RFR: 8276400: openjdk image Jars, Zips and Jmods built from the same source are not reproducible
Jaikiran Pai
jpai at openjdk.java.net
Fri Nov 5 06:40:12 UTC 2021
On Thu, 4 Nov 2021 20:56:45 GMT, Andrew Leonard <aleonard at openjdk.org> wrote:
> This PR enables reproducible Jars, Jmods and openjdk image zip files (eg.src.zip).
> It provides support for SOURCE_DATE_EPOCH for Jar, Jmod and underlying ZipOutputStream's.
> It fixes the following keys issues relating to reproducibility:
> - Jar and ZipOutputStream are not SOURCE_DATE_EPOCH aware
> - Jar and ZipOutputStream now detect SOURCE_DATE_EPOCH environment setting
> - Jar and Jmod file content ordering was non-determinsitic
> - Fixes to Jar and Jmod main's to ensure sorted classes content ordering
> - openjdk image zip file generation used "zip" which is non-determinsitic
> - New openjdk build tool "GenerateZip" which produces the final determinsitic zip files as part of the build and also detects SOURCE_DATE_EPOCH
>
> Signed-off-by: Andrew Leonard <anleonar at redhat.com>
make/jdk/src/classes/build/tools/generatezip/GenerateZip.java line 2:
> 1: /*
> 2: * Copyright (c) 2021, 2021, Oracle and/or its affiliates. All rights reserved.
Hello @andrew-m-leonard, for a new file, the year should just be stated once. So just `2021,`
-------------
PR: https://git.openjdk.java.net/jdk/pull/6268
More information about the build-dev
mailing list