Re: [M2] Reproducible build

2007-12-24 Thread Ryan Moquin
No prob. Hopefully something like that works out for you. Have a good holiday. On Dec 23, 2007 4:01 PM, Rémy Sanlaville [EMAIL PROTECTED] wrote: Hi Ryan, Thanks for the link. I will try it and let you know. For the moment I am on holidays so it won't be before mi-January 2008. Rémy

Re: [M2] Reproducible build

2007-12-23 Thread Ryan Moquin
I really like the tool BeyondCompare. I had my company get me a license a couple weeks ago so I could do directory compares. If you want to compare releases or more complicated things, such as directories, just unzip them and run a tool like that to verify the differences. I've been using it to

Re: [M2] Reproducible build

2007-12-23 Thread Rémy Sanlaville
Hi Ryan, Thanks for the link. I will try it and let you know. For the moment I am on holidays so it won't be before mi-January 2008. Rémy 2007/12/23, Ryan Moquin [EMAIL PROTECTED]: I really like the tool BeyondCompare. I had my company get me a license a couple weeks ago so I could do

Re: [M2] Reproducible build

2007-12-17 Thread Rémy Sanlaville
Thanks all for your comments, Yes, the package will be different for date or time stamps reason and comparing hashes (MD5 or SHA1) seems to be not enough. But it's not always a problem to have such differences and it would be nice to find a tools that shows what changes from two packages. I had

Re: [M2] Reproducible build

2007-12-15 Thread Michael McCallum
The maven jar plugin puts the pom and pom properties into all jars it builds... which can be useful for comparing at a high level... we run scripts in all our environments that extracts the artifact and version names and emails us daily. Very handy to know exactly whats deployed and have it

[M2] Reproducible build

2007-12-14 Thread Rémy Sanlaville
Hi, I would like to make sure that my project build is reproducible. For instance, I want to be sure that I can package again a tagged version. So I am looking for a tools that can compare two package (two jar, two war, two ear...) and eventually shows the potential differences. Do you know if a

Re: [M2] Reproducible build

2007-12-14 Thread Rob Hasselbaum
Comparing hashes (MD5 or SHA1) will definitely tell you whether two files are identical, but it won't tell you what the differences are. However, you could write a script that processes the output of jar -tv or unzip -lv and spits out the differences. The latter tool (unzip from www.info-zip.org)

Re: [M2] Reproducible build

2007-12-14 Thread Aaron Metzger
Rémy Sanlaville wrote: Hi, I would like to make sure that my project build is reproducible. For instance, I want to be sure that I can package again a tagged version. So I am looking for a tools that can compare two package (two jar, two war, two ear...) and eventually shows the potential