cryptomator / cryptomator/integrations-win

Reproducible Builds

Open
#133 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
9
Forks
3
PR merge metrics
No merged PRs in 30d

Description

A long term goal for reliability is reproducible builds.

In order to do this we have to make the maven build process and the native compiling reproducible.

For maven, see https://maven.apache.org/guides/mini/guide-reproducible-builds.html:
* fix all plugin versions (including default plugins such as maven-clean-plugin)
* add project.build.outputTimestamp (can be an arbitrary but fixed date such as 2000-01-01)
* verify if two builds yield identical artifacts:
```
./mvnw clean install
./mvnw clean package artifact:compare -DskipTests
```

For native compilation:
tbd

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the Maven reproducible-builds guide linked in the issue, then run ./mvnw clean install and ./mvnw clean package artifact:compare -DskipTests to establish the current result. Done means Maven artifacts are reproducible after fixing plugin versions and the output timestamp; native compilation is still marked TBD.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
build-system
Issue type
Refactor
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.