[jira] [Commented] (MSHARED-661) Remove manifest entry "Built-By" for reproducible builds

2019-01-21 Thread Michael Osipov (JIRA) 


[ 
https://issues.apache.org/jira/browse/MSHARED-661?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16748165#comment-16748165
 ] 

Michael Osipov commented on MSHARED-661:


Unfortunately, this isn't a list I can follow due to my limited amount of time 
:(

> Remove manifest entry "Built-By" for reproducible builds
> 
>
> Key: MSHARED-661
> URL: https://issues.apache.org/jira/browse/MSHARED-661
> Project: Maven Shared Components
>  Issue Type: Wish
>  Components: maven-archiver
>Affects Versions: maven-archiver-3.3.0
>Reporter: Zlika
>Assignee: Michael Osipov
>Priority: Minor
> Fix For: maven-archiver-3.3.1
>
>
> Maven-archiver automatically creates "Built-By: ", "Build-Jdk: 
> " and "Created-By: " Manifest 
> entries.
> In the frame of a reproducible build (cf. MNG-6276) these entries make the 
> build not reproducible.
> Maven-archiver should propose an option to disable the creation of these 
> non-reproducible manifest entries.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Commented] (MSHARED-661) Remove manifest entry "Built-By" for reproducible builds

2019-01-21 Thread JIRA 


[ 
https://issues.apache.org/jira/browse/MSHARED-661?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16748004#comment-16748004
 ] 

Hervé Boutemy commented on MSHARED-661:
---

[~michael-o] discussion on https://reproducible-builds.org/docs/jvm/ happens on 
Reproducible Builds mailing list
and it's not focused on Maven, but more widely on the JVM: implementation by 
build tools will follow

> Remove manifest entry "Built-By" for reproducible builds
> 
>
> Key: MSHARED-661
> URL: https://issues.apache.org/jira/browse/MSHARED-661
> Project: Maven Shared Components
>  Issue Type: Wish
>  Components: maven-archiver
>Affects Versions: maven-archiver-3.3.0
>Reporter: Zlika
>Assignee: Michael Osipov
>Priority: Minor
> Fix For: maven-archiver-3.3.1
>
>
> Maven-archiver automatically creates "Built-By: ", "Build-Jdk: 
> " and "Created-By: " Manifest 
> entries.
> In the frame of a reproducible build (cf. MNG-6276) these entries make the 
> build not reproducible.
> Maven-archiver should propose an option to disable the creation of these 
> non-reproducible manifest entries.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Commented] (MSHARED-661) Remove manifest entry "Built-By" for reproducible builds

2018-12-30 Thread Michael Osipov (JIRA) 


[ 
https://issues.apache.org/jira/browse/MSHARED-661?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16731019#comment-16731019
 ] 

Michael Osipov commented on MSHARED-661:


[~hboutemy], good idea. Can we have a seperate issue on that? I have some 
change proposals to make.

> Remove manifest entry "Built-By" for reproducible builds
> 
>
> Key: MSHARED-661
> URL: https://issues.apache.org/jira/browse/MSHARED-661
> Project: Maven Shared Components
>  Issue Type: Wish
>  Components: maven-archiver
>Affects Versions: maven-archiver-3.3.0
>Reporter: Zlika
>Assignee: Michael Osipov
>Priority: Minor
> Fix For: maven-archiver-3.3.1
>
>
> Maven-archiver automatically creates "Built-By: ", "Build-Jdk: 
> " and "Created-By: " Manifest 
> entries.
> In the frame of a reproducible build (cf. MNG-6276) these entries make the 
> build not reproducible.
> Maven-archiver should propose an option to disable the creation of these 
> non-reproducible manifest entries.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Commented] (MSHARED-661) Remove manifest entry "Built-By" for reproducible builds

2018-12-30 Thread JIRA 


[ 
https://issues.apache.org/jira/browse/MSHARED-661?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16731018#comment-16731018
 ] 

Hervé Boutemy commented on MSHARED-661:
---

FYI, I just created some proposal for buildinfo files in Maven repositories: 
https://reproducible-builds.org/docs/jvm/

> Remove manifest entry "Built-By" for reproducible builds
> 
>
> Key: MSHARED-661
> URL: https://issues.apache.org/jira/browse/MSHARED-661
> Project: Maven Shared Components
>  Issue Type: Wish
>  Components: maven-archiver
>Affects Versions: maven-archiver-3.3.0
>Reporter: Zlika
>Assignee: Michael Osipov
>Priority: Minor
> Fix For: maven-archiver-3.3.1
>
>
> Maven-archiver automatically creates "Built-By: ", "Build-Jdk: 
> " and "Created-By: " Manifest 
> entries.
> In the frame of a reproducible build (cf. MNG-6276) these entries make the 
> build not reproducible.
> Maven-archiver should propose an option to disable the creation of these 
> non-reproducible manifest entries.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Commented] (MSHARED-661) Remove manifest entry "Built-By" for reproducible builds

2018-12-25 Thread Hudson (JIRA) 


[ 
https://issues.apache.org/jira/browse/MSHARED-661?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16728792#comment-16728792
 ] 

Hudson commented on MSHARED-661:


Build succeeded in Jenkins: Maven TLP » maven-archiver » master #41

See https://builds.apache.org/job/maven-box/job/maven-archiver/job/master/41/

> Remove manifest entry "Built-By" for reproducible builds
> 
>
> Key: MSHARED-661
> URL: https://issues.apache.org/jira/browse/MSHARED-661
> Project: Maven Shared Components
>  Issue Type: Wish
>  Components: maven-archiver
>Affects Versions: maven-archiver-3.3.0
>Reporter: Zlika
>Assignee: Michael Osipov
>Priority: Minor
> Fix For: maven-archiver-3.3.1
>
>
> Maven-archiver automatically creates "Built-By", "Build-Jdk" and "Created-By" 
> Manifest entries. In the frame of a reproducible build (cf. MNG-6276) these 
> entries make the build not reproducible.
> Maven-archiver should propose an option to disable the creation of these 
> non-reproducible manifest entries.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Commented] (MSHARED-661) Remove manifest entry "Built-By" for reproducible builds

2018-12-25 Thread Hudson (JIRA) 


[ 
https://issues.apache.org/jira/browse/MSHARED-661?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16728790#comment-16728790
 ] 

Hudson commented on MSHARED-661:


Build succeeded in Jenkins: Maven TLP » maven-archiver » MSHARED-661 #2

See 
https://builds.apache.org/job/maven-box/job/maven-archiver/job/MSHARED-661/2/

> Remove manifest entry "Built-By" for reproducible builds
> 
>
> Key: MSHARED-661
> URL: https://issues.apache.org/jira/browse/MSHARED-661
> Project: Maven Shared Components
>  Issue Type: New Feature
>  Components: maven-archiver
>Affects Versions: maven-archiver-3.3.0
>Reporter: Zlika
>Assignee: Michael Osipov
>Priority: Minor
> Fix For: maven-archiver-3.3.1
>
>
> Maven-archiver automatically creates "Built-By", "Build-Jdk" and "Created-By" 
> Manifest entries. In the frame of a reproducible build (cf. MNG-6276) these 
> entries make the build not reproducible.
> Maven-archiver should propose an option to disable the creation of these 
> non-reproducible manifest entries.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Commented] (MSHARED-661) Remove manifest entry "Built-By" for reproducible builds

2018-12-25 Thread Michael Osipov (JIRA) 


[ 
https://issues.apache.org/jira/browse/MSHARED-661?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16728787#comment-16728787
 ] 

Michael Osipov commented on MSHARED-661:


The issue with {{Built-Jdk}} is that it does not reflect toolchains. It implies 
that the same JDK is being used for building the source as running the Maven 
instance. I would consider dropping this one too in a separate ticket.

> Remove manifest entry "Built-By" for reproducible builds
> 
>
> Key: MSHARED-661
> URL: https://issues.apache.org/jira/browse/MSHARED-661
> Project: Maven Shared Components
>  Issue Type: New Feature
>  Components: maven-archiver
>Affects Versions: maven-archiver-3.3.0
>Reporter: Zlika
>Assignee: Michael Osipov
>Priority: Minor
> Fix For: maven-archiver-3.3.1
>
>
> Maven-archiver automatically creates "Built-By", "Build-Jdk" and "Created-By" 
> Manifest entries. In the frame of a reproducible build (cf. MNG-6276) these 
> entries make the build not reproducible.
> Maven-archiver should propose an option to disable the creation of these 
> non-reproducible manifest entries.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Commented] (MSHARED-661) Remove manifest entry "Built-By" for reproducible builds

2018-12-25 Thread Michael Osipov (JIRA) 


[ 
https://issues.apache.org/jira/browse/MSHARED-661?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16728786#comment-16728786
 ] 

Michael Osipov commented on MSHARED-661:


As agreed, {{Built-By}} will go, the rest will stay for now.

> Remove manifest entry "Built-By" for reproducible builds
> 
>
> Key: MSHARED-661
> URL: https://issues.apache.org/jira/browse/MSHARED-661
> Project: Maven Shared Components
>  Issue Type: New Feature
>  Components: maven-archiver
>Affects Versions: maven-archiver-3.3.0
>Reporter: Zlika
>Assignee: Michael Osipov
>Priority: Minor
> Fix For: maven-archiver-3.3.1
>
>
> Maven-archiver automatically creates "Built-By", "Build-Jdk" and "Created-By" 
> Manifest entries. In the frame of a reproducible build (cf. MNG-6276) these 
> entries make the build not reproducible.
> Maven-archiver should propose an option to disable the creation of these 
> non-reproducible manifest entries.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)