-shared-utils-3.0.0-M5.buildinfo.compare]
* the build produces 45 artifacts exactly like reference in Central
* 5 artifacts are not produced exactly like the reference in Central:
** surefire-shadefire-3.0.0-M5.jar
** maven-surefire-plugin-3.0.0-M5.jar
** maven-failsafe-plugin-3.0.0-M5.jar
** maven-surefire-plugin-3.0.0-M5-sources.jar
** maven-failsafe-plugin-3.0.0-M5-sources.jar
We need to investigate how to make the build more independant from the
environment, discovering how the environment impacts
> improve Reproducible Builds after Surefire 3.0.0-M5 release
> -----------------------------------------------------------
>
> Key: SUREFIRE-1802
> URL: https://issues.apache.org/jira/browse/SUREFIRE-1802
> Project: Maven Surefire
> Issue Type: Improvement
> Affects Versions: 3.0.0-M5
> Reporter: Herve Boutemy
> Priority: Minor
>
> Surefire 3.0.0-M5 was released with build enhancements that sould make the
> build reproducible: results are good but not perfect
> the good part: the release manager (Tibor) is able to rebuild on his local
> environment and get the full set of artifacts exactly as they are published
> to Central
> the not perfect part: trying to reproduce independantly shows a few issues
> that are build with a little difference to the reference artifacts from
> Central
> see [https://github.com/jvm-repo-rebuild/reproducible-central] for automated
> rebuild script, that when run on my own machine give followinf results:
> [https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/maven/surefire/surefire-shared-utils-3.0.0-M5.buildinfo.compare]
> * the build produces 45 artifacts exactly like reference in Central
> * 5 artifacts are not produced exactly like the reference in Central:
> ** surefire-shadefire-3.0.0-M5.jar
> ** maven-surefire-plugin-3.0.0-M5.jar
> ** maven-failsafe-plugin-3.0.0-M5.jar
> ** maven-surefire-plugin-3.0.0-M5-sources.jar
> ** maven-failsafe-plugin-3.0.0-M5-sources.jar
> We need to investigate how to make the build more independant from the
> environment, discovering how the environment impacts
> First level of investigation shows that there are 2 issues: SUREFIRE-1803
> (DEPENDENCIES) and SUREFIRE-1804 (shading)
> and one additional nice to have MASFRES-34 (
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
