[
https://issues.apache.org/jira/browse/SLING-9463?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17115963#comment-17115963
]
Bertrand Delacretaz commented on SLING-9463:
--------------------------------------------
I'm playing with this and collecting random notes that might or might not need
to be in the documentation. No need to comment on each of these random notes,
we can sort them out when we create the docs!
Note #1: as per https://maven.apache.org/pom/asf/ this property needs to be
defined:
{code}
<properties>
<project.build.outputTimestamp>2019-10-02T08:04:00Z</project.build.outputTimestamp>
</properties>
{code}
> Document reproducible builds and check automatically via check-staged-release
> -----------------------------------------------------------------------------
>
> Key: SLING-9463
> URL: https://issues.apache.org/jira/browse/SLING-9463
> Project: Sling
> Issue Type: Improvement
> Components: Documentation, General
> Reporter: Konrad Windszus
> Priority: Major
> Fix For: Parent 40
>
>
> With SLING-9307 and SLING-8951 all builds relying Parent 39 or newer should
> be reproducible. Still some parts are missing:
> # buildinfo files should be uploaded along with the artifacts
> ([https://maven.apache.org/guides/mini/guide-reproducible-builds.html]) which
> allows to easily reproduce build (as they contain info about linebreaks and
> major JDK versions).
> # The check-staged-release.sh should be updated accordingly to optionally
> try rebuilding and comparing with the given checksums.
> #
> [https://sling.apache.org/documentation/development/release-management.html]
> should be extended with how to properly check a release after a vote.
> # There should be some documentation covering how end-users could reproduce
> builds.
> # On the downloads page ([https://sling.apache.org/downloads.cgi]) there
> should be a link to the buildinfo files for new/reproducible releases
> pointing to downloads.apache.org.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
