On 09/08/2022 15:46, Mark Thomas wrote:
On 09/08/2022 15:12, Christopher Schultz wrote:
All,
I'm curious to find out if anyone is able to build a byte-for-byte
identical release given the 8.5.82 tag in GitHub. You won't be able to
generate the correct signed Windows binaries, of course, but you
should theoretically be able to build everything else.
TL;DR the build isn't reproducible.
There is something weird going on with time zones and timestamps that I
haven't got my head around yet. The tar.gz source archive is fine. The
zip archive is not.
In the release vote files, the files in the zip archive have a timestamp
15 hours earlier that those in the tar.gz archive. In my local build the
files in the zip archive have a timestamp 1 hour later than the tar.gz
archive.
I'm digging into this now.
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
