Intellij product download tar file timestamps
I am seeing the same wonky timestamp on all of the directories/files in both the Ultimate and Community tar.gz downloads:
- Version: 2023.1
- Build: 231.8109.175
- 27 March 2023
$ tar tzvf ideaIC-2023.1.tar.gz | head -10
drwxr-xr-x 0/0 0 1970-01-20 02:40 idea-IC-231.8109.175/
drwxr-xr-x 0/0 0 1970-01-20 02:40 idea-IC-231.8109.175/plugins/
drwxr-xr-x 0/0 0 1970-01-20 02:40 idea-IC-231.8109.175/plugins/packageChecker/
drwxr-xr-x 0/0 0 1970-01-20 02:40 idea-IC-231.8109.175/plugins/packageChecker/lib/
-rw-r--r-- 0/0 1752296 1970-01-20 02:40 idea-IC-231.8109.175/plugins/packageChecker/lib/packageChecker.jar
drwxr-xr-x 0/0 0 1970-01-20 02:40 idea-IC-231.8109.175/plugins/vcs-github/
drwxr-xr-x 0/0 0 1970-01-20 02:40 idea-IC-231.8109.175/plugins/vcs-github/lib/
-rw-r--r-- 0/0 8815771 1970-01-20 02:40 idea-IC-231.8109.175/plugins/vcs-github/lib/vcs-github.jar
drwxr-xr-x 0/0 0 1970-01-20 02:40 idea-IC-231.8109.175/plugins/design-tools/
drwxr-xr-x 0/0 0 1970-01-20 02:40 idea-IC-231.8109.175/plugins/design-tools/lib/
Seeing this both on Ubuntu 20.04.6, and on an older Ubuntu 18.04.6
请先登录再写评论。
Thanks for the info.
We use a fixed date (1970-01-20) in it in order to make our build/installer reproducible, so if we build these from our source code several times later, it will output the same build file with the same date, which is better for security, build infrastructure.
But I agree this might be odd because these timestamps are not correct and reflect the real build time.
We have an internal issue for tracking this issue and we will consider improve the timestamp info here.
this sounds like a horrible idea. It sets off warnings for me (and many other system-aware folks) and looks like a hacked download.
Please reconsider this approach, it has strong code-smell….
Can you please elaborate more?
The modification time of a file in a tar archive should reflect when the file was actually modified. Seeing it set to something other than a reasonable build date suggests either that the archive has been modified, or that there was some problem in how it was built. I agree with the comment about code-smell. It is an implementation detail of the build/installer chain have leaked into something that is customer visible and confusing.
Thanks for the feedback. I have shared your feedback with the team. Please vote for the related issue for updates: https://youtrack.jetbrains.com/issue/IDEA-319036/IDE-files-dated-as-January-1970-in-downloaded-installer-archive