I have made some progress on this over the last few days. The current
status is:
- Builds are reproducible (excluding signing of Windows binaries) when
using the same OS / Java / Ant combination.
- JSign gives us what we need to handling the signing of the Windows
binaries. "Just" need to implement it.
- No solution yet for the zipped JSON files created by the Javadoc tool.
This is low priority. If we decide to address it, the short-term fix
will be to unpack and rebuild the zip. The long term fix will be to
get the Javadoc tool changed.
- The Ant archive cross-platform ordering issues (".../..." vs
"...\...") have been worked around with some renaming. The long term
fix is to address this in Ant.
- I think there is another BND issue. I've seen one instance of
module-info.class being generated differently. I'm not sure if this is
a pure BND issue or if cross-platform builds were a factor.
- I have also seen one issue where XReflectionIntrospectionUtils.class
was generated differently. I haven't looked into that yet.
I have a few commits to push to improve cross-platform reproducibility.
One is for the Ant archive ordering issue. The rest are various LF vs
CRLF issues.
My plan is to push these changes and back-port them - probably later today.
I intend to continue working on making the Tomcat build reproducible
cross-platform but I anticipate that this work will be on the
back-burner for a while as I have a couple of other things I want to
look at first.
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
