I have to execute a build which generates a WAR

Question

I have to execute a build which generates a WAR

file. I see that the checksum for every WAR generated is always different from the last inspite of no code changes. I came across this issue (https://stackoverflow.com/questions/53006925/gradle-same-checksum-for-repeated-build/53012937#53012937) which says

The generated class files get a creation/modification timestamp of the time they were created
This modification date is added as metadata to the generated jar/zip archives which results in the checksum differences

How can I verify if it indeed is true? I do not see sources in the answer

0

03.10.2023

9 ответов

22 просмотра

Roy Автор вопроса

I found diffoscope https://reproducible-builds.org/tools/ and this issue for Ant (https://bz.apache.org/bugzilla/show_bug.cgi?id=61269) which means the issue is true. Seems there is no native way to compare the differences, though I found the diff (time diff in my case) using the diffoscope

0

03.10.2023

Roy Автор вопроса

I do not use gradle, unfortunately. I use Ant

0

03.10.2023

Dmytro Buryak

Roy
I do not use gradle, unfortunately. I use Ant

Ah, ok, got it

0

03.10.2023

Roy Автор вопроса

Dmytro Buryak
Ah, ok, got it

my question was how do I verify why my build is not reproducible

0

03.10.2023

Dmytro Buryak

Roy
my question was how do I verify why my build is no...

Because file attributes are added to zip/jar. And your compiled class files, and basically any other generated resource (log4j/logback configs, application.properties, etc.) will have the timestamp of the time when you executed build.

0

03.10.2023

Dmytro Buryak

Roy
my question was how do I verify why my build is no...

0

03.10.2023

Dmytro Buryak

Roy
my question was how do I verify why my build is no...

Here's what I find. Seems, it's not supported. Only manual workaround - set fixed timestamp to all files, and order files ((( https://bz.apache.org/bugzilla/show_bug.cgi?id=61269

0

03.10.2023

Roy Автор вопроса

Dmytro Buryak
Here's what I find. Seems, it's not supported. Onl...

Yes

0

03.10.2023

Dmytro Buryak · Accepted Answer

Dmytro Buryak

Did you try what's described in the documentation? tasks.withType(AbstractArchiveTask).configureEach { preserveFileTimestamps = false reproducibleFileOrder = true } https://docs.gradle.org/current/userguide/working_with_files.html#sec:reproducible_archives

0

03.10.2023

Похожие чаты

I have to execute a build which generates a WAR

9 ответов

Похожие вопросы