Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8243666

ModuleHashes attribute generated for JMOD and JAR files depends on timestamps

    XMLWordPrintable

Details

    Backports

      Description

        One of the reasons that JDK builds are not reproducible is that the hashes generated for modules packaged as JMOD files are computed from the entire file content, including timestamps and other meta data for entries in the JMOD. This should be re-examined as a hash based on the names and content of each entry should be sufficient.

        Attachments

          Issue Links

            backported by

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8283498 ModuleHashes attribute generated for JMOD and JAR files depends on timestamps

            • P3 - Major loss of function.
            • Resolved
            duplicates

            Bug - A problem which impairs or prevents the functions of the product. JDK-8241606 Adding ModulePackages attribute leads to non-reproducible builds

            • P3 - Major loss of function.
            • Resolved
            relates to

            Bug - A problem which impairs or prevents the functions of the product. JDK-8241602 jlink does not produce reproducible jimage files

            • P3 - Major loss of function.
            • Resolved
            links to

            Commit Commit openjdk/jdk11u-dev/7c29f0e8

            Review Review openjdk/jdk11u-dev/916

            Activity

              People

                alanb Alan Bateman
                alanb Alan Bateman
                Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: