fedora-reproducible-builds / project

#10 Java jar files embed build timestamps
Closed by zbyszek. Opened by zbyszek.

Closed
Reopen Issue

filedrop-1.1-24.fc41:

├── content
│ ├── ./usr/share/java/filedrop.jar
│ │ ├── zipinfo {}
│ │ │ @@ -1,11 +1,11 @@
│ │ │  Zip file size: 9158 bytes, number of entries: 9
│ │ │ --rw----     1.0 fat        0 bx stor 24-Feb-27 14:32 META-INF/
│ │ │ --rw----     2.0 fat       61 bl defN 24-Feb-27 14:32 META-INF/MANIFEST.MF
│ │ │ --rw----     2.0 fat     4938 bl defN 24-Feb-27 14:32 FileDrop$1.class
│ │ │ --rw----     2.0 fat     1368 bl defN 24-Feb-27 14:32 FileDrop$2.class
│ │ │ --rw----     2.0 fat      462 bl defN 24-Feb-27 14:32 FileDrop$Event.class
│ │ │ --rw----     2.0 fat      225 bl defN 24-Feb-27 14:32 FileDrop$Listener.class
│ │ │ --rw----     2.0 fat      303 bl defN 24-Feb-27 14:32 FileDrop$TransferableObject$Fetcher.class
│ │ │ --rw----     2.0 fat     2166 bl defN 24-Feb-27 14:32 FileDrop$TransferableObject.class
│ │ │ --rw----     2.0 fat     6283 bl defN 24-Feb-27 14:32 FileDrop.class
│ │ │ +-rw----     1.0 fat        0 bx stor 24-Feb-27 15:45 META-INF/
│ │ │ +-rw----     2.0 fat       61 bl defN 24-Feb-27 15:45 META-INF/MANIFEST.MF
│ │ │ +-rw----     2.0 fat     4938 bl defN 24-Feb-27 15:45 FileDrop$1.class
│ │ │ +-rw----     2.0 fat     1368 bl defN 24-Feb-27 15:45 FileDrop$2.class
│ │ │ +-rw----     2.0 fat      462 bl defN 24-Feb-27 15:45 FileDrop$Event.class
│ │ │ +-rw----     2.0 fat      225 bl defN 24-Feb-27 15:45 FileDrop$Listener.class
│ │ │ +-rw----     2.0 fat      303 bl defN 24-Feb-27 15:45 FileDrop$TransferableObject$Fetcher.class
│ │ │ +-rw----     2.0 fat     2166 bl defN 24-Feb-27 15:45 FileDrop$TransferableObject.class
│ │ │ +-rw----     2.0 fat     6283 bl defN 24-Feb-27 15:45 FileDrop.class

This is very similar to https://pagure.io/fedora-reproducible-builds/project/issue/7.

Metadata Update from @zbyszek:
- Issue tagged with: irreproducibility

https://wiki.debian.org/ReproducibleBuilds/TimestampsInJarFiles
There are many other references to this issue on the web.

I'm leaning towards having a postprocessing script for rpm builds that handles this and static archives.

Same with ditaa-0.10-24.fc41.

https://github.com/keszybz/add-determinism/blob/main/src/handlers/jar.rs
implements a cleaner.

This should be fixed now that add-determinism is deployed.

Metadata Update from @zbyszek:
- Issue status updated to: Closed (was: Open)
Metadata
None

irreproducibility

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.