Hello Jiri,
If I understand the question correctly, you are wondering how the policy
files from CreateSecurityJars.gmk end up in the final image? This is
done in two steps. First the new JDK 9 tool jmod packages each module
into a distribution format (typically java.base.jmod). Then the next new
tool jlink links all the jmods together to create an image. Somewhere
inside those tools, I assume timestamps are changing.
/Erik
On 2016-05-19 18:52, Jiri Vanek wrote:
Hello again!
webrev
https://jvanek.fedorapeople.org/oracle/jdk9/webrevs/reproduciblePolicies/v1/
Recent Feature Complete milestone have scared me, as I have long-time
persisting issue when packaging openjdk (6..7...8 and 9)
The policy jars, always from same source, never the same. As they are
considered as configure files, the RPM update treat them alike.
Not so do jdk build system, and every build have its "special" but
still the same. .policies.
This is fixed in my RPMS since [1] like [2]
Well, not nice. I checked icedtea, and they since [3] already have
this change [4]
So I looked into JDK9 and.. it ahave teh change in
CreateSecurityJars.gmk ! Not whole, but definitely not used. I really
do not understand why.
So there is patch for jdk9's -
https://jvanek.fedorapeople.org/oracle/jdk9/webrevs/reproduciblePolicies/v1/
which is making the policies truly static even with all this necessary
stamping.
However, I must apologise for missing part, which I had not found how
to solve.
Up to "make" (build) everything is ok. but "make images" corrupts the
timestamps, I did not found, where the built files flow to images:(to
stamp them again, and last time)
Best regards from CZ
J.
[1]
http://pkgs.fedoraproject.org/cgit/rpms/java-1.8.0-openjdk.git/commit/?h=f21&id=ae70e5d64fbe2fb042c0cee088316b39ee8bf8c9
[2]http://pkgs.fedoraproject.org/cgit/rpms/java-1.8.0-openjdk.git/tree/repackReproduciblePolycies
[3]
http://icedtea.classpath.org/hg/icedtea8-forest/jdk/rev/afd392dfaed5
http://icedtea.classpath.org/hg/icedtea8-forest/jdk/rev/edf1cacfe015
http://icedtea.classpath.org/hg/icedtea8-forest/jdk/rev/9b6cfe5f5078
[4]
http://icedtea.classpath.org/hg/icedtea8-forest/jdk/file/tip/make/CreateSecurityJars.gmk