Re: Reproducible builds, jars, bundles

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

Re: Reproducible builds, jars, bundles

Gary Gregory-2
Romain,

Yeah, I found the same code fragment but it is not clear to me if keeping
that set sorted would have unintended consequences.

I pointed folks in the PRs to this thread so I am hopping a plugin
maintainer will opine here.

Gary

On Fri, Jul 10, 2020, 10:53 Romain Manni-Bucau <[hidden email]>
wrote:

> Hi Gary,
>
> Maybe I misunderstood something but isn't it that felix bundle plugin does
> not sort the maven resources ([1]?
>
> [1]
>
> https://github.com/apache/felix-dev/blob/7f4d31b384d9d83c772680a8627df18ff078eaa4/tools/maven-bundle-plugin/src/main/java/org/apache/felix/bundleplugin/BundlePlugin.java#L2036
>
> Romain Manni-Bucau
> @rmannibucau <https://twitter.com/rmannibucau> |  Blog
> <https://rmannibucau.metawerx.net/> | Old Blog
> <http://rmannibucau.wordpress.com> | Github <
> https://github.com/rmannibucau> |
> LinkedIn <https://www.linkedin.com/in/rmannibucau> | Book
> <
> https://www.packtpub.com/application-development/java-ee-8-high-performance
> >
>
>
> Le ven. 10 juil. 2020 à 16:44, Gary Gregory <[hidden email]> a
> écrit :
>
> > Hi All,
> >
> > Over at Apache Commons, we are looking at creating reproducible builds
> via:
> >
> > https://github.com/apache/commons-parent/pull/9
> >
> > As discussed in that thread, a bundle's "Include-Resource" manifest
> header
> > has a value with file system elements in different orders depending on
> file
> > system used to generate the jar, IOW, not bit by bit reproducible.
> >
> > Folks in that discussion and in another here
> > https://github.com/apache/commons-lang/pull/578, suggested that the
> issue
> > might reside in Maven relying on the file system order and not in
> > maven-bundle-plugin or the bnd library as initially considered.
> >
> > May you please provide any guidance?
> >
> > Thank you,
> > Gary
> >
>