Le 28/08/2014 00:24, tony mancill a écrit : > Reproducible builds: > > There is interest in having reproducible builds of JARs (timestamps are > a problem - perhaps other attributes as well?). There will be some > hacking in this area; the team will then assess integrating this into > our packaging toolchain.
I'd like to highlight that the timestamp are sometimes useful for debugging issues. For example, when a package embeds other libraries in its jar, the timestamp on the class files may be used to guess what version of the dependency has been embedded (see #729171 for example). Instead of developing a tool that strips the timestamp and sorts the content of the jars (like sortjar in ITP #759822) I'd rather suggest developing a tool that computes the checksum of a jar by ignoring the variable elements. Emmanuel Bourg -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: https://lists.debian.org/[email protected]
