Re: [log4j] `2.23.1` reproducibility failure (Was: [VOTE] Release Apache Log4j 2.23.1)
And thank you Volkan for walking me through fixing my local issue. Gary On 2024/03/06 16:22:50 Gary Gregory wrote: > The build was completed successfully. > > Gary > > On Wed, Mar 6, 2024 at 11:02 AM Gary Gregory wrote: > > > > I nuked the whole thing (rm -rf ~/.m2/repository/) for good measure > > (I'll do that once a month from now on). > > > > Building (and downloading the world)... > > > > It's made it past log4j-bom so we might be looking good... > > > > TY! > > Gary > > > > On Wed, Mar 6, 2024 at 10:33 AM Volkan Yazıcı wrote: > > > > > > Could you do `rm -rf ~/.m2/repository/org/apache/commons` and retry, > > > please? (If you compare `target/bom.xml`s you can see that your local > > > `commons-*` clones have different hashes.) > > > > > > On Wed, Mar 6, 2024 at 4:00 PM Gary Gregory > > > wrote: > > > > > > > On Wed, Mar 6, 2024 at 9:54 AM Volkan Yazıcı wrote: > > > > > > > > > > Could you share the `target/bom.xml` and > > > > > > > > https://paste.apache.org/za0k3 > > > > > > > > > `target/log4j-bom-2.23.1.buildinfo` files too, please? > > > > > > > > https://paste.apache.org/1403q > > > > > > > > Gary > > > > > > > > > > > > > > On Wed, Mar 6, 2024 at 3:35 PM Gary Gregory > > > > wrote: > > > > > > > > > > > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > > > > > > export NEXUS_REPO= > > > > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261 > > > > > > sh mvnw -Prelease verify artifact:compare > > > > > > -Dreference.repo=$NEXUS_REPO > > > > > > > > > > > > Gary > > > > > > > > > > > > On Wed, Mar 6, 2024 at 9:33 AM Volkan Yazıcı wrote: > > > > > > > > > > > > > > Which command are you exactly running? > > > > > > > > > > > > > > Could you share the `target/bom.xml` and > > > > > > `target/log4j-bom-2.23.1.buildinfo` files too, please? > > > > > > > > > > > > > > On Wed, Mar 6, 2024 at 3:28 PM Gary Gregory > > > > > > > > > > > > > wrote: > > > > > > >> > > > > > > >> Same :-( > > > > > > >> > > > > > > >> [INFO] --- bnd-baseline:7.0.0:baseline (check-api-compat) @ > > > > log4j-bom > > > > > > --- > > > > > > >> [INFO] skip project with packaging=pom > > > > > > >> [INFO] > > > > > > >> [INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > > > > > > >> [ERROR] project.build.outputTimestamp property should not be > > > > inherited > > > > > > >> but defined in POM > > > > /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > > > > > > >> Downloading from reference: > > > > > > >> > > > > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > > > > > > >> [INFO] Reference buildinfo file not found: it will be generated > > > > > > >> from > > > > > > >> downloaded reference artifacts > > > > > > >> Downloading from reference: > > > > > > >> > > > > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > > > > > >> Downloaded from reference: > > > > > > >> > > > > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > > > > > >> (12 kB at 77 kB/s) > > > > > > >> Downloading from reference: > > > > > > >> > > > > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > > > > > >> Downloaded from reference: > > > > > > >> > > > > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > > > > > >> (704 kB at 914 kB/s) > > > > > > >> [INFO] Minimal buildinfo generated from downloaded artifacts: > > > > > > >> > > > > > > > > > > /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo > > > > > > >> [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: > > > > > > >> investigate > > > > > > >> with diffoscope > > > > > > >> > > > > target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml > > > > > > >> target/bom.xml > > > > > > >> [ERROR] Reproducible Build output summary: 1 files ok, 1 > > > > > > >> different > > > > > > >> [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo > > > > > > >> target/log4j-bom-2.23.1.buildinfo > > > > > > >> [ERROR] see also > > > > > > >> https://maven.apache.org/guides/mini/guide-reproducible-builds.html > > > > > > >> [INFO] Reproducible Build output comparison saved to > > > > > > >> > > > > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > > > > > > >> [INFO] Aggregate buildcompare copied to > > > > > > >> > > > > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > > > > > > >> [INFO] > > > > > > > > > > > > > > > > >> [INFO] Reactor
Re: [log4j] `2.23.1` reproducibility failure (Was: [VOTE] Release Apache Log4j 2.23.1)
The build was completed successfully. Gary On Wed, Mar 6, 2024 at 11:02 AM Gary Gregory wrote: > > I nuked the whole thing (rm -rf ~/.m2/repository/) for good measure > (I'll do that once a month from now on). > > Building (and downloading the world)... > > It's made it past log4j-bom so we might be looking good... > > TY! > Gary > > On Wed, Mar 6, 2024 at 10:33 AM Volkan Yazıcı wrote: > > > > Could you do `rm -rf ~/.m2/repository/org/apache/commons` and retry, > > please? (If you compare `target/bom.xml`s you can see that your local > > `commons-*` clones have different hashes.) > > > > On Wed, Mar 6, 2024 at 4:00 PM Gary Gregory wrote: > > > > > On Wed, Mar 6, 2024 at 9:54 AM Volkan Yazıcı wrote: > > > > > > > > Could you share the `target/bom.xml` and > > > > > > https://paste.apache.org/za0k3 > > > > > > > `target/log4j-bom-2.23.1.buildinfo` files too, please? > > > > > > https://paste.apache.org/1403q > > > > > > Gary > > > > > > > > > > > On Wed, Mar 6, 2024 at 3:35 PM Gary Gregory > > > wrote: > > > > > > > > > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > > > > > export NEXUS_REPO= > > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261 > > > > > sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO > > > > > > > > > > Gary > > > > > > > > > > On Wed, Mar 6, 2024 at 9:33 AM Volkan Yazıcı wrote: > > > > > > > > > > > > Which command are you exactly running? > > > > > > > > > > > > Could you share the `target/bom.xml` and > > > > > `target/log4j-bom-2.23.1.buildinfo` files too, please? > > > > > > > > > > > > On Wed, Mar 6, 2024 at 3:28 PM Gary Gregory > > > > > wrote: > > > > > >> > > > > > >> Same :-( > > > > > >> > > > > > >> [INFO] --- bnd-baseline:7.0.0:baseline (check-api-compat) @ > > > log4j-bom > > > > > --- > > > > > >> [INFO] skip project with packaging=pom > > > > > >> [INFO] > > > > > >> [INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > > > > > >> [ERROR] project.build.outputTimestamp property should not be > > > inherited > > > > > >> but defined in POM > > > /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > > > > > >> Downloading from reference: > > > > > >> > > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > > > > > >> [INFO] Reference buildinfo file not found: it will be generated > > > > > >> from > > > > > >> downloaded reference artifacts > > > > > >> Downloading from reference: > > > > > >> > > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > > > > >> Downloaded from reference: > > > > > >> > > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > > > > >> (12 kB at 77 kB/s) > > > > > >> Downloading from reference: > > > > > >> > > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > > > > >> Downloaded from reference: > > > > > >> > > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > > > > >> (704 kB at 914 kB/s) > > > > > >> [INFO] Minimal buildinfo generated from downloaded artifacts: > > > > > >> > > > > > > > > /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo > > > > > >> [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate > > > > > >> with diffoscope > > > > > >> > > > target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml > > > > > >> target/bom.xml > > > > > >> [ERROR] Reproducible Build output summary: 1 files ok, 1 different > > > > > >> [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo > > > > > >> target/log4j-bom-2.23.1.buildinfo > > > > > >> [ERROR] see also > > > > > >> https://maven.apache.org/guides/mini/guide-reproducible-builds.html > > > > > >> [INFO] Reproducible Build output comparison saved to > > > > > >> > > > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > > > > > >> [INFO] Aggregate buildcompare copied to > > > > > >> > > > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > > > > > >> [INFO] > > > > > > > > > > > > > >> [INFO] Reactor Summary for Apache Log4j BOM 2.23.1: > > > > > >> [INFO] > > > > > >> [INFO] Apache Log4j BOM ... FAILURE > > > [ > > > > > 38.689 s] > > > > > >> [INFO] Apache Log4j Parent SKIPPED > > > > > >> > > > > > >> Gary > > > > > >> > > > > > >> On Wed, Mar 6, 2024 at 9:23 AM Volkan Yazıcı > > > wrote: > > > > > >> > > > > > > >> > Could you retry after cleaning
Re: [log4j] `2.23.1` reproducibility failure (Was: [VOTE] Release Apache Log4j 2.23.1)
I nuked the whole thing (rm -rf ~/.m2/repository/) for good measure (I'll do that once a month from now on). Building (and downloading the world)... It's made it past log4j-bom so we might be looking good... TY! Gary On Wed, Mar 6, 2024 at 10:33 AM Volkan Yazıcı wrote: > > Could you do `rm -rf ~/.m2/repository/org/apache/commons` and retry, > please? (If you compare `target/bom.xml`s you can see that your local > `commons-*` clones have different hashes.) > > On Wed, Mar 6, 2024 at 4:00 PM Gary Gregory wrote: > > > On Wed, Mar 6, 2024 at 9:54 AM Volkan Yazıcı wrote: > > > > > > Could you share the `target/bom.xml` and > > > > https://paste.apache.org/za0k3 > > > > > `target/log4j-bom-2.23.1.buildinfo` files too, please? > > > > https://paste.apache.org/1403q > > > > Gary > > > > > > > > On Wed, Mar 6, 2024 at 3:35 PM Gary Gregory > > wrote: > > > > > > > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > > > > export NEXUS_REPO= > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261 > > > > sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO > > > > > > > > Gary > > > > > > > > On Wed, Mar 6, 2024 at 9:33 AM Volkan Yazıcı wrote: > > > > > > > > > > Which command are you exactly running? > > > > > > > > > > Could you share the `target/bom.xml` and > > > > `target/log4j-bom-2.23.1.buildinfo` files too, please? > > > > > > > > > > On Wed, Mar 6, 2024 at 3:28 PM Gary Gregory > > > > wrote: > > > > >> > > > > >> Same :-( > > > > >> > > > > >> [INFO] --- bnd-baseline:7.0.0:baseline (check-api-compat) @ > > log4j-bom > > > > --- > > > > >> [INFO] skip project with packaging=pom > > > > >> [INFO] > > > > >> [INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > > > > >> [ERROR] project.build.outputTimestamp property should not be > > inherited > > > > >> but defined in POM > > /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > > > > >> Downloading from reference: > > > > >> > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > > > > >> [INFO] Reference buildinfo file not found: it will be generated from > > > > >> downloaded reference artifacts > > > > >> Downloading from reference: > > > > >> > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > > > >> Downloaded from reference: > > > > >> > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > > > >> (12 kB at 77 kB/s) > > > > >> Downloading from reference: > > > > >> > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > > > >> Downloaded from reference: > > > > >> > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > > > >> (704 kB at 914 kB/s) > > > > >> [INFO] Minimal buildinfo generated from downloaded artifacts: > > > > >> > > > > > > /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo > > > > >> [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate > > > > >> with diffoscope > > > > >> > > target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml > > > > >> target/bom.xml > > > > >> [ERROR] Reproducible Build output summary: 1 files ok, 1 different > > > > >> [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo > > > > >> target/log4j-bom-2.23.1.buildinfo > > > > >> [ERROR] see also > > > > >> https://maven.apache.org/guides/mini/guide-reproducible-builds.html > > > > >> [INFO] Reproducible Build output comparison saved to > > > > >> > > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > > > > >> [INFO] Aggregate buildcompare copied to > > > > >> > > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > > > > >> [INFO] > > > > > > > > > > >> [INFO] Reactor Summary for Apache Log4j BOM 2.23.1: > > > > >> [INFO] > > > > >> [INFO] Apache Log4j BOM ... FAILURE > > [ > > > > 38.689 s] > > > > >> [INFO] Apache Log4j Parent SKIPPED > > > > >> > > > > >> Gary > > > > >> > > > > >> On Wed, Mar 6, 2024 at 9:23 AM Volkan Yazıcı > > wrote: > > > > >> > > > > > >> > Could you retry after cleaning up your local repository, please? > > That > > > > is, > > > > >> > > > > > >> > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > > > > >> > > > > > >> > > > > > >> > > > > > >> > On Wed, Mar 6, 2024 at 3:03 PM Gary Gregory < > > garydgreg...@gmail.com> > > > > wrote: > > > > >> > > > > > >> > > I get a build failure: > > > > >> > > > > > >
Re: [log4j] `2.23.1` reproducibility failure (Was: [VOTE] Release Apache Log4j 2.23.1)
Could you do `rm -rf ~/.m2/repository/org/apache/commons` and retry, please? (If you compare `target/bom.xml`s you can see that your local `commons-*` clones have different hashes.) On Wed, Mar 6, 2024 at 4:00 PM Gary Gregory wrote: > On Wed, Mar 6, 2024 at 9:54 AM Volkan Yazıcı wrote: > > > > Could you share the `target/bom.xml` and > > https://paste.apache.org/za0k3 > > > `target/log4j-bom-2.23.1.buildinfo` files too, please? > > https://paste.apache.org/1403q > > Gary > > > > > On Wed, Mar 6, 2024 at 3:35 PM Gary Gregory > wrote: > > > > > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > > > export NEXUS_REPO= > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261 > > > sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO > > > > > > Gary > > > > > > On Wed, Mar 6, 2024 at 9:33 AM Volkan Yazıcı wrote: > > > > > > > > Which command are you exactly running? > > > > > > > > Could you share the `target/bom.xml` and > > > `target/log4j-bom-2.23.1.buildinfo` files too, please? > > > > > > > > On Wed, Mar 6, 2024 at 3:28 PM Gary Gregory > > > wrote: > > > >> > > > >> Same :-( > > > >> > > > >> [INFO] --- bnd-baseline:7.0.0:baseline (check-api-compat) @ > log4j-bom > > > --- > > > >> [INFO] skip project with packaging=pom > > > >> [INFO] > > > >> [INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > > > >> [ERROR] project.build.outputTimestamp property should not be > inherited > > > >> but defined in POM > /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > > > >> Downloading from reference: > > > >> > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > > > >> [INFO] Reference buildinfo file not found: it will be generated from > > > >> downloaded reference artifacts > > > >> Downloading from reference: > > > >> > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > > >> Downloaded from reference: > > > >> > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > > >> (12 kB at 77 kB/s) > > > >> Downloading from reference: > > > >> > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > > >> Downloaded from reference: > > > >> > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > > >> (704 kB at 914 kB/s) > > > >> [INFO] Minimal buildinfo generated from downloaded artifacts: > > > >> > > > > /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo > > > >> [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate > > > >> with diffoscope > > > >> > target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml > > > >> target/bom.xml > > > >> [ERROR] Reproducible Build output summary: 1 files ok, 1 different > > > >> [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo > > > >> target/log4j-bom-2.23.1.buildinfo > > > >> [ERROR] see also > > > >> https://maven.apache.org/guides/mini/guide-reproducible-builds.html > > > >> [INFO] Reproducible Build output comparison saved to > > > >> > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > > > >> [INFO] Aggregate buildcompare copied to > > > >> > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > > > >> [INFO] > > > > > > > >> [INFO] Reactor Summary for Apache Log4j BOM 2.23.1: > > > >> [INFO] > > > >> [INFO] Apache Log4j BOM ... FAILURE > [ > > > 38.689 s] > > > >> [INFO] Apache Log4j Parent SKIPPED > > > >> > > > >> Gary > > > >> > > > >> On Wed, Mar 6, 2024 at 9:23 AM Volkan Yazıcı > wrote: > > > >> > > > > >> > Could you retry after cleaning up your local repository, please? > That > > > is, > > > >> > > > > >> > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > > > >> > > > > >> > > > > >> > > > > >> > On Wed, Mar 6, 2024 at 3:03 PM Gary Gregory < > garydgreg...@gmail.com> > > > wrote: > > > >> > > > > >> > > I get a build failure: > > > >> > > > > > >> > > INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > > > >> > > [ERROR] project.build.outputTimestamp property should not be > > > inherited > > > >> > > but defined in POM > > > /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > > > >> > > Downloading from reference: > > > >> > > > > > >> > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > > > >> > > [INFO] Reference buildinfo file not found: it
Re: [log4j] `2.23.1` reproducibility failure (Was: [VOTE] Release Apache Log4j 2.23.1)
On Wed, Mar 6, 2024 at 9:54 AM Volkan Yazıcı wrote: > > Could you share the `target/bom.xml` and https://paste.apache.org/za0k3 > `target/log4j-bom-2.23.1.buildinfo` files too, please? https://paste.apache.org/1403q Gary > > On Wed, Mar 6, 2024 at 3:35 PM Gary Gregory wrote: > > > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > > export NEXUS_REPO= > > https://repository.apache.org/content/repositories/orgapachelogging-1261 > > sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO > > > > Gary > > > > On Wed, Mar 6, 2024 at 9:33 AM Volkan Yazıcı wrote: > > > > > > Which command are you exactly running? > > > > > > Could you share the `target/bom.xml` and > > `target/log4j-bom-2.23.1.buildinfo` files too, please? > > > > > > On Wed, Mar 6, 2024 at 3:28 PM Gary Gregory > > wrote: > > >> > > >> Same :-( > > >> > > >> [INFO] --- bnd-baseline:7.0.0:baseline (check-api-compat) @ log4j-bom > > --- > > >> [INFO] skip project with packaging=pom > > >> [INFO] > > >> [INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > > >> [ERROR] project.build.outputTimestamp property should not be inherited > > >> but defined in POM /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > > >> Downloading from reference: > > >> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > > >> [INFO] Reference buildinfo file not found: it will be generated from > > >> downloaded reference artifacts > > >> Downloading from reference: > > >> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > >> Downloaded from reference: > > >> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > >> (12 kB at 77 kB/s) > > >> Downloading from reference: > > >> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > >> Downloaded from reference: > > >> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > >> (704 kB at 914 kB/s) > > >> [INFO] Minimal buildinfo generated from downloaded artifacts: > > >> > > /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo > > >> [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate > > >> with diffoscope > > >> target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml > > >> target/bom.xml > > >> [ERROR] Reproducible Build output summary: 1 files ok, 1 different > > >> [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo > > >> target/log4j-bom-2.23.1.buildinfo > > >> [ERROR] see also > > >> https://maven.apache.org/guides/mini/guide-reproducible-builds.html > > >> [INFO] Reproducible Build output comparison saved to > > >> /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > > >> [INFO] Aggregate buildcompare copied to > > >> /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > > >> [INFO] > > > > >> [INFO] Reactor Summary for Apache Log4j BOM 2.23.1: > > >> [INFO] > > >> [INFO] Apache Log4j BOM ... FAILURE [ > > 38.689 s] > > >> [INFO] Apache Log4j Parent SKIPPED > > >> > > >> Gary > > >> > > >> On Wed, Mar 6, 2024 at 9:23 AM Volkan Yazıcı wrote: > > >> > > > >> > Could you retry after cleaning up your local repository, please? That > > is, > > >> > > > >> > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > > >> > > > >> > > > >> > > > >> > On Wed, Mar 6, 2024 at 3:03 PM Gary Gregory > > wrote: > > >> > > > >> > > I get a build failure: > > >> > > > > >> > > INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > > >> > > [ERROR] project.build.outputTimestamp property should not be > > inherited > > >> > > but defined in POM > > /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > > >> > > Downloading from reference: > > >> > > > > >> > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > > >> > > [INFO] Reference buildinfo file not found: it will be generated from > > >> > > downloaded reference artifacts > > >> > > Downloading from reference: > > >> > > > > >> > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > >> > > Downloaded from reference: > > >> > > > > >> > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > >> > > (12 kB at 86 kB/s) > > >> > >
Re: [log4j] `2.23.1` reproducibility failure (Was: [VOTE] Release Apache Log4j 2.23.1)
Could you share the `target/bom.xml` and `target/log4j-bom-2.23.1.buildinfo` files too, please? On Wed, Mar 6, 2024 at 3:35 PM Gary Gregory wrote: > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > export NEXUS_REPO= > https://repository.apache.org/content/repositories/orgapachelogging-1261 > sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO > > Gary > > On Wed, Mar 6, 2024 at 9:33 AM Volkan Yazıcı wrote: > > > > Which command are you exactly running? > > > > Could you share the `target/bom.xml` and > `target/log4j-bom-2.23.1.buildinfo` files too, please? > > > > On Wed, Mar 6, 2024 at 3:28 PM Gary Gregory > wrote: > >> > >> Same :-( > >> > >> [INFO] --- bnd-baseline:7.0.0:baseline (check-api-compat) @ log4j-bom > --- > >> [INFO] skip project with packaging=pom > >> [INFO] > >> [INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > >> [ERROR] project.build.outputTimestamp property should not be inherited > >> but defined in POM /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > >> Downloading from reference: > >> > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > >> [INFO] Reference buildinfo file not found: it will be generated from > >> downloaded reference artifacts > >> Downloading from reference: > >> > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > >> Downloaded from reference: > >> > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > >> (12 kB at 77 kB/s) > >> Downloading from reference: > >> > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > >> Downloaded from reference: > >> > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > >> (704 kB at 914 kB/s) > >> [INFO] Minimal buildinfo generated from downloaded artifacts: > >> > /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo > >> [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate > >> with diffoscope > >> target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml > >> target/bom.xml > >> [ERROR] Reproducible Build output summary: 1 files ok, 1 different > >> [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo > >> target/log4j-bom-2.23.1.buildinfo > >> [ERROR] see also > >> https://maven.apache.org/guides/mini/guide-reproducible-builds.html > >> [INFO] Reproducible Build output comparison saved to > >> /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > >> [INFO] Aggregate buildcompare copied to > >> /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > >> [INFO] > > >> [INFO] Reactor Summary for Apache Log4j BOM 2.23.1: > >> [INFO] > >> [INFO] Apache Log4j BOM ... FAILURE [ > 38.689 s] > >> [INFO] Apache Log4j Parent SKIPPED > >> > >> Gary > >> > >> On Wed, Mar 6, 2024 at 9:23 AM Volkan Yazıcı wrote: > >> > > >> > Could you retry after cleaning up your local repository, please? That > is, > >> > > >> > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > >> > > >> > > >> > > >> > On Wed, Mar 6, 2024 at 3:03 PM Gary Gregory > wrote: > >> > > >> > > I get a build failure: > >> > > > >> > > INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > >> > > [ERROR] project.build.outputTimestamp property should not be > inherited > >> > > but defined in POM > /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > >> > > Downloading from reference: > >> > > > >> > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > >> > > [INFO] Reference buildinfo file not found: it will be generated from > >> > > downloaded reference artifacts > >> > > Downloading from reference: > >> > > > >> > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > >> > > Downloaded from reference: > >> > > > >> > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > >> > > (12 kB at 86 kB/s) > >> > > Downloading from reference: > >> > > > >> > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > >> > > Downloaded from reference: > >> > > > >> > > >
Re: [log4j] `2.23.1` reproducibility failure (Was: [VOTE] Release Apache Log4j 2.23.1)
rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* export NEXUS_REPO=https://repository.apache.org/content/repositories/orgapachelogging-1261 sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO Gary On Wed, Mar 6, 2024 at 9:33 AM Volkan Yazıcı wrote: > > Which command are you exactly running? > > Could you share the `target/bom.xml` and `target/log4j-bom-2.23.1.buildinfo` > files too, please? > > On Wed, Mar 6, 2024 at 3:28 PM Gary Gregory wrote: >> >> Same :-( >> >> [INFO] --- bnd-baseline:7.0.0:baseline (check-api-compat) @ log4j-bom --- >> [INFO] skip project with packaging=pom >> [INFO] >> [INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- >> [ERROR] project.build.outputTimestamp property should not be inherited >> but defined in POM /Users/garydgregory/rc/log4j/src/.flattened-pom.xml >> Downloading from reference: >> https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo >> [INFO] Reference buildinfo file not found: it will be generated from >> downloaded reference artifacts >> Downloading from reference: >> https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom >> Downloaded from reference: >> https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom >> (12 kB at 77 kB/s) >> Downloading from reference: >> https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml >> Downloaded from reference: >> https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml >> (704 kB at 914 kB/s) >> [INFO] Minimal buildinfo generated from downloaded artifacts: >> /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo >> [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate >> with diffoscope >> target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml >> target/bom.xml >> [ERROR] Reproducible Build output summary: 1 files ok, 1 different >> [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo >> target/log4j-bom-2.23.1.buildinfo >> [ERROR] see also >> https://maven.apache.org/guides/mini/guide-reproducible-builds.html >> [INFO] Reproducible Build output comparison saved to >> /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare >> [INFO] Aggregate buildcompare copied to >> /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare >> [INFO] >> >> [INFO] Reactor Summary for Apache Log4j BOM 2.23.1: >> [INFO] >> [INFO] Apache Log4j BOM ... FAILURE [ 38.689 >> s] >> [INFO] Apache Log4j Parent SKIPPED >> >> Gary >> >> On Wed, Mar 6, 2024 at 9:23 AM Volkan Yazıcı wrote: >> > >> > Could you retry after cleaning up your local repository, please? That is, >> > >> > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* >> > >> > >> > >> > On Wed, Mar 6, 2024 at 3:03 PM Gary Gregory wrote: >> > >> > > I get a build failure: >> > > >> > > INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- >> > > [ERROR] project.build.outputTimestamp property should not be inherited >> > > but defined in POM /Users/garydgregory/rc/log4j/src/.flattened-pom.xml >> > > Downloading from reference: >> > > >> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo >> > > [INFO] Reference buildinfo file not found: it will be generated from >> > > downloaded reference artifacts >> > > Downloading from reference: >> > > >> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom >> > > Downloaded from reference: >> > > >> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom >> > > (12 kB at 86 kB/s) >> > > Downloading from reference: >> > > >> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml >> > > Downloaded from reference: >> > > >> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml >> > > (704 kB at 949 kB/s) >> > > [INFO] Minimal buildinfo generated from downloaded artifacts: >> > > >> > > /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo >> > > [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate >> > > with diffoscope >> > >
[log4j] `2.23.1` reproducibility failure (Was: [VOTE] Release Apache Log4j 2.23.1)
Which command are you exactly running? Could you share the `target/bom.xml` and `target/log4j-bom-2.23.1.buildinfo` files too, please? On Wed, Mar 6, 2024 at 3:28 PM Gary Gregory wrote: > Same :-( > > [INFO] --- bnd-baseline:7.0.0:baseline (check-api-compat) @ log4j-bom --- > [INFO] skip project with packaging=pom > [INFO] > [INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > [ERROR] project.build.outputTimestamp property should not be inherited > but defined in POM /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > Downloading from reference: > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > [INFO] Reference buildinfo file not found: it will be generated from > downloaded reference artifacts > Downloading from reference: > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > Downloaded from reference: > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > (12 kB at 77 kB/s) > Downloading from reference: > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > Downloaded from reference: > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > (704 kB at 914 kB/s) > [INFO] Minimal buildinfo generated from downloaded artifacts: > > /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo > [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate > with diffoscope > target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml > target/bom.xml > [ERROR] Reproducible Build output summary: 1 files ok, 1 different > [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo > target/log4j-bom-2.23.1.buildinfo > [ERROR] see also > https://maven.apache.org/guides/mini/guide-reproducible-builds.html > [INFO] Reproducible Build output comparison saved to > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > [INFO] Aggregate buildcompare copied to > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > [INFO] > > [INFO] Reactor Summary for Apache Log4j BOM 2.23.1: > [INFO] > [INFO] Apache Log4j BOM ... FAILURE [ > 38.689 s] > [INFO] Apache Log4j Parent SKIPPED > > Gary > > On Wed, Mar 6, 2024 at 9:23 AM Volkan Yazıcı wrote: > > > > Could you retry after cleaning up your local repository, please? That is, > > > > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > > > > > > > > On Wed, Mar 6, 2024 at 3:03 PM Gary Gregory > wrote: > > > > > I get a build failure: > > > > > > INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > > > [ERROR] project.build.outputTimestamp property should not be inherited > > > but defined in POM /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > > > Downloading from reference: > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > > > [INFO] Reference buildinfo file not found: it will be generated from > > > downloaded reference artifacts > > > Downloading from reference: > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > > Downloaded from reference: > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > > (12 kB at 86 kB/s) > > > Downloading from reference: > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > > Downloaded from reference: > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > > (704 kB at 949 kB/s) > > > [INFO] Minimal buildinfo generated from downloaded artifacts: > > > > > > > /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo > > > [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate > > > with diffoscope > > > > target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml > > > target/bom.xml > > > [ERROR] Reproducible Build output summary: 1 files ok, 1 different > > > [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo > > > target/log4j-bom-2.23.1.buildinfo > > > [ERROR] see also > > > https://maven.apache.org/guides/mini/guide-reproducible-builds.html > > > [INFO]
