Hi All, I've started working on porting scripts from Apache Grails to test our builds are reproducible as required by ASF for signing during a CI build [1]. The first script is test-reproducible-builds.sh in my groovy-geb fork [2].
Running from the project root with 'etc/bin/test-reproducible-builds.sh' results in: Differing artifacts: doc/site/build/libs/site-8.0-SNAPSHOT.jar I get this every run. Since this is the website and not a code module should we ignore this one or dig deeper? Some notes: You can't build with Java 21, I used 17. I'm using macos and had to install coreutils (I used homebrew). I had to add it to my PATH so the 'cp --parents' command worked properly. I noted this in the script comments but we might want to add it to the RELEASING.md when it's updated. (still my todo) In addition to excluding the test task, I also excluded the rat task since it was failing on the results file during the second run. Let me know what you think the next steps should be. [1] https://infra.apache.org/release-signing.html#automated-release-signing [2] https://github.com/cbmarcum/groovy-geb/tree/asf-releasing/etc/bin Best regards, Carl
