RFR: 8276400: openjdk image Jars, Zips and Jmods built from the same source are not reproducible

[Andrew Leonard]

On Thu, 4 Nov 2021 21:51:46 GMT, Joe Darcy <darcy at openjdk.org> wrote:

>> This PR enables reproducible Jars, Jmods and openjdk image zip files (eg.src.zip).
>> It provides support for SOURCE_DATE_EPOCH for Jar, Jmod and underlying ZipOutputStream's.
>> It fixes the following keys issues relating to reproducibility:
>> - Jar and ZipOutputStream are not SOURCE_DATE_EPOCH aware
>>   - Jar and ZipOutputStream now detect SOURCE_DATE_EPOCH environment setting
>> - Jar and Jmod file content ordering was non-determinsitic
>>   - Fixes to Jar and Jmod main's to ensure sorted classes content ordering
>> - openjdk image zip file generation used "zip" which is non-determinsitic
>>   - New openjdk build tool "GenerateZip" which produces the final determinsitic zip files as part of the build and also detects SOURCE_DATE_EPOCH
>> 
>> Signed-off-by: Andrew Leonard <anleonar at redhat.com>
>
> Please file a CSR for the behavioral change of recognizing SOURCE_DATE_EPOCH, etc. Thanks.

@jddarcy thanks, I did wonder that, i'll start a CSR, thanks

-------------

PR: https://git.openjdk.java.net/jdk/pull/6268