maven-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Hervé Boutemy (JIRA) <j...@apache.org>
Subject [jira] [Updated] (MNG-6276) Support Reproducible Builds (https://reproducible-builds.org)
Date Sun, 19 May 2019 16:31:00 GMT

     [ https://issues.apache.org/jira/browse/MNG-6276?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Hervé Boutemy updated MNG-6276:
-------------------------------
    Description: 
A venerable build system like Maven should support full build reproducibilty (i.e. producing
bit a bit identical binaries from the same source).

As initiatives like https://reproducible-builds.org gain traction and the news of the recent
Debian policy change to mandate this build behavior (see https://reproducible.alioth.debian.org/blog/posts/121/),
this seems a feature that needs to be considered for inclusion into Maven core & core
plugins.

There is an independent ongoing effort to support this feature and the author stated that
he has found interest from maven project to integrate his work: https://github.com/Zlika/reproducible-build-maven-plugin/issues/6#issuecomment-325005883

I hope this issue helps kickstart the effort.


  was:
A venerable build system like maven should support full build reproducibilty (i.e. producing
bit a bit identical binaries from the same source).

As initiatives like https://reproducible-builds.org gain traction and the news of the recent
Debian policy change to mandate this build behavior (see https://reproducible.alioth.debian.org/blog/posts/121/),
this seems a feature that needs to be considered for inclusion into maven core & core
plugins.

There is an independent ongoing effort to support this feature and the author stated that
he has found interest from maven project to integrate his work: https://github.com/Zlika/reproducible-build-maven-plugin/issues/6#issuecomment-325005883

I hope this issue helps kickstart the effort.



> Support Reproducible Builds (https://reproducible-builds.org)
> -------------------------------------------------------------
>
>                 Key: MNG-6276
>                 URL: https://issues.apache.org/jira/browse/MNG-6276
>             Project: Maven
>          Issue Type: New Feature
>          Components: core, General
>            Reporter: Paolo Sacconier
>            Priority: Major
>          Time Spent: 1h
>  Remaining Estimate: 0h
>
> A venerable build system like Maven should support full build reproducibilty (i.e. producing
bit a bit identical binaries from the same source).
> As initiatives like https://reproducible-builds.org gain traction and the news of the
recent Debian policy change to mandate this build behavior (see https://reproducible.alioth.debian.org/blog/posts/121/),
this seems a feature that needs to be considered for inclusion into Maven core & core
plugins.
> There is an independent ongoing effort to support this feature and the author stated
that he has found interest from maven project to integrate his work: https://github.com/Zlika/reproducible-build-maven-plugin/issues/6#issuecomment-325005883
> I hope this issue helps kickstart the effort.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message