TerabyteQbt / meta

QBT Build Tool - A repository stitcher and dependency management enterprise build framework
https://qbtbuildtool.com
The Unlicense
4 stars 0 forks source link

Reproducibility Project - make standard java build process bit-for-bit reproducible #23

Open terabyte opened 6 years ago

terabyte commented 6 years ago

This will require stripping out or otherwise dealing with file timestamps, etc. The end condition here is that if two different computers both execute a build of a java package (like meta_tools.release), with the exact same JDK version, then they should produce identical output (sha1s match).

terabyte commented 6 years ago

@fkautz says "you should hop into OFTC #reproducible-builds or #debian-reproducible and ask what changes they needed to make, also, they open sourced their toolchains for reproducible builds, which i think includes the timestamp manipulator" https://reproducible-builds.org/tools/

terabyte commented 6 years ago

https://github.com/wolfcw/libfaketime