I noticed that the bnd package fails to build reproducibly because one of
the jar files installed (/usr/share/java/bnd-2.4.1.jar) contains a nested
jar (embedded-repo.jar) that isn't processed by dh_strip_nondeterminism.
The timestamps in bnd-2.4.1.jar are properly replaced, but the ones in
embedded-repo.jar still reflect the actual build date.
It would be nice if strip-nondeterminism was able to process the nested
zip files automatically.
Reproducible-builds mailing list