Deterministic Builds about consensusj HOT 6 CLOSED

The Gradle user guide has a section titled Reproducible archives that may be useful.

from consensusj.

See also: https://reproducible-builds.org

from consensusj.

This commit should have been a step in the right direction: 8c1539e

from consensusj.

After 99389be I have verified that reproducible builds are working. You must use the same (or similar) version of the JDK (some versions put LICENSE files in the JavaDoc and others don't) to get all the Sha256Sums to match, but if you do you should be able to get all shasums to match even between macOS and Linux.

from consensusj.

• 2c86c44 adds support for building all artifacts with ./gradlew installDist
• e4d1023 uploads all build artifacts and a SHA256SUMS file as GitHub Actions artifacts so you can verify your local build against CI.
• 2f807fc adds build artifacts and SHA256SUMS on GitLab CI. Note that the JavaDoc (and therefore Gradle module metadata JSON) differs from the Temurin builds because of the absence of two license files)
• a35017f adds instructions for verifying SHA256SUMS to doc/release-process.adoc

from consensusj.

Completed, see #17 (comment)

from consensusj.