mastodon - Link to source

Wanted to run your own builder for #reproducibleBuilds and were disappointed our RBuilder Setup was only available for Debian-based systems? Then we have good news for you: a few min ago, 2 PRs have been merged. The setup scripts now also support RPM & Arch based systems 🥳

RPM/Arch lack packages for apksigner & dexdiff (which are needed for debugging). We're on it, those will follow hopefully soon™.

Thanks to @Iamlooker and Patrick (from FlorisBoard) for your help!

codeberg.org/IzzyOnDroid/rbuil…


rbuilder_setup

Scripts to automate setup of rbtlog, rbhelper, and their dependencies
Forgejo: Beyond coding. We Forge.
#reproduciblebuilds @LooKeR
in reply to LooKeR

mastodon - Link to source

Caleb Maclennan

This package is an incorrectly named because it doesn't build from sources, just repackages upstream built sources—it should be -bin. If I were to put something in official repos it would have to be a source build. Is building these from sources possible?

In the mean time that bin package is built and hosted in my unofficial user repo, but signed with official keys:

wiki.archlinux.org/title/Unoff…

So adding that to a repo collection would be a low friction way to get setup.

Unofficial user repositories - ArchWiki

wiki.archlinux.org
in reply to Caleb Maclennan

mastodon - Link to source

IzzyOnDroid ✅

@alerque which one is "this"? I'm unsure if it would be a good idea to pull in the entire build tools package just for dexdump and apksigner. But I must admit I didn't check how much overhead that means. So as it's not essential for *running* a builder, it's just mentioned as a manual install option for now. But if the overhead is small enough, or if there were separate package(s) for those two, that could be included in the default install of course. @Iamlooker
@Caleb Maclennan @LooKeR
in reply to IzzyOnDroid ✅

mastodon - Link to source

Caleb Maclennan

android-sdk-build-tools should be android-sdk-build-tools-bin. Except in special cases upstream generated binaries are not eligible for official packaging, we need to be able to build from source. The AUR allows such recipes that fetch and wrap upstream but they should have bin suffixes on the package names.

Are dexdump and apksigner sources available? Do they have some sort of stable versioning scheme that applies to them upstream?

in reply to IzzyOnDroid ✅

mastodon - Link to source

IzzyOnDroid ✅

Oh, and the Readme of the rbuilder_setup repo needed a few updates as well 🙈 Done now: codeberg.org/IzzyOnDroid/rbuil…

If you've set up a builder, we'd love to hear from your experiences – concerning the setup (was it easy enough and straight-forward?) as well as from operation :awesome:

#reproducibleBuilds #Android


rbuilder_setup

Scripts to automate setup of rbtlog, rbhelper, and their dependencies
Forgejo: Beyond coding. We Forge.
#android #reproduciblebuilds