docker:build should use the project.build.outputTimestamp to set image creation time

[jakub-bochenski]

See https://maven.apache.org/guides/mini/guide-reproducible-builds.html

See also: https://github.com/GoogleContainerTools/jib/blob/master/jib-gradle-plugin/README.md#reproducible-build-timestamps

[jakub-bochenski]

TBH I'm not sure if that is possible with docker API :)

[jakub-bochenski]

I guess it is https://reproducible-builds.org/docs/source-date-epoch/#dockerfile

[mfriedenhagen]

Hi,

what if you use a moving tag as your from image, then it would still get the same date although the underlying image was switched from e.g. Java 17 to 21.
So maybe if both the property is set and the from-image uses a digest would that be a good default? The from image could be set in settings.xml or on the command-line via a property as well.