[KARAF-7367] add Reproducible Builds support

[hboutemy]

see https://issues.apache.org/jira/browse/KARAF-7367

[skitt]

Rat is complaining.

[hboutemy]

given no file was added in this commit, I don't see what it can change at Rat level
and the output of the failing build is not really helping

[jbonofre]

I suspect it's the test using MavenArchiver that doesn't output in the right target directory. I gonna take a look.

[jbonofre]

This change causes the following error:

[ERROR] Failed to execute goal org.apache.karaf.tooling:karaf-maven-plugin:4.4.0-SNAPSHOT:kar (package) on project framework: Execution package of goal org.apache.karaf.tooling:karaf-maven-plugin:4.4.0-SNAPSHOT:kar failed: An API incompatibility was encountered while executing org.apache.karaf.tooling:karaf-maven-plugin:4.4.0-SNAPSHOT:kar: java.lang.NoSuchMethodError: org.codehaus.plexus.util.DirectoryScanner.setFilenameComparator(Ljava/util/Comparator;)V

I think the problem is related to maven/plexus dep update. I will take a look.

[hboutemy]

oh, you need to update plexus-utils to a recent release: resolution seems to prefer an older version than required by maven-archiver

[hboutemy]

strangely, I tested ITs, so I don't get how you got such result while everything runs fine for me...

[hboutemy]

you'll need to update plexus-utils.version property to 3.3.0 minimum (currently 3.2.1) to benefit from codehaus-plexus/plexus-utils#70
it's in root pom.xml: I suppose I forgot to commit it...