[rb-general] Reproducible Java builds with Maven

[Holger Levsen]

Hi Hervé,

thank you for starting this discussion here!

I'll only reply to one aspect which I haven't seen anyone replying to:

On Mon, Nov 26, 2018 at 09:08:22AM +0100, Hervé Boutemy wrote:
> And one thing that worries me is the variability introduced by the JDK version 
> used: this one is quite generic to Java, I don't know if there is currently a 
> global strategy that we could reuse.

you might be forced to rebuild with the exact same JDK version that was
used in the build to be reproduced. this is the same as with gcc,
python, foo or bar.


-- 
cheers,
	Holger

-------------------------------------------------------------------------------
               holger@(debian|reproducible-builds|layer-acht).org
       PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.reproducible-builds.org/pipermail/rb-general/attachments/20181126/5d99baef/attachment.sig>