Le 28/08/2014 00:24, tony mancill a écrit : > Reproducible builds: > > There is interest in having reproducible builds of JARs (timestamps are > a problem - perhaps other attributes as well?). There will be some > hacking in this area; the team will then assess integrating this into > our packaging toolchain.
I'd like to highlight that the timestamp are sometimes useful for debugging issues. For example, when a package embeds other libraries in its jar, the timestamp on the class files may be used to guess what version of the dependency has been embedded (see #729171 for example). Instead of developing a tool that strips the timestamp and sorts the content of the jars (like sortjar in ITP #759822) I'd rather suggest developing a tool that computes the checksum of a jar by ignoring the variable elements. Emmanuel Bourg -- To UNSUBSCRIBE, email to debian-java-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/54024481.9010...@apache.org
