maven-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Hervé Boutemy (JIRA) <j...@apache.org>
Subject [jira] [Updated] (MNG-6276) Support reproducible builds
Date Sat, 07 Oct 2017 13:51:00 GMT

     [ https://issues.apache.org/jira/browse/MNG-6276?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Hervé Boutemy updated MNG-6276:
-------------------------------
    Description: 
A venerable build system like maven should support full build reproducibilty (i.e. producing
bit a bit identical binaries from the same source).

As initiatives like https://reproducible-builds.org gain traction and the news of the recent
Debian policy change to mandate this build behavior (see https://reproducible.alioth.debian.org/blog/posts/121/),
this seems a feature that needs to be considered for inclusion into maven core & core
plugins.

There is an independent ongoing effort to support this feature and the author stated that
he has found interest from maven project to integrate his work: https://github.com/Zlika/reproducible-build-maven-plugin/issues/6#issuecomment-325005883

I hope this issue helps kickstart the effort.


  was:
A venerable build system like maven should support full build reproduibilty (i.e. producing
bit a bit identical binaries from the same source).

As initiatives like https://reproducible-builds.org gain traction and the news of the recent
Debian policy change to mandate this build behavior (see https://reproducible.alioth.debian.org/blog/posts/121/),
this seems a feature that needs to be considered for inclusion into maven core.

There is an indipendent ongoing effort to support this feature and the author stated that
he has found interest from maven project to integrate his work: https://github.com/Zlika/reproducible-build-maven-plugin/issues/6#issuecomment-325005883

I hope this issue helps kickstart the effort.



> Support reproducible builds
> ---------------------------
>
>                 Key: MNG-6276
>                 URL: https://issues.apache.org/jira/browse/MNG-6276
>             Project: Maven
>          Issue Type: New Feature
>          Components: core, General
>            Reporter: Paolo Sacconier
>
> A venerable build system like maven should support full build reproducibilty (i.e. producing
bit a bit identical binaries from the same source).
> As initiatives like https://reproducible-builds.org gain traction and the news of the
recent Debian policy change to mandate this build behavior (see https://reproducible.alioth.debian.org/blog/posts/121/),
this seems a feature that needs to be considered for inclusion into maven core & core
plugins.
> There is an independent ongoing effort to support this feature and the author stated
that he has found interest from maven project to integrate his work: https://github.com/Zlika/reproducible-build-maven-plugin/issues/6#issuecomment-325005883
> I hope this issue helps kickstart the effort.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message