Source: pleiades
Version: 1.7.0-1
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: randomness
X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org
Hi,
Whilst working on the Reproducible Builds effort [0], I noticed
that pleiades could not be built reproducibly.
Patch attached.
We simply drop the signing of the jar - it makes no sense within
a Debian packaging context anyway.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/patches/reproducible_build.patch 1970-01-01 01:00:00.000000000
+0100
--- b/debian/patches/reproducible_build.patch 2016-08-27 19:58:05.445856328
+0100
@@ -0,0 +1,19 @@
+Description: Make the build reproducible
+Author: Chris Lamb <la...@debian.org>
+Last-Update: 2016-08-27
+
+--- pleiades-1.7.0.orig/build.xml
++++ pleiades-1.7.0/build.xml
+@@ -219,12 +219,6 @@
+ <jar destfile="plugins/${project.id}.jar"
basedir="./plugins/${project.id}"
+ manifest="plugins/${project.id}/META-INF/MANIFEST.MF"/>
+ <jar destfile="features/${project.id}.jar"
basedir="./features/${project.id}" />
+- <signjar keystore=".keystore" alias="MergeDoc"
storepass="mergedoc">
+- <sysproperty key="file.encoding" value="UTF-8" />
+- <fileset dir=".">
+- <include name="*/${project.id}.jar" />
+- </fileset>
+- </signjar>
+ <unjar src="plugins/${project.id}.jar"
dest="./plugins/${project.id}">
+ <patternset>
+ <include name="META-INF/*" />
--- a/debian/patches/series 2016-08-27 19:41:16.157812118 +0100
--- b/debian/patches/series 2016-08-27 19:58:03.381832045 +0100
@@ -3,3 +3,4 @@
compile_junit.patch
not_run_integrate.patch
0005-do-not-ask-timestamp.digicert.com-to-sign.patch
+reproducible_build.patch
__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>.
Please use
debian-j...@lists.debian.org for discussions and questions.
