[ 
https://issues.apache.org/jira/browse/SUREFIRE-1802?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17140677#comment-17140677
 ] 

Herve Boutemy commented on SUREFIRE-1802:
-----------------------------------------

given the differences found, I doubt this has any impact
SUREFIRE-1803 is about improving error management in Apache remote resources, 
to avoid just hiding when issues arise
for SUREFIRE-1804, which is the hard one, I'll try to create a basic test 
project to reproduce and will probably ask for help to have multiple people 
build in different conditions, to try to find what is the environment 
difference that triggers the timestamp difference

> improve Reproducible Builds after Surefire 3.0.0-M5 release
> -----------------------------------------------------------
>
>                 Key: SUREFIRE-1802
>                 URL: https://issues.apache.org/jira/browse/SUREFIRE-1802
>             Project: Maven Surefire
>          Issue Type: Improvement
>    Affects Versions: 3.0.0-M5
>            Reporter: Herve Boutemy
>            Priority: Minor
>
> Surefire 3.0.0-M5 was released with build enhancements that sould make the 
> build reproducible: results are good but not perfect
> the good part: the release manager (Tibor) is able to rebuild on his local 
> environment and get the full set of artifacts exactly as they are published 
> to Central
> the not perfect part: trying to reproduce independantly shows a few issues 
> that are build with a little difference to the reference artifacts from 
> Central
> see [https://github.com/jvm-repo-rebuild/reproducible-central] for automated 
> rebuild script, that when run on my own machine give followinf results: 
> [https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/maven/surefire/surefire-shared-utils-3.0.0-M5.buildinfo.compare]
>  * the build produces 45 artifacts exactly like reference in Central
>  * 5 artifacts are not produced exactly like the reference in Central:
>  ** surefire-shadefire-3.0.0-M5.jar
>  ** maven-surefire-plugin-3.0.0-M5.jar
>  ** maven-failsafe-plugin-3.0.0-M5.jar
>  ** maven-surefire-plugin-3.0.0-M5-sources.jar
>  ** maven-failsafe-plugin-3.0.0-M5-sources.jar
> We need to investigate how to make the build more independant from the 
> environment, discovering how the environment impacts
> First level of investigation shows that there are 2 issues: SUREFIRE-1803 
> (DEPENDENCIES) and SUREFIRE-1804 (shading)
> and one additional nice to have MASFRES-34 (dependency-reduced-pom.xml)



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to