jaikiran commented on PR #508:
URL: https://github.com/apache/maven-jar-plugin/pull/508#issuecomment-5336812545

   I haven't followed this PR and came to know about this only through a mail 
in the OpenJDK mailing list. Just on the following part:
   
   > We may not be able to enable reproducible build at all with the jar tool 
at it stands today because the jar tool does not seem to be designed for an 
explicit enumeration of files to include. It seems to be designed for working 
on directories only, in which case the entry order may depend on the tool or 
the platform. 
   
   The JDK in recent times has tried to provide reproducibility in tools 
wherever feasible. If there are shortcomings in the `jar` tool that prevent 
reproducibility, then it would be good to bring those specific details in the 
core-libs-dev OpenJDK mailing list 
https://mail.openjdk.org/mail/lists/core-libs-dev.openjdk.org/ (a mailing list 
subscription is required to send/receive mails). It would be good to address 
any of those issues in the `jar` tool as much as feasible.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to