adoptium / adoptium/installer

please increase version information on releasing new debian packages

Open
#473 6 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Jinja
Stars
168
Forks
77
Avg merge
2d 14h
Merged PRs (30d)
12

Description

Apparently the Debian packages for Temurin 7, 11 and 17 have been changed a few days ago without increasing the version information (both package file name and internal version number visible in apt-cache). This leads to problems with reproducibility. Binaries that ought to be identical have different MD5SUMs. It makes Temurin literally unusable for any software escrow service.

Contributor guide

Open the contributing guide

Research direction

No file, test, or entry point is named in the issue; begin by tracing how Debian packages for Temurin 7, 11, and 17 are generated and how their package and internal versions are set. Done means changed packages have distinct filenames and apt-cache versions, with reproducible binaries verified by matching MD5SUMs.

Written by the indexing model from the issue text.

Assessment

Tech stack
debian
Domain
build-system, release
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.