Mastodawn

Breakthrough in that whole "reproducible builds" subject! Rafael released v2.2.0 of Compose Destinations, and it orders files reproducibly. Yay!
Immediately fixed two apps that had not been updated on F-Droid for weeks, and I may now tackle the next one, which has other problems, too.
#BuildInPublic #Android #ReproducibleBuild #FDroid

jexner 🏳️‍🌈May 1

I'm about ready to give up on publishing my Android apps on f-droid or any other place, and it is because of reproducible builds.
I have not been able to make a single app compile in a reproducible way lately. They sometimes fit between my PC and my linux box, but never with the f-droid build.
I have tried setting up an f-droid build server, and failed. There is not much documentation. (1/2)
#BuildInPublic #Android #ReproducibleBuild #FDroid

Show thread

jexner 🏳️‍🌈Apr 22

I fixed a lot of easy and some stupid mistakes I made, set `compileSdk = 35` and `buildToolsVersion = "35.0.0"`, both down from 36, and now it boils down to `classes.dex` not being the same.
I _think_ it is due to a library I use not compiling deterministically, meaning that a list in one file is ordered one way on my PC and the other way round on the F-Droid build servers.
#BuildInPublic #Android #ReproducibleBuild

jexner 🏳️‍🌈Apr 21

I am currently struggling with making a reproducible build of my latest app before I release it on F-Droid, and, like the other times, it is tedious.
I blame Google.
#BuildInPublic #Android #ReproducibleBuild

Show thread

Sylvia Dec 12, 2024

@fdroidorg I'd also suggest looking at and linking to @IzzyOnDroid's great documentation for app devs on what to watch for: https://gitlab.com/IzzyOnDroid/repo/-/wikis/Reproducible-Builds, which is much more helpful than just creating upstream issues to say "broken, please fix" without detailed steps.

(By the way, if someone wants to try building Reproducible Builds themselves, I'd strongly suggest looking at https://gitlab.com/IzzyOnDroid/repo/-/wikis/Verification-Builder, which powers the #IzzyOnDroid #ReproducibleBuild system, covering over 30% of IoDs 1223 apps already)

Reproducible Builds · Wiki · IzzyOnDroid / repo · GitLab

The F-Droid compatible repo at https://apt.izzysoft.de/fdroid/

GitLab

Show thread

Sylvia Dec 10, 2024

Thank you @IzzyOnDroid for confirming yet another release as #ReproducibleBuild! :)

Sylvia Nov 20, 2024

#rbtlui is such a cool little #Android app.

As a GUI for the output of systems running @obfusk's #rbtlog project, it gives people a quick overview on if an app has a #ReproducibleBuild. With its quick overview, I believe it is currently the easiest way for users to confirm "yes, the .apk provided by the developer really matches the source code". It even lists multiple sources, allowing you to choose who to trust!

Thank you @bg443 for the app!

https://apt.izzysoft.de/fdroid/index/apk/dev.bg.rbtlui

#IzzyOnDroid #OpenSource

„rbtlui“ – IzzyOnDroid F-Droid Repository

A UI for the reproducible build tool, rbtlog

IzzyOnDroid App Repo

Show thread

Simon Tournier Sep 3, 2024

About #ReproducibleBuild in #Debian, ah, I’ve just learnt about Debian .buildinfo file. It looks like #Guix .drv derivation files. Except that I miss,

1. where is located the build script (say debian/rules);

2. how the dependency graph is uniquely identified based on ’Installed-Build-Depends’ since it only pinpoints to label versions.

🤔

2/2

Simon Tournier Sep 3, 2024

Really nice talk about #ReproducibleBuilds at #DebConf24! Impressive.

« 100% reproducible is a political decision and nothing technical »

https://debconf24.debconf.org/talks/18-reproducible-builds-the-first-eleven-years

#ReproducibleBuild
1/2

Simon Tournier Jul 19, 2024

Some projects funded by #NGI programme:

GNU #Mes: Full Source bootstrap
GNU Mes on ARM and RISC-V
#Cuirass: Continuous integration system for GNU #Guix