From mboxrd@z Thu Jan 1 00:00:00 1970 From: Danny Milosavljevic Subject: bug#38162: icedtea "jar" tool could automatically pack reproducible jars Date: Sun, 10 Nov 2019 15:48:49 +0100 Message-ID: <20191110154849.1123db10@scratchpost.org> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="Sig_/AfOnfzRXLSLemFYdHblEL6e"; protocol="application/pgp-signature"; micalg=pgp-sha256 Return-path: Received: from eggs.gnu.org ([2001:470:142:3::10]:43609) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1iToWZ-0004cD-Kj for bug-guix@gnu.org; Sun, 10 Nov 2019 09:49:08 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1iToWW-0001pr-Of for bug-guix@gnu.org; Sun, 10 Nov 2019 09:49:06 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:41989) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1iToWU-0001mU-AF for bug-guix@gnu.org; Sun, 10 Nov 2019 09:49:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1iToWU-0001K7-8m for bug-guix@gnu.org; Sun, 10 Nov 2019 09:49:02 -0500 Sender: "Debbugs-submit" Resent-Message-ID: Received: from eggs.gnu.org ([2001:470:142:3::10]:43594) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1iToWN-0004bj-Jf for bug-guix@gnu.org; Sun, 10 Nov 2019 09:48:56 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1iToWJ-0001bo-VC for bug-guix@gnu.org; Sun, 10 Nov 2019 09:48:54 -0500 Received: from dd26836.kasserver.com ([85.13.145.193]:56358) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1iToWJ-0001aa-Oi for bug-guix@gnu.org; Sun, 10 Nov 2019 09:48:51 -0500 Received: from localhost (unknown [185.17.13.127]) by dd26836.kasserver.com (Postfix) with ESMTPSA id 568C33360AA1 for ; Sun, 10 Nov 2019 15:48:50 +0100 (CET) List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: 38162@debbugs.gnu.org --Sig_/AfOnfzRXLSLemFYdHblEL6e Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Hi, it would be better if icedtea's "jar" tool automatically packed reproducibl= e jar files instead of us doing some barely safe unzip-then-rezip-with-specific-o= rder in the ant-build-system. It could check the environment variable SOURCE_DATE_EPOCH and then use that= as timestamp for the zip entries. Alternatively, it could just leave the DOS timestamp field off of the zip entries. Maven already has support for the former[1]--we might be able to reuse that. [1] https://maven.apache.org/plugins/maven-jar-plugin/jar-mojo.html --Sig_/AfOnfzRXLSLemFYdHblEL6e Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEds7GsXJ0tGXALbPZ5xo1VCwwuqUFAl3II1EACgkQ5xo1VCww uqXvhAf8CasRnJCxUqlNONVPeF/HMATV9YVzEpLjNkaTnoP8HlOEaM+LPWaLXt87 lSbA5yFLGZRPPTz9xPUutM8vWg/XyAl5O/jGIDPDK29Vl2hlUwxrFyo3WmTP0QBs lPj9n48Z5ZwM4NoLS6KAPNCokwPR/wVOs1m5OhfrzCDGrOIVAnksNE39MZxEfIZR 54UFQOlInzCSgnBpMiDuO7UEnV4xRiXeSp/dHZ/aK3KAQKLJeKHMRLOkKao+ePtQ KOaHPHcydyVh75SnDcBnLV9psmOKH+SIfc0ydSkEPKD6yUdZirpR+PlRH2UFX9Gw iftF/EkLVucN48jx5FGZnAuBwn19vA== =kGaR -----END PGP SIGNATURE----- --Sig_/AfOnfzRXLSLemFYdHblEL6e--