Re: Repeatable builds update

2022-05-16 Thread Mark Thomas
On 16/05/2022 18:54, Christopher Schultz wrote: I had considered using ant.tstamp.now.iso (you can see I had it in the patch, actually), but I think it changes the required version of ant for building. Since this is expected to be used by Tomcat release-managers only, I think that's a reasonab

Re: Repeatable builds update

2022-05-16 Thread Christopher Schultz
Mark, On 5/16/22 12:30, Mark Thomas wrote: On 06/05/2022 14:27, Christopher Schultz wrote: Awesome. I have a small commit to build.xml that drops environmental information (e.g. versions, etc.) to a build-release.properties file, but I'm unable to generate the timestamp in the correct format

Re: Repeatable builds update

2022-05-16 Thread Mark Thomas
On 06/05/2022 14:27, Christopher Schultz wrote: Awesome. I have a small commit to build.xml that drops environmental information (e.g. versions, etc.) to a build-release.properties file, but I'm unable to generate the timestamp in the correct format in order to put it into the file. Here's the

Re: Repeatable builds update

2022-05-07 Thread Emmanuel Bourg
Le 05/05/2022 à 21:28, Mark Thomas a écrit : TL;DR we have platform independent repeatable release builds That's really a great achievement, thank you. I hope this will inspire other Apache projects to make their builds reproducible. Emmanuel Bourg --

Re: Repeatable builds update

2022-05-06 Thread Christopher Schultz
Mark, On 5/5/22 15:28, Mark Thomas wrote: TL;DR we have platform independent repeatable release builds Excellent work. Thanks for putting in the time it took for all this. And now for the longer version: Nearly all of the plumbing is in place for this. I have one more commit to add to hand

Re: Repeatable builds

2022-03-23 Thread Mark Thomas
On 23/03/2022 17:20, Christopher Schultz wrote: Mark, On 3/22/22 13:12, Mark Thomas wrote: Finally, I have some minor modifications to buidl.xml that will enable repeatable builds. Once everything is in place the build process will look like: - prepare for tagging as currently (update versio

Re: Repeatable builds

2022-03-23 Thread Christopher Schultz
Mark, On 3/22/22 13:12, Mark Thomas wrote: Finally, I have some minor modifications to buidl.xml that will enable repeatable builds. Once everything is in place the build process will look like: - prepare for tagging as currently (update version in   build.properties.default and edit changel

Re: Repeatable builds

2022-03-23 Thread Christopher Schultz
Mark, On 3/23/22 12:18, Mark Thomas wrote: On 23/03/2022 16:11, Christopher Schultz wrote: ?? $ ant javadoc Dumps everything into output/dist/webapps/docs/, no ZIP files. The "javadoc" target executes tasks and that's it. What am I missing? Look in the individual Javadoc directories. Eac

Re: Repeatable builds

2022-03-23 Thread Mark Thomas
On 23/03/2022 16:11, Christopher Schultz wrote: Mark, On 3/22/22 15:30, Mark Thomas wrote: On 22/03/2022 19:06, Christopher Schultz wrote: On 3/22/22 13:12, Mark Thomas wrote: The JSign Ant task that adds the detached signature doesn't close the signed file. This causes problems for Ant.

Re: Repeatable builds

2022-03-23 Thread Christopher Schultz
Mark, On 3/22/22 15:30, Mark Thomas wrote: On 22/03/2022 19:06, Christopher Schultz wrote: On 3/22/22 13:12, Mark Thomas wrote: The JSign Ant task that adds the detached signature doesn't close the signed file. This causes problems for Ant. I've opened a JSign issue [2] for this. I have a

Re: Repeatable builds

2022-03-22 Thread Mark Thomas
On 22/03/2022 19:06, Christopher Schultz wrote: On 3/22/22 13:12, Mark Thomas wrote: The JSign Ant task that adds the detached signature doesn't close the signed file. This causes problems for Ant. I've opened a JSign issue [2] for this. I have a locally build version with a hack that fixes

Re: Repeatable builds

2022-03-22 Thread Christopher Schultz
Mark, On 3/22/22 13:12, Mark Thomas wrote: Hi all, I wanted to provide a status update on this. The bnd issue [1] has been fixed and will be included in the next release. We can switch to the latest bnd snapshot to pick up that fix in the meantime. I have tested detached signatures with JS