Source: shiro
Version: 1.2.4-1
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: username
X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org
Hi,
While working on the "reproducible builds" effort [1], we have noticed
that shiro could not be built reproducibly.
The attached patch removes username capturing from the build system by
replacing it with "debian" which is probably more useful from upstream's
PoV, especially as the build date (which *is* reproducible due to [2])
is
not the current date.
Once applied, shiro can be built reproducibly in our reproducible
toolchain.
[1]: https://wiki.debian.org/ReproducibleBuilds
[2]:
http://sources.debian.net/src/maven2-core/2.2.1-22/debian/patches/0006-reproducible-built-timestamp.patch/?hl=1#L1
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
diff --git a/pom.xml b/pom.xml
index 6ed97d5..9fbbcb5 100644
--- a/pom.xml
+++ b/pom.xml
@@ -65,7 +65,7 @@
<properties>
<!-- Replaced by the build number plugin at build time: -->
- <buildNumber>${user.name}-${maven.build.timestamp}</buildNumber>
+ <buildNumber>debian-${maven.build.timestamp}</buildNumber>
<!-- non-dependency-based properties: -->
<shiro.osgi.importRange>[1.2, 2)</shiro.osgi.importRange>
