Bug#859973: jython: please make the javadoc build reproducible

[tony mancill]

On Sun, Apr 09, 2017 at 08:46:17PM +0100, Chris West wrote:
> Source: jython
> Version: 2.5.3-16
> User: reproducible-builds at lists.alioth.debian.org
> Usertags: timestamps
> Priority: wishlist
> 
> The javadoc in jython contains timestamps, which prevent the
> package from building reproducibly. Please pass the -notimestamp
> argument to javadoc. 

Hi Chris,

I'm not seeing any timestamps in the jython-doc binary package, nor any
difference between the resulting javadocs after patching the buildsystem
to use `-notimestamp`.

However, there are differences in the JARs generated for the jython.deb due to the presence of the build path in the resulting class files.  E.g.:

│ │ │ │ │ │ -    #51 = String             #1043        // /build/1st/jython-2.5.3/grammar/Python.g
│ │ │ │ │ │ +    #51 = String             #1043        // /build/jython-2.5.3/2nd/grammar/Python.g

And there are 3-byte differences in the compiled class files that do appear
to be timestamp-related.  

So we definitely have reproducibility problems with this package due to
timestamps; I just wanted to point out that adding the argument to the
javadoc task won't be sufficient to close the bug.

Thank you for reporting this.

Cheers,
tony
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-java-maintainers/attachments/20170409/575de4d7/attachment.sig>