Re: Reproducible Builds for Maven

2019-09-22 Thread Hervé BOUTEMY
Le lundi 23 septembre 2019, 05:56:06 CEST Tomo Suzuki a écrit : > Sounds nice! don't hesitate to build for yourself, check that you get the same sha512 and report: this will help me either confirm "it works", or find little remaining issues. > > > The precise result depends only on 2 key facts

Re: Reproducible Builds for Maven

2019-09-22 Thread Tomo Suzuki
Sounds nice! > The precise result depends only on 2 key facts When I hear “reproducible builds”, I think of lock files that remember library versions used. Gradle’s approach: https://docs.gradle.org/current/userguide/dependency_locking.html Does your approach use such file to record library ver

Reproducible Builds for Maven

2019-09-22 Thread Hervé BOUTEMY
after a few years of testing, thinking, procrastination and hard work (thank you Thomas for your talk at Devoxx France 2016 [1]), I think I achieved a key step this week-end toward native Reproducible Builds with Maven [2]: Maven core itself can be built in a reproducible way! It means that if