Bug#990839: opentest4j: reproducible builds: timestamp embedded in shipped .jar file
Vagrant Cascadian
vagrant at reproducible-builds.org
Fri Jul 9 00:49:01 BST 2021
Package: opentest4j
Severity: normal
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps timezone
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org
The shipped opentest4j-1.2.0.jar embeds the time, date and timezone in
the build:
https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/amd64/diffoscope-results/opentest4j.html
./usr/share/java/opentest4j-1.2.0.jar
Build-Date:·2022-07-12\xd
vs.
Build-Date:·2021-06-09\xd
Build-Time:·01:50:58.592-1200\xd
vs.
Build-Time:·21:32:48.944+1400\xd
The attached patch modifies build.gradle to set the timezone to UTC when
the SOURCE_DATE_EPOCH environment variable is defined, and use
SOURCE_DATE_EPOCH to set the timestamp.
With this patch applied, opentest4j should become reproducible in the
tests.reproducible-builds.org infrastructure.
Thanks for maintaining opentest4j!
live well,
vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-debian-patches-Support-reproducible-timestamps-in-th.patch
Type: text/x-diff
Size: 2113 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-maintainers/attachments/20210708/db8493cb/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-maintainers/attachments/20210708/db8493cb/attachment.sig>
More information about the pkg-java-maintainers
mailing list