[
https://issues.apache.org/jira/browse/NIFI-10892?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18032595#comment-18032595
]
David Handermann commented on NIFI-10892:
-----------------------------------------
[~hboutemy] I noticed in the release of NiFi 2.6.0 that the Develocity
workspace ID file was included in the source release, which negatively impacted
reproducible build results.
I submitted the following pull request to the maven-apache-resources project to
exclude the Develocity working directory, which should help NiFi and other
projects.
https://github.com/apache/maven-apache-resources/pull/97
> continue Reproducible Builds improvements
> -----------------------------------------
>
> Key: NIFI-10892
> URL: https://issues.apache.org/jira/browse/NIFI-10892
> Project: Apache NiFi
> Issue Type: Improvement
> Affects Versions: 1.19.0
> Reporter: Hervé Boutemy
> Assignee: David Handermann
> Priority: Major
>
> NIFI-10616 was merged, fixing one source of non-reproducible bits
> https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/nifi/nifi/README.md
> there are still other issues to solve: on 1877 output files, 1677 are
> reproducible but 200 remain non-reproducible
> result summary is
> https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/nifi/nifi/nifi-1.19.0.buildcompare
> detailed result diff is:
> https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/nifi/nifi/nifi-1.19.0.diffoscope
> Analyzing remaining issues:
> - NIFI-10325 is required by 165 .nar files: fixed in 1.20.0
> - quite a few .jar files have reproducible issues with JAXB-generated XML
> files (update done in NIFI-10616 is not sufficient: ho header ignored,
> {{META-INF/JAXB/episode_*.xjb}} still contain header comments with
> timestamp): classical solution exists
> https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/doc/BUILDSPEC.md#avoiding-timestamps-in-jaxb-generated-content
> - war files suffer from jspc and documentation issues
> - a few jar suffer from swagger-generated issues: timestamp in generated
> annotation
> - 2 jar files suffer from META-INF/DEPENDENCIES generation
> the 2 first issues are the most noisy and can be fixed: let's define this as
> an objective for next release
> the 3 last ones are less common and impact less content: we'll see them
> later...
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
