guix-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: "jar" tool and and reproducible builds - how?


From: Gábor Boskovits
Subject: Re: "jar" tool and and reproducible builds - how?
Date: Tue, 5 Nov 2019 12:53:24 +0100

Hello,

Danny Milosavljevic <address@hidden> ezt írta (időpont: 2019. nov. 5., K, 10:49):
Hi Gábor,

> What diff remains there? There might be more jars or jmods inside...
> Most of the trickery should be in ant build system.

This package does not use ant-build-system or any other java build system since
there are only very few Java tools in nesc (I'm thinking of disabling those,
too).

diffoscope states only the following, via "zipinfo -v" on "lib/ncc/nesc.jar":

 -  file last modified on (DOS date/time):          2019 Nov 4 17:10:26
 +  file last modified on (DOS date/time):          2019 Nov 4 17:10:56

This looks like a jar timestamps issue. Adding a phase similar to strip-jar-timestamps in ant-build-system should work.
It extracts the jar to a temporary directory, resets file timestamps, and then repacks it, and resets the timestamp on the archive.
Could you check if that works for you?
 

It's repeated a lot of times.

No other files but "lib/ncc/nesc.jar" are affected.
apply git send email
> I don't know right now, but have a look later.

Thanks!

Best regards,
g_bor
--
OpenPGP Key Fingerprint: 7988:3B9F:7D6A:4DBF:3719:0367:2506:A96C:CF63:0B21

reply via email to

[Prev in Thread] Current Thread [Next in Thread]