GNU bug report logs - #38162
icedtea "jar" tool could automatically pack reproducible jars

Previous Next

Package: guix;

Reported by: Danny Milosavljevic <dannym <at> scratchpost.org>

Date: Sun, 10 Nov 2019 14:49:02 UTC

Severity: normal

Full log


View this message in rfc822 format

From: Ludovic Courtès <ludo <at> gnu.org>
To: Danny Milosavljevic <dannym <at> scratchpost.org>
Cc: 38162 <at> debbugs.gnu.org
Subject: bug#38162: icedtea "jar" tool could automatically pack reproducible jars
Date: Mon, 11 Nov 2019 21:59:13 +0100
Hi Danny,

Danny Milosavljevic <dannym <at> scratchpost.org> skribis:

> it would be better if icedtea's "jar" tool automatically packed reproducible jar
> files instead of us doing some barely safe unzip-then-rezip-with-specific-order
> in the ant-build-system.
>
> It could check the environment variable SOURCE_DATE_EPOCH and then use that as
> timestamp for the zip entries.

Someone proposed patches several months ago to reset timestamps in
jar/zip files, which I reviewed, but then lost track of (which may well
be my fault!) and I can’t find them on guix-patches now.

If you don’t mind researching a bit :-), this could be helpful.

Ludo’.




This bug report was last modified 5 years and 214 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.