[rb-general] Reproducing sbt-reproducible-builds

Hervé Boutemy hboutemy at apache.org
Sun Dec 23 13:47:57 CET 2018


Le dimanche 23 décembre 2018, 13:19:29 CET Arnout Engelen a écrit :
> On Sat, Dec 22, 2018 at 6:37 PM Hervé Boutemy <hboutemy at apache.org> wrote:
> > Le samedi 22 décembre 2018, 11:22:57 CET Arnout Engelen a écrit :
> > > On Sat, Dec 22, 2018 at 6:46 AM Hervé Boutemy <hboutemy at apache.org> 
wrote:
> > > > IMHO, a first step is to have us be able to rebuild packages from each
> > > > other and share our results on this mailing list
> > > 
> > > Let's! Could you check out tag v0.19 of
> > > https://github.com/raboof/sbt-reproducible-builds, run
> > > 'sbt ++2.12.6 clean reproducibleBuildsCertification' with openjdk8 and
> > > compare against
> > > the buildinfo on
> > > https://bintray.com/raboofje/sbt-plugins/sbt-reproducible-builds/0.19
> > > ?
> > 
> > ok, let's go: I'm not a Scala user, then I'll just try to rebuild as a
> > pure
> > Scala/sbt newbie
> > I downloaded sbt-1.2.7, switched to my own JDK 8 install (which is an
> > Oracle 1.8.0_161) and launched the command you gave me
> > 
> > Here is my result:
> > $ cat target/scala-2.12/sbt-1.0/sbt-reproducible-builds_2.12-0.19+3-
> > c553fe74_herve-1545498708000.buildinfo
> 
> (...)
> 
> > here is my analysis:
> > - I did not get the same version than you: did you provide me the full
> > exact command to launch?
> 
> The version suggests you built master instead of the v0.19 tag, could
> that be the case?
oh yes, I forgot to to take your v0.19 tag instruction into account
now I get the same hash: good news

then I could publish somewhere that I was able to reproduce this sbt-
reproducible-builds-0.19.jar file

how?
append my own signature to sbt-reproducible-builds.jar.asc?
in your original repository or in a separate repository that would be append 
only on such .asc files?

Regards,

Hervé

> 
> 
> Kind regards,
> 
> Arnout
> _______________________________________________
> rb-general at lists.reproducible-builds.org mailing list
> 
> To change your subscription options, visit
> https://lists.reproducible-builds.org/listinfo/rb-general.
> 
> To unsubscribe, send an email to
> rb-general-unsubscribe at lists.reproducible-builds.org.






More information about the rb-general mailing list