RFR: 8253495: CDS generates non-deterministic output [v2]

[Thomas Stuefe]

On Wed, 9 Mar 2022 07:58:51 GMT, Thomas Stuefe <stuefe at openjdk.org> wrote:

>> Ioi Lam has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   Fixed zero build
>
> Hi Ioi,
> 
> some questions, comments inline.
> 
> Like David in the comments, I am also a bit vague on the usefulness, but I may not know the whole story. Is it to enable repackagers like Debian to check the "reproducable" tickbox on their OpenJDK package? Or is there a practical need for this?
> 
> Thanks, Thomas

> @tstuefe Without commenting on Ioi's actual implementation, let me explain a bit on the importance of this fix.
> 
> Reproducible builds is not just a "checkbox", any more than "does not crash on startup" is a checkbox. It is an important security tool. See e.g. https://reproducible-builds.org/ for more information.
> 

Hi @magicus,

thanks for explaining, and for the link. That one was a good explanation. I had no idea, but I'm convinced now.

Cheers, Thomas

-------------

PR: https://git.openjdk.java.net/jdk/pull/7748