Skip to content

Reproducible build #400

Description

@IzzySoft

Just wondering: you've created a Github action to build the release APK, but you're obviously not using it for release builds (at least your latest APK was built on a Windows machine). Which unfortunately makes Reproducible Builds impossible, as the build paths are embedded into the libraries – and on Linux, we cannot match Windows paths:

Image

If you'd use your Github action instead, it would be possible to establish reproducible builds – at least at IzzyOnDroid (see e.g. Reproducible Builds, special client support and more at IzzyOnDroid for some background on this).

So no pressure, but just asking: would that be something you'd consider? One big win of having your app confirmed as RB is that this clearly shows your APKs have been built from exactly the source code they claim to, with nothing added or taken away, and thus pushes up the trust level a level or two. No guarantee we succeed there – but given an example APK built with your Github action, we could take a look and see.

Thanks in advance for considering!

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    fdroidissue with fdroid builds or RB has failed

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions