Skip to content

Reproducible build #400

@IzzySoft

Description

@IzzySoft

Just wondering: you've created a Github action to build the release APK, but you're obviously not using it for release builds (at least your latest APK was built on a Windows machine). Which unfortunately makes Reproducible Builds impossible, as the build paths are embedded into the libraries – and on Linux, we cannot match Windows paths:

Image

If you'd use your Github action instead, it would be possible to establish reproducible builds – at least at IzzyOnDroid (see e.g. Reproducible Builds, special client support and more at IzzyOnDroid for some background on this).

So no pressure, but just asking: would that be something you'd consider? One big win of having your app confirmed as RB is that this clearly shows your APKs have been built from exactly the source code they claim to, with nothing added or taken away, and thus pushes up the trust level a level or two. No guarantee we succeed there – but given an example APK built with your Github action, we could take a look and see.

Thanks in advance for considering!

Metadata

Metadata

Assignees

No one assigned

    Labels

    fdroidissue with fdroid builds or RB has failed

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions