[Bug 66346] Allow reproducible builds of all JDBC JAR files

2022-11-21 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66346 Mark Thomas changed: What|Removed |Added Resolution|--- |FIXED Status|NEW

[tomcat] branch 8.5.x updated: Allow reproducible builds of all JDBC JAR files

2022-11-21 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 49258540a6 Allow reproducible builds of all JDBC

[tomcat] branch 9.0.x updated: Allow reproducible builds of all JDBC JAR files

2022-11-21 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 7b1b85b0ae Allow reproducible builds of all JDBC

[tomcat] branch 10.1.x updated: Allow reproducible builds of all JDBC JAR files

2022-11-21 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.1.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.1.x by this push: new 40f0f7d571 Allow reproducible builds of all JDBC

[tomcat] branch main updated: Allow reproducible builds of all JDBC JAR files

2022-11-21 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 8ae3c81f09 Allow reproducible builds of all JDBC JAR

[GitHub] [tomcat] markt-asf merged pull request #566: Allow reproducible builds of all JDBC JAR files

2022-11-21 Thread GitBox
markt-asf merged PR #566: URL: https://github.com/apache/tomcat/pull/566 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail:

[GitHub] [tomcat] jgneff commented on pull request #566: Allow reproducible builds of all JDBC JAR files

2022-11-14 Thread GitBox
jgneff commented on PR #566: URL: https://github.com/apache/tomcat/pull/566#issuecomment-1314042008 After this fix, the only remaining difference that I have found between any two builds of Tomcat using the default Ant target is the build path that gets included in two XML files:

[GitHub] [tomcat] jgneff commented on pull request #566: Allow reproducible builds of all JDBC JAR files

2022-11-13 Thread GitBox
jgneff commented on PR #566: URL: https://github.com/apache/tomcat/pull/566#issuecomment-1312794140 I found how to test the [Tomcat JDBC Connection Pool](https://tomcat.apache.org/tomcat-10.0-doc/jdbc-pool.html) test JAR files (`tomcat-jdbc-test.jar` and `tomcat-jdbc-test-src.jar`). I

[Bug 66346] Allow reproducible builds of all JDBC JAR files

2022-11-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66346 --- Comment #1 from John Neffenger --- See GitHub pull request: Allow reproducible builds of all JDBC JAR files https://github.com/apache/tomcat/pull/566 -- You are receiving this mail because: You are the assignee for the bug

[GitHub] [tomcat] jgneff opened a new pull request, #566: Allow reproducible builds of all JDBC JAR files

2022-11-12 Thread GitBox
jgneff opened a new pull request, #566: URL: https://github.com/apache/tomcat/pull/566 Fixes [Bug 66346](https://bz.apache.org/bugzilla/show_bug.cgi?id=66346). Only the first change is required to fix the timestamps in `tomcat-jdbc-src.jar`, but this seemed a good time to fix the

[Bug 66346] Allow reproducible builds of all JDBC JAR files

2022-11-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66346 John Neffenger changed: What|Removed |Added URL||https://lists.reproducible-

[Bug 66346] New: Allow reproducible builds of all JDBC JAR files

2022-11-12 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66346 Bug ID: 66346 Summary: Allow reproducible builds of all JDBC JAR files Product: Tomcat 10 Version: unspecified Hardware: PC OS: Linux Status: NEW

[tomcat] branch 8.5.x updated: Sign reproducible builds by default. The detached signature is available

2022-08-11 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new c6b50a54f2 Sign reproducible builds by default

[tomcat] branch 9.0.x updated: Sign reproducible builds by default. The detached signature is available

2022-08-11 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 2ceef9aea7 Sign reproducible builds by default

[tomcat] branch 10.0.x updated: Sign reproducible builds by default. The detached signature is available

2022-08-11 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new 522c6b8d28 Sign reproducible builds by default

[tomcat] branch main updated: Sign reproducible builds by default. The detached signature is available

2022-08-11 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 3faf0ce54c Sign reproducible builds by default

[tomcat] branch 9.0.x updated: Increase minimum Ant version to 1.10.2 for reproducible builds

2022-06-09 Thread markt
for reproducible builds 88ae96abbb is described below commit 88ae96abbb3fde0f40985d32c03a4f0a2d0e0fa2 Author: Mark Thomas AuthorDate: Thu Jun 9 08:34:22 2022 +0100 Increase minimum Ant version to 1.10.2 for reproducible builds Ant 1.10.x requires Java 8 and Tomcat 10.0.x requires

[tomcat] branch 10.0.x updated: Increase minimum Ant version to 1.10.2 for reproducible builds

2022-06-09 Thread markt
to 1.10.2 for reproducible builds 9c0048ecc9 is described below commit 9c0048ecc983224f2eedc7f14bf6b06ef44fa606 Author: Mark Thomas AuthorDate: Thu Jun 9 08:34:22 2022 +0100 Increase minimum Ant version to 1.10.2 for reproducible builds Ant 1.10.x requires Java 8 and Tomcat 10.0.x requires

[tomcat] branch main updated: Increase minimum Ant version to 1.10.2 for reproducible builds

2022-06-09 Thread markt
for reproducible builds ff5d86fc3e is described below commit ff5d86fc3e14841562fa133bff958035ce2c2fc3 Author: Mark Thomas AuthorDate: Thu Jun 9 08:34:22 2022 +0100 Increase minimum Ant version to 1.10.2 for reproducible builds Ant 1.10.x requires Java 8 and Tomcat 10.1.x requires Java

[tomcat] branch 8.5.x updated: Reproducible builds: Signing the uninstaller changes the timestamp

2022-05-05 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 48683b7f92 Reproducible builds: Signing

[tomcat] branch 9.0.x updated: Reproducible builds: Signing the uninstaller changes the timestamp

2022-05-05 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 5c30f08214 Reproducible builds: Signing

[tomcat] branch 10.0.x updated: Reproducible builds: Signing the uninstaller changes the timestamp

2022-05-05 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new 0be4e58765 Reproducible builds: Signing

[tomcat] branch main updated: Reproducible builds: Signing the uninstaller changes the timestamp

2022-05-05 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 6e4d8876b9 Reproducible builds: Signing

[tomcat] 03/07: Reproducible builds: text files in JARs

2022-01-26 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 25b07bd75c932907c8d011dd5afe244a0f8983d2 Author: Mark Thomas AuthorDate: Mon Jan 24 11:13:33 2022 + Reproducible

[tomcat] 01/07: Reproducible builds: Consistent line endings in text files in JAR manifests

2022-01-26 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit a440261817a71cfccb6a914b852f257904df5726 Author: Mark Thomas AuthorDate: Mon Jan 24 10:23:14 2022 + Reproducible

[tomcat] 01/08: Reproducible builds: Consistent line endings in text files in JAR manifests

2022-01-26 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit b428e933959ed6450130d068e9847dd75b2037b9 Author: Mark Thomas AuthorDate: Mon Jan 24 10:23:14 2022 + Reproducible

[tomcat] 04/08: Reproducible builds: text files in JARs

2022-01-26 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit a515f3a1ccd874a5d76e484f21bf5682a751dbcd Author: Mark Thomas AuthorDate: Mon Jan 24 11:13:33 2022 + Reproducible

[tomcat] 06/08: Reproducible builds: consistent line endings for graal files

2022-01-26 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 2065a1d027959648e3eaa4504a2eec164a7ef7dd Author: Mark Thomas AuthorDate: Mon Jan 24 19:06:09 2022 + Reproducible

[tomcat] 02/08: Reproducible builds. Use the prefiltered files for consistency

2022-01-26 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 09d7149e247d833fa32356ee71c77ad5fab3aac7 Author: Mark Thomas AuthorDate: Mon Jan 24 12:15:07 2022 + Reproducible

[tomcat] 06/08: Reproducible builds: consistent line endings for graal files

2022-01-26 Thread markt
Reproducible builds: consistent line endings for graal files --- build.xml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/build.xml b/build.xml index 846ed21..44700f6 100644 --- a/build.xml +++ b/build.xml @@ -3785,6 +3785,9 @@ Read the Building page on the Apache Tomcat documentation site

[tomcat] 02/08: Reproducible builds. Use the prefiltered files for consistency

2022-01-26 Thread markt
Reproducible builds. Use the prefiltered files for consistency The prefiltered files have the correct contents and consistent line endings (LF) across all build platforms Also removes the need to pre-process these files to perform filtering --- res/bnd/build-defaults.bnd | 4

[tomcat] 04/08: Reproducible builds: text files in JARs

2022-01-26 Thread markt
Reproducible builds: text files in JARs --- build.xml | 10 ++ 1 file changed, 10 insertions(+) diff --git a/build.xml b/build.xml index 467232f..846ed21 100644 --- a/build.xml +++ b/build.xml @@ -971,6 +971,16 @@ when loading the ResourceBundles --> + + + + + + + +

[tomcat] 01/08: Reproducible builds: Consistent line endings in text files in JAR manifests

2022-01-26 Thread markt
Reproducible builds: Consistent line endings in text files in JAR manifests --- build.xml | 7 +++ 1 file changed, 7 insertions(+) diff --git a/build.xml b/build.xml index 8e29276..467232f 100644 --- a/build.xml +++ b/build.xml @@ -997,6 +997,13

[tomcat] 06/07: Reproducible builds: consistent line endings for graal files

2022-01-26 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit fd935d4195744cfe712ab3d179b581c775332d7a Author: Mark Thomas AuthorDate: Mon Jan 24 19:06:09 2022 + Reproducible

[tomcat] 04/07: Reproducible builds: text files in JARs

2022-01-26 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 925527b436586477d9231172dc6542b21b8dd537 Author: Mark Thomas AuthorDate: Mon Jan 24 11:13:33 2022 + Reproducible

[tomcat] 01/07: Reproducible builds: Consistent line endings in text files in JAR manifests

2022-01-26 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit fc7c4136c9bd74825993c8b8536d7a6305977292 Author: Mark Thomas AuthorDate: Mon Jan 24 10:23:14 2022 + Reproducible

[tomcat] 02/07: Reproducible builds. Use the prefiltered files for consistency

2022-01-26 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 66198545717ed07f3638a6f50f6f4f08bbfc40d1 Author: Mark Thomas AuthorDate: Mon Jan 24 12:15:07 2022 + Reproducible

Re: Reproducible builds update

2022-01-26 Thread Raymond Augé
Hey Mark, bnd is in ramp down phase targetting a release in Feb so if you do find an issue soon-ish we can work to get it in the release. Ray On Wed, Jan 26, 2022 at 4:05 AM Mark Thomas wrote: > I have made some progress on this over the last few days. The current > status is: > > - Builds

Re: Reproducible builds update

2022-01-26 Thread Mark Thomas
I have made some progress on this over the last few days. The current status is: - Builds are reproducible (excluding signing of Windows binaries) when using the same OS / Java / Ant combination. - JSign gives us what we need to handling the signing of the Windows binaries. "Just" need to

Re: Reproducible builds update

2022-01-24 Thread Mark Thomas
d.properties.default > +++ b/build.properties.default > @@ -38,8 +38,8 @@ version.suffix=-M10-dev >   # ----- Reproducible builds - >   # Uncomment and set to current time for reproducible builds >   # Note: The value is in seconds (unlike milliseconds used by System.currentT

Re: Reproducible builds update

2022-01-24 Thread Rainer Jung
t b/build.properties.default > index 35aeb76..e1003ea 100644 > --- a/build.properties.default > +++ b/build.properties.default > @@ -38,8 +38,8 @@ version.suffix=-M10-dev > # - Reproducible builds - > # Uncomment and set to current time for reproducible builds > # Note: The value is in seconds

Re: Reproducible builds update

2022-01-21 Thread Mark Thomas
On 21/01/2022 17:11, Christopher Schultz wrote: Maybe patch ant to work differently? I agree, that is the longer term fix. I'm not too familiar with the Ant code but I didn't see a simple way to fix it. At the moment the short-term fix of renaming or deleting stuff seems to be working.

Re: Reproducible builds update

2022-01-21 Thread Christopher Schultz
Mark, On 1/20/22 17:56, Mark Thomas wrote: On 20/01/2022 11:02, Mark Thomas wrote: On 19/01/2022 16:56, Rémy Maucherat wrote: On Wed, Jan 19, 2022 at 5:52 PM Emmanuel Bourg wrote: Fortunately a non-reproducible javadoc isn't really important, what matters the most is to have reproducible

Re: Reproducible builds update

2022-01-21 Thread Rémy Maucherat
On Thu, Jan 20, 2022 at 11:57 PM Mark Thomas wrote: > > On 20/01/2022 11:02, Mark Thomas wrote: > > On 19/01/2022 16:56, Rémy Maucherat wrote: > >> On Wed, Jan 19, 2022 at 5:52 PM Emmanuel Bourg wrote: > >>> Fortunately a non-reproducible javadoc isn't really important, what > >>> matters the

Re: Reproducible builds update

2022-01-20 Thread Mark Thomas
On 20/01/2022 11:02, Mark Thomas wrote: On 19/01/2022 16:56, Rémy Maucherat wrote: On Wed, Jan 19, 2022 at 5:52 PM Emmanuel Bourg wrote: Fortunately a non-reproducible javadoc isn't really important, what matters the most is to have reproducible executable packages. That seems like a

Re: Reproducible builds update

2022-01-20 Thread Mark Thomas
On 19/01/2022 16:56, Rémy Maucherat wrote: On Wed, Jan 19, 2022 at 5:52 PM Emmanuel Bourg wrote: Fortunately a non-reproducible javadoc isn't really important, what matters the most is to have reproducible executable packages. That seems like a reasonable statement ! Ack. I'll look at the

Re: Reproducible builds update

2022-01-19 Thread Rémy Maucherat
On Wed, Jan 19, 2022 at 5:52 PM Emmanuel Bourg wrote: > Fortunately a non-reproducible javadoc isn't really important, what > matters the most is to have reproducible executable packages. That seems like a reasonable statement ! Rémy

Re: Reproducible builds update

2022-01-19 Thread Emmanuel Bourg
Le 18/01/2022 à 21:03, Mark Thomas a écrit : I'm wondering about second issue. It would be nice to have a complete fix but if the full docs package isn't reproducible how much of an issue is that? Reproducibility issues with javadoc are quite frequent unfortunately, many Java packages in

Re: Reproducible builds update

2022-01-18 Thread Mark Thomas
at get zipped up that are the issue. I'm still undecided whether to try and fix this or not. I haven't got code signing working with reproducible builds yet but I have a few ideas and will be looking at that today. I also want to look at the results of comparing some cross-platform builds.

Re: Reproducible builds update

2022-01-18 Thread Romain Manni-Bucau
Hi Mark, It is possible to use jdk.javadoc/jdk.compiler as libs and plug in through the Context class forcing a JavaFileManager to force a DocFileFactory in the HtmlConfiguration but it will be way more complex than unzipping/rezipping the jar. Another option can be a light javaagent patching the

Re: Reproducible builds update

2022-01-18 Thread Christopher Schultz
Mark, On 1/18/22 15:03, Mark Thomas wrote: On 18/01/2022 19:39, Mark Thomas wrote: The first issue looks relatively simple to fix. I don't see an easy fix for the second. My best idea so far is some sort of post-processing for the Javadoc generation that extracts the file from the zip,

Re: Reproducible builds update

2022-01-18 Thread Mark Thomas
On 18/01/2022 19:39, Mark Thomas wrote: The first issue looks relatively simple to fix. I don't see an easy fix for the second. My best idea so far is some sort of post-processing for the Javadoc generation that extracts the file from the zip, sets the timestamp and then re-zips it.

[tomcat] 01/02: Fix order to support reproducible builds

2022-01-18 Thread markt
to support reproducible builds --- .../tomcat/util/xreflection/ObjectReflectionPropertyInspector.java | 7 +++ 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/java/org/apache/tomcat/util/xreflection/ObjectReflectionPropertyInspector.java b/java/org/apache/tomcat/util/xreflection

[tomcat] 01/02: Fix order to support reproducible builds

2022-01-18 Thread markt
to support reproducible builds --- .../tomcat/util/xreflection/ObjectReflectionPropertyInspector.java | 7 +++ 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/java/org/apache/tomcat/util/xreflection/ObjectReflectionPropertyInspector.java b/java/org/apache/tomcat/util/xreflection

[tomcat] 01/02: Fix order to support reproducible builds

2022-01-18 Thread markt
to support reproducible builds --- .../tomcat/util/xreflection/ObjectReflectionPropertyInspector.java | 7 +++ 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/java/org/apache/tomcat/util/xreflection/ObjectReflectionPropertyInspector.java b/java/org/apache/tomcat/util/xreflection

Reproducible builds update

2022-01-18 Thread Mark Thomas
Hi all, I've been looking at reproducible builds and my research so far indicates we have the following issues to solve: 1. ObjectReflectionPropertyInspector is not generating consistent code for XReflectionIntrospectionUtils. I think this is due to the various hash based collections

[tomcat] branch 9.0.x updated: Update timestamp for reproducible builds

2021-06-08 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 21dcdad Update timestamp for reproducible builds

[tomcat] branch 8.5.x updated: Update timestamp for reproducible builds

2021-06-08 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new d1cc88c Update timestamp for reproducible builds

[tomcat] branch 10.0.x updated: Update timestamp for reproducible builds

2021-06-08 Thread markt
builds e872349 is described below commit e87234939075a66cf0b157ff6f677597ccc5ce1a Author: Mark Thomas AuthorDate: Tue Jun 8 12:09:54 2021 +0100 Update timestamp for reproducible builds --- build.properties.default | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git

[tomcat] branch main updated: Update timestamp for reproducible builds

2021-06-08 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 796d2d6 Update timestamp for reproducible builds

Re: Reproducible builds

2021-03-24 Thread Mark Thomas
On March 24, 2021 3:57:47 PM UTC, Christopher Schultz wrote: >Mark, > >On 3/23/21 09:45, Mark Thomas wrote: >> On 23/03/2021 13:15, Mark Thomas wrote: >> >> >> >>> I did a little more digging. There is an assumption in >JarInputStream >>> that /META-INF/MANIFEST.MF is either first or only

Re: Reproducible builds

2021-03-24 Thread Christopher Schultz
Mark, On 3/23/21 09:45, Mark Thomas wrote: On 23/03/2021 13:15, Mark Thomas wrote: I did a little more digging. There is an assumption in JarInputStream that /META-INF/MANIFEST.MF is either first or only preceded by /META-INF/ I suspect I'm going to need to revert the to changes. I'm

[tomcat] branch 9.0.x updated: Reproducible builds: Consistent line endings for .sh files in src distro

2021-03-23 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 75d2cdb Reproducible builds: Consistent line

[tomcat] branch master updated: Reproducible builds: Consistent line endings for .sh files in src distro

2021-03-23 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push: new d44dd7b Reproducible builds: Consistent line

[tomcat] branch 8.5.x updated: Reproducible builds. Implement better solution for JARs

2021-03-23 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 017f2fa Reproducible builds. Implement better

[tomcat] branch 9.0.x updated: Reproducible builds. Implement better solution for JARs

2021-03-23 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new ad731ed Reproducible builds. Implement better

[tomcat] branch master updated: Reproducible builds. Implement better solution for JARs

2021-03-23 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push: new 2a065a5 Reproducible builds. Implement better

Re: Reproducible builds

2021-03-23 Thread Mark Thomas
On 23/03/2021 13:15, Mark Thomas wrote: I did a little more digging. There is an assumption in JarInputStream that /META-INF/MANIFEST.MF is either first or only preceded by /META-INF/ I suspect I'm going to need to revert the to changes. I'm currently looking into alternatives. Aha!

Re: Reproducible builds

2021-03-23 Thread Mark Thomas
On 22/03/2021 14:53, Konstantin Kolinko wrote: пн, 22 мар. 2021 г. в 17:32, Mark Thomas : On 22/03/2021 13:16, Konstantin Kolinko wrote: сб, 20 мар. 2021 г. в 18:24, Emmanuel Bourg : I got a quick look, I guess you replaced the tasks with to make the timestamp of the zip entries

Re: Reproducible builds

2021-03-22 Thread Konstantin Kolinko
пн, 22 мар. 2021 г. в 17:32, Mark Thomas : > > On 22/03/2021 13:16, Konstantin Kolinko wrote: > > сб, 20 мар. 2021 г. в 18:24, Emmanuel Bourg : > > >> I got a quick look, I guess you replaced the tasks with to > >> make the timestamp of the zip entries reproducible? I'm not sure this is > >>

Re: Reproducible builds

2021-03-22 Thread Mark Thomas
reproducible builds (by setting an explicit timestamp when building). [1] Looking at "maven-core-3.3.9.jar" as an example, it has entries for directories, If the jar task does not do what is needed for us, it is better to ask Apache Ant project for a fix (so that other projects can benefit from

Re: Reproducible builds

2021-03-22 Thread Konstantin Kolinko
by missing directories, but I do not have a link - just from memory.) I know that Apache Maven is capable of creating reproducible builds (by setting an explicit timestamp when building). [1] Looking at "maven-core-3.3.9.jar" as an example, it has entries for directories, If the

Re: Reproducible builds

2021-03-22 Thread Mark Thomas
On 20/03/2021 15:24, Emmanuel Bourg wrote: Le 19/03/2021 à 16:39, Mark Thomas a écrit : Over the last few days I have been looking at making the Tomcat builds (more) reproducible. I have currently reached the stage where sequential builds on my local machine produce identical output. That's

Re: Reproducible builds

2021-03-20 Thread Emmanuel Bourg
Le 19/03/2021 à 16:39, Mark Thomas a écrit : > Over the last few days I have been looking at making the Tomcat builds > (more) reproducible. I have currently reached the stage where sequential > builds on my local machine produce identical output. That's a great idea. > There are several

[tomcat] branch 8.5.x updated: Reproducible builds: Windows installer

2021-03-19 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new cc45875 Reproducible builds: Windows installer

[tomcat] branch master updated: Reproducible builds: Windows installer

2021-03-19 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push: new c3215cf Reproducible builds: Windows installer

[tomcat] branch 8.5.x updated: Reproducible builds: Binary packages (excluding installer)

2021-03-19 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 1df6d44 Reproducible builds: Binary packages

[tomcat] 02/02: Reproducible builds: Binary packages (excluding installer)

2021-03-19 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit f79d84fecbcb5bea7cf52fe0e0f84675940940a1 Author: Mark Thomas AuthorDate: Thu Mar 18 20:53:49 2021 + Reproducible

[tomcat] 01/02: Reproducible builds: XReflectionIntrospectionUtils.java

2021-03-19 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git commit 974af564eb4e0e0fe873b3ae0f80f0ed29d32da8 Author: Mark Thomas AuthorDate: Thu Mar 18 19:50:00 2021 + Reproducible

[tomcat] branch master updated: Reproducible builds: Binary packages (excluding installer)

2021-03-19 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push: new c06dbae Reproducible builds: Binary packages

[tomcat] branch master updated: Reproducible builds: XReflectionIntrospectionUtils.java

2021-03-19 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push: new b2b5773 Reproducible builds

[tomcat] branch 8.5.x updated: Reproducible builds: Make jdbc-pool JAR reproducible

2021-03-19 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 760f357 Reproducible builds: Make jdbc-pool JAR

[tomcat] branch 9.0.x updated: Reproducible builds: Make jdbc-pool JAR reproducible

2021-03-19 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new d988741 Reproducible builds: Make jdbc-pool JAR

[tomcat] branch master updated: Reproducible builds: Make jdbc-pool JAR reproducible

2021-03-19 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push: new f558a19 Reproducible builds: Make jdbc-pool JAR

[tomcat] branch 8.5.x updated: Reproducible builds: Make i18n JARs reproducible

2021-03-19 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new d2b6c69 Reproducible builds: Make i18n JARs

[tomcat] branch 9.0.x updated: Reproducible builds: Make i18n JARs reproducible

2021-03-19 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 7b4c116 Reproducible builds: Make i18n JARs

[tomcat] branch master updated: Reproducible builds: Make i18n JARs reproducible

2021-03-19 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push: new 2aa6464 Reproducible builds: Make i18n JARs

[tomcat] branch 9.0.x updated: Reproducible builds: Make Graal processed JARs reproducible

2021-03-19 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new f33ebf3 Reproducible builds: Make Graal processed

[tomcat] branch master updated: Reproducible builds: Make Graal processed JARs reproducible

2021-03-19 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push: new 368f8c4 Reproducible builds: Make Graal

[tomcat] branch 8.5.x updated: Reproducible builds: Make non-bnd processed JARs reproducible

2021-03-19 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new cbf0e27 Reproducible builds: Make non-bnd

[tomcat] branch 9.0.x updated: Reproducible builds: Make non-bnd processed JARs reproducible

2021-03-19 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 8411469 Reproducible builds: Make non-bnd

[tomcat] branch master updated: Reproducible builds: Make non-bnd processed JARs reproducible

2021-03-19 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push: new 3149bef Reproducible builds: Make non-bnd

[tomcat] branch master updated: Reproducible builds: Make bnd processed JARs reproducible

2021-03-19 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/master by this push: new 49e13cc Reproducible builds: Make bnd processed

Reproducible builds

2021-03-19 Thread Mark Thomas
Hi all, Over the last few days I have been looking at making the Tomcat builds (more) reproducible. I have currently reached the stage where sequential builds on my local machine produce identical output. There are several caveats 1. Some of the embedded JARs can vary between runs due to a