[ 
https://issues.apache.org/jira/browse/MNG-6276?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16143478#comment-16143478
 ] 

Zlika commented on MNG-6276:
----------------------------

"reproducible builds" is indeed the most widely used term, I don't think it 
would be a good idea to user another one. Moreover, the mathematical term 
"idempotent" has a different meaning: if Maven is considered as a "build" 
function with source code as its input and jar file as its output, idempotent 
would mean that we can apply Maven on the output (the jar file) of a previous 
invocation and have the same output, which is not the case.

I totally agree with Hervé's first comment to create a property name like 
project.build.reproducible and use it the same way as we use 
project.build.sourceEncoding. It could be a boolean with False as its default 
value. The next step would be to identify the plugins that create 
unreproducible bits and create JIRA issues for them.
I don't know the benefits of an annotation for this kind of feature, but keep 
in mind that this is different than thread-safeting: a plugin IS thread-safe or 
not, whereas a plugin COULD be configured not to generate unreproducible bits.

A wiki page may help to document and organize the information on this subject.

> Support reproducible builds
> ---------------------------
>
>                 Key: MNG-6276
>                 URL: https://issues.apache.org/jira/browse/MNG-6276
>             Project: Maven
>          Issue Type: New Feature
>          Components: core, General
>            Reporter: Paolo Sacconier
>
> A venerable build system like maven should support full build reproduibilty 
> (i.e. producing bit a bit identical binaries from the same source).
> As initiatives like https://reproducible-builds.org gain traction and the 
> news of the recent Debian policy change to mandate this build behavior (see 
> https://reproducible.alioth.debian.org/blog/posts/121/), this seems a feature 
> that needs to be considered for inclusion into maven core.
> There is an indipendent ongoing effort to support this feature and the author 
> stated that he has found interest from maven project to integrate his work: 
> https://github.com/Zlika/reproducible-build-maven-plugin/issues/6#issuecomment-325005883
> I hope this issue helps kickstart the effort.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to