RFR: 8253495: CDS generates non-deterministic output [v2]
Thomas Stuefe
stuefe at openjdk.java.net
Thu Mar 10 12:56:44 UTC 2022
On Wed, 9 Mar 2022 07:58:51 GMT, Thomas Stuefe <stuefe at openjdk.org> wrote:
>> Ioi Lam has updated the pull request incrementally with one additional commit since the last revision:
>>
>> Fixed zero build
>
> Hi Ioi,
>
> some questions, comments inline.
>
> Like David in the comments, I am also a bit vague on the usefulness, but I may not know the whole story. Is it to enable repackagers like Debian to check the "reproducable" tickbox on their OpenJDK package? Or is there a practical need for this?
>
> Thanks, Thomas
> @tstuefe Without commenting on Ioi's actual implementation, let me explain a bit on the importance of this fix.
>
> Reproducible builds is not just a "checkbox", any more than "does not crash on startup" is a checkbox. It is an important security tool. See e.g. https://reproducible-builds.org/ for more information.
>
Hi @magicus,
thanks for explaining, and for the link. That one was a good explanation. I had no idea, but I'm convinced now.
Cheers, Thomas
-------------
PR: https://git.openjdk.java.net/jdk/pull/7748
More information about the core-libs-dev
mailing list