GNU logs - #38162, boring messages

Message sent to bug-guix@HIDDEN:

Subject: bug#38162: icedtea "jar" tool could automatically pack reproducible jars
Resent-From: Danny Milosavljevic <dannym@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sun, 10 Nov 2019 14:49:02 +0000
Resent-Message-ID: <handler.38162.B.15733973395077 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 38162 <at> debbugs.gnu.org
Date: Sun, 10 Nov 2019 15:48:49 +0100
From: Danny Milosavljevic <dannym@HIDDEN>
Message-ID: <20191110154849.1123db10@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="Sig_/AfOnfzRXLSLemFYdHblEL6e";
 protocol="application/pgp-signature"; micalg=pgp-sha256
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

--Sig_/AfOnfzRXLSLemFYdHblEL6e
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

Hi,

it would be better if icedtea's "jar" tool automatically packed reproducibl=
e jar
files instead of us doing some barely safe unzip-then-rezip-with-specific-o=
rder
in the ant-build-system.

It could check the environment variable SOURCE_DATE_EPOCH and then use that=
 as
timestamp for the zip entries.

Alternatively, it could just leave the DOS timestamp field off of the zip
entries.

Maven already has support for the former[1]--we might be able to reuse that.

[1] https://maven.apache.org/plugins/maven-jar-plugin/jar-mojo.html

--Sig_/AfOnfzRXLSLemFYdHblEL6e
Content-Type: application/pgp-signature
Content-Description: OpenPGP digital signature

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEds7GsXJ0tGXALbPZ5xo1VCwwuqUFAl3II1EACgkQ5xo1VCww
uqXvhAf8CasRnJCxUqlNONVPeF/HMATV9YVzEpLjNkaTnoP8HlOEaM+LPWaLXt87
lSbA5yFLGZRPPTz9xPUutM8vWg/XyAl5O/jGIDPDK29Vl2hlUwxrFyo3WmTP0QBs
lPj9n48Z5ZwM4NoLS6KAPNCokwPR/wVOs1m5OhfrzCDGrOIVAnksNE39MZxEfIZR
54UFQOlInzCSgnBpMiDuO7UEnV4xRiXeSp/dHZ/aK3KAQKLJeKHMRLOkKao+ePtQ
KOaHPHcydyVh75SnDcBnLV9psmOKH+SIfc0ydSkEPKD6yUdZirpR+PlRH2UFX9Gw
iftF/EkLVucN48jx5FGZnAuBwn19vA==
=kGaR
-----END PGP SIGNATURE-----

--Sig_/AfOnfzRXLSLemFYdHblEL6e--

Message sent:

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
Content-Type: text/plain; charset=utf-8
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: Danny Milosavljevic <dannym@HIDDEN>
Subject: bug#38162: Acknowledgement (icedtea "jar" tool could
 automatically pack reproducible jars)
Message-ID: <handler.38162.B.15733973395077.ack <at> debbugs.gnu.org>
References: <20191110154849.1123db10@HIDDEN>
X-Gnu-PR-Message: ack 38162
X-Gnu-PR-Package: guix
Reply-To: 38162 <at> debbugs.gnu.org
Date: Sun, 10 Nov 2019 14:49:02 +0000

Thank you for filing a new bug report with debbugs.gnu.org.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 bug-guix@HIDDEN

If you wish to submit further information on this problem, please
send it to 38162 <at> debbugs.gnu.org.

Please do not send mail to help-debbugs@HIDDEN unless you wish
to report a problem with the Bug-tracking system.

--=20
38162: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D38162
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

Message sent to bug-guix@HIDDEN:

Subject: bug#38162: icedtea "jar" tool could automatically pack reproducible jars
Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Mon, 11 Nov 2019 21:00:02 +0000
Resent-Message-ID: <handler.38162.B38162.157350596311153 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: Danny Milosavljevic <dannym@HIDDEN>
Cc: 38162 <at> debbugs.gnu.org
From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
References: <20191110154849.1123db10@HIDDEN>
Date: Mon, 11 Nov 2019 21:59:13 +0100
In-Reply-To: <20191110154849.1123db10@HIDDEN> (Danny Milosavljevic's
 message of "Sun, 10 Nov 2019 15:48:49 +0100")
Message-ID: <87pnhym8ny.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

Hi Danny,

Danny Milosavljevic <dannym@HIDDEN> skribis:

> it would be better if icedtea's "jar" tool automatically packed reproduci=
ble jar
> files instead of us doing some barely safe unzip-then-rezip-with-specific=
-order
> in the ant-build-system.
>
> It could check the environment variable SOURCE_DATE_EPOCH and then use th=
at as
> timestamp for the zip entries.

Someone proposed patches several months ago to reset timestamps in
jar/zip files, which I reviewed, but then lost track of (which may well
be my fault!) and I can=E2=80=99t find them on guix-patches now.

If you don=E2=80=99t mind researching a bit :-), this could be helpful.

Ludo=E2=80=99.

Last modified: Mon, 25 Nov 2019 12:00:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.