[
https://issues.apache.org/jira/browse/RATIS-2639?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18101473#comment-18101473
]
Attila Doroszlai commented on RATIS-2639:
-----------------------------------------
- We use {{maven-assembly-plugin}} instead of raw tar/gz.
- See
https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/ratis/README.md
for build history.
-- 3.1.1 was the first reproducible build.
-- 3.1.2 uncovered a bug in {{maven-remote-resources-plugin}}, which was fixed
(MRRESOURCES-150).
-- 3.1.3 and 3.2.0 were also reproducible.
-- 3.2.1 was not reproducible due to git repo URL, removed in RATIS-2439.
-- 3.2.2 was not reproducible due to extra empty annotations dir, removed in
RATIS-2572.
- I found 3.3.0 rc1 and rc2 to be reproducible.
> Make release .tar.gz files reproducible.
> ----------------------------------------
>
> Key: RATIS-2639
> URL: https://issues.apache.org/jira/browse/RATIS-2639
> Project: Ratis
> Issue Type: Improvement
> Components: build
> Reporter: Tsz-wo Sze
> Priority: Major
> Attachments: image-2026-08-03-11-26-40-659.png
>
>
> Currently, the [src|bin].tar.gz files generated by ./dev-support/make_rc.sh
> are not reproducible. According to Google, it is due to file ordering and
> metadata such user id. These problem can be fixed; see below:
> !image-2026-08-03-11-26-40-659.png|width=600!
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
