[
https://issues.apache.org/jira/browse/MPOM-255?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Konrad Windszus updated MPOM-255:
---------------------------------
Description:
In case the release's root pom.xml doesn't overwrite
"project.build.outputTimestamp" it takes the value from
[https://github.com/apache/maven-apache-parent/blob/4813409e6a1ecfea11c8eb22a5f0443f790f1454/pom.xml#L95.]
Instead of the fallback an enforcer rule should be added to require a property
"project.build.outputTimestamp" to be set in the right format for reproducible
builds to work
([https://maven.apache.org/guides/mini/guide-reproducible-builds.html#how-do-i-configure-my-maven-build])
for every pom.xml locally.
Only that way the timestamps are automatically adjusted with each release
(https://issues.apache.org/jira/browse/MRELEASE-1029)
was:
An enforcer rule should be added to require a property
"project.build.outputTimestamp" to be set in the right format for reproducible
builds to work
([https://maven.apache.org/guides/mini/guide-reproducible-builds.html#how-do-i-configure-my-maven-build]).
For a [https://maven.apache.org/enforcer/enforcer-rules/requireProperty.html]
rule to be effective the property needs to be removed from the ASF parent
itself. Otherwise the timestamps
> Enforce local property "project.build.outputTimestamp" for reproducible builds
> ------------------------------------------------------------------------------
>
> Key: MPOM-255
> URL: https://issues.apache.org/jira/browse/MPOM-255
> Project: Maven POMs
> Issue Type: Improvement
> Components: asf
> Affects Versions: ASF-23
> Reporter: Konrad Windszus
> Priority: Major
>
> In case the release's root pom.xml doesn't overwrite
> "project.build.outputTimestamp" it takes the value from
> [https://github.com/apache/maven-apache-parent/blob/4813409e6a1ecfea11c8eb22a5f0443f790f1454/pom.xml#L95.]
> Instead of the fallback an enforcer rule should be added to require a
> property "project.build.outputTimestamp" to be set in the right format for
> reproducible builds to work
> ([https://maven.apache.org/guides/mini/guide-reproducible-builds.html#how-do-i-configure-my-maven-build])
> for every pom.xml locally.
> Only that way the timestamps are automatically adjusted with each release
> (https://issues.apache.org/jira/browse/MRELEASE-1029)
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
