Add reproducible for powpeg-node VETIVER-9.0.2.0#137
Conversation
There was a problem hiding this comment.
Pull request overview
Adds a new reproducible-build recipe for powpeg-node release VETIVER-9.0.2.0, following the existing per-version pattern in powpeg-node/.
Changes:
- Added a Docker-based build pipeline for
powpeg-nodetagVETIVER-9.0.2.0(builder + runner stages). - Added README instructions to build the image and verify the produced JAR checksums.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
| powpeg-node/VETIVER-9.0.2.0/Dockerfile | Defines the pinned-base-image build and artifact extraction flow for VETIVER-9.0.2.0. |
| powpeg-node/VETIVER-9.0.2.0/README.md | Documents build, verification, and optional artifact extraction steps for this version. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
|
|
||
| ## Verify | ||
|
|
||
| The last step of the build prints the sha256sum of the files, if, for any reason there's a need to recheck the hash the following commands can be used to generate them. |
julia-zack
left a comment
julia-zack
left a comment
There was a problem hiding this comment.
docker run --rm powpeg-node/vetiver-9.0.2.0 bash -c 'sha256sum * | grep -v javadoc.jar' 2db20e5b937ef5abe61bce901ba0a667dff9e0041464712d56f49d508a65a5ed federate-node-VETIVER-9.0.2.0-all.jar 0342782596efc0a9817aba5e2182c494357dcbd073b6b68e47886d4f652c9745 federate-node-VETIVER-9.0.2.0.jar 37cf0ea8c5ea9d8f745af1a36c545f81a61df5d28f6c1ad0a99e1c36a69ac9e8 federate-node-VETIVER-9.0.2.0-sources.jar
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
| RUN gpg --keyserver https://secchannel.rsk.co/SUPPORT.asc --recv-keys 1DC9157991323D23FD37BAA7A6DBEAC640C5A14B && \ | ||
| gpg --verify --output SHA256SUMS SHA256SUMS.asc && \ | ||
| sha256sum --check SHA256SUMS && \ | ||
| ./configure.sh && \ | ||
| ./gradlew --no-daemon clean build -x test |
|
|
||
| ## Verify | ||
|
|
||
| The last step of the build prints the sha256sum of the files, if, for any reason there's a need to recheck the hash the following commands can be used to generate them. |
No description provided.