keycloak-metrics-spi icon indicating copy to clipboard operation
keycloak-metrics-spi copied to clipboard

Published 20 hours ago • verified publisher icon aerogear

feat: add support for reproducible builds

Open inglor opened this issue 2 years ago • 3 comments

Motivation

Add support for reproducible builds

What

  • Remove the timestamps from manifest
  • Remove timestamp from and archives
  • Package in same order on archives

Why

Reproducible builds website explains this well.

How

See What. Inspiration from gradle docs

Verification Steps

  1. Execute gradle jar
  2. Rename jar into something different
  3. Execute gradle jar again
  4. Md5sum the two produced files, it should have the same hash.

Checklist:

  • [x] Code has been tested locally by PR requester
  • [ ] Changes have been successfully verified by another team member

Progress

  • [x] Finished task

Additional Notes

inglor avatar Apr 07 '23 12:04 inglor

@pb82 could you pay attention to this enhancement?

alexted avatar Jul 15 '24 08:07 alexted