Reproducible Builds

[infeo]

A long term goal for reliability is reproducible builds.

In order to do this we have to make the maven build process and the native compiling reproducible.

For maven, see https://maven.apache.org/guides/mini/guide-reproducible-builds.html:

• fix all plugin versions (including default plugins such as maven-clean-plugin)
• add project.build.outputTimestamp (can be an arbitrary but fixed date such as 2000-01-01)
• verify if two builds yield identical artifacts:

./mvnw clean install
./mvnw clean package artifact:compare -DskipTests

For native compilation:
tbd