[ https://issues.apache.org/jira/browse/MSOURCES-126?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17018661#comment-17018661 ]
Herve Boutemy commented on MSOURCES-126: ---------------------------------------- tested on a VM forcing date to get reproducible-1.0-sources.jar as built in 2019-12-18 and 2020-01-18, then see what is the difference between the 2 archives using diffoscope: {noformat}$ diffoscope reproducible-20191218/target/reproducible-1.0-sources.jar reproducible-20200118/target/reproducible-1.0-sources.jar --- reproducible-20191218/target/reproducible-1.0-sources.jar +++ reproducible-20200118/target/reproducible-1.0-sources.jar ├── zipinfo -v {} │ @@ -366,15 +366,15 @@ │ minimum file system compatibility required: MS-DOS, OS/2 or NT FAT │ minimum software version required to extract: 2.0 │ compression method: deflated │ compression sub-type (deflation): normal │ file security status: not encrypted │ extended local header: no │ file last modified on (DOS date/time): 2019 Aug 21 18:28:52 │ - 32-bit CRC value (hex): aeabb55c │ + 32-bit CRC value (hex): 62b3bac9 │ compressed size: 129 bytes │ uncompressed size: 183 bytes │ length of filename: 15 characters │ length of extra field: 0 bytes │ length of file comment: 0 characters │ disk number on which file begins: disk 1 │ apparent file type: binary ├── META-INF/NOTICE │ @@ -1,8 +1,8 @@ │ │ Test for reproducibility of jar │ -Copyright 2019 The Apache Software Foundation │ +Copyright 2020 The Apache Software Foundation │ │ This product includes software developed at │ The Apache Software Foundation (http://www.apache.org/).{noformat} generated META-INF/NOTICE contains current year... > reproducible IT failing since January 1st 2020 > ---------------------------------------------- > > Key: MSOURCES-126 > URL: https://issues.apache.org/jira/browse/MSOURCES-126 > Project: Maven Source Plugin > Issue Type: Bug > Affects Versions: 3.2.1 > Reporter: Herve Boutemy > Priority: Major > Fix For: 3.2.2 > > > {noformat}[INFO] Building: reproducible/pom.xml > [INFO] run post-build script verify.groovy > [INFO] reproducible/pom.xml ............................. FAILED > (2.2 s) > [INFO] The post-build script did not succeed. assert buf.startsWith( > "reproducible-1.0-sources.jar sha1 = > 3a3687b063cfc164fbbccd1b9573b4232f540e8a" ) > | | > | false > reproducible-1.0-sources.jar sha1 = > 499c6f39564643f1e55da33967121fc56fe24537{noformat} -- This message was sent by Atlassian Jira (v8.3.4#803005)