https://bz.apache.org/bugzilla/show_bug.cgi?id=61269
Bug ID: 61269
Summary: Ant should support reproducible builds
Product: Ant
Version: unspecified
Hardware: All
OS: All
Status: NEW
Severity: enhancement
Priority: P2
Component: Core tasks
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ---
Reproducible Java builds need reproducible outputs (JARs, etc) created by Ant.
The current work arounds for JARs [1][2] re-create the archive by ordering the
entries and setting a fixed timestamp.
So, Ant would really help reproducible builds everywhere if it would start
generating deterministic files.
The Jar task is the most important, but Zip is also related and there are
probably more.
This could be provided with a boolean "deterministic" (or "reproducible") task
parameter which would default to "false".
1. https://wiki.debian.org/ReproducibleBuilds/TimestampsInJarFiles
2.
https://github.com/emilianbold/reproducible-nextbeans/commit/385a2dfe1211b60e0760fef6ceadb5dcdf56d5ea#diff-cca8843bd49355638f50da9975b53a49R47
--
You are receiving this mail because:
You are the assignee for the bug.
