[rb-general] Reproducible Java builds with Maven

[Holger Levsen]

On Wed, Dec 05, 2018 at 02:49:24PM +0100, Arnout Engelen wrote:
> One thing to decide on would be what kind of file format to use.

while it is unfortunate that we will have many standards to choose from,
I think it's unavoidable.

> rfc822 is a bit foreign outside of Debian.

true that.

> I have no particular love
> for XML, JSON or YAML, to be quite honest. What would you think
> about a good old '.properties' file? 

those (all of them) are a bit foreign outside of foo (or bar or baz).

(and that's why I think one standard .buildinfo file format for all the
linux distros, android apps, BSD and node/etc and whatnot will not work.)


I think what we can, is a.) propose the contents of these fileformats
and b.) some implementations. 

Maybe we can also agree on a certain number of fileformats, but I'm
sure the day we agree on those, someone new comes around the corner 
and has good reasons to use yet another filefromat.

Also, currently we don't even agree on a.) as Debian .buildinfo files include
checksums of the binary packages build while Arch Linux .buildinfo files
are included in their binary packages and thus cannot include checksums
of themselves... 

I'd hope we come to a conclusion regarding *this* question at the summit
next week, but I'm not sure we will ;) That said, I'm sure we'll make
some progress...! 


-- 
cheers,
	Holger

-------------------------------------------------------------------------------
               holger@(debian|reproducible-builds|layer-acht).org
       PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.reproducible-builds.org/pipermail/rb-general/attachments/20181205/92da383b/attachment.sig>