mastodon - Link to source

Oops, forgot to let our followers here know that we released 0.87.1 last week! This version includes a fix for a small bug that crept into 0.87.0 that prevented syncing of weightlifting workouts on Garmins.

But the bigger news is that we also managed to get reproducible builds at F-Droid in place in time for this release!

As usual, more details in our blog post: gadgetbridge.org/blog/release-…

in reply to Gadgetbridge

mastodon - Link to source

Sylvia

You mention that you're publishing both your self-signed and the F-Droid signed build on F-Droid? Do you have more details about how that works and what you had to do to set that up?

I've wanted to have Catima be RB on F-Droid without breaking existing updates for quite a while, but I didn't really manage to make any progress when trying to talk to the @fdroidorg team, so I'd love to know how you got this working :)

@F-Droid
in reply to Sylvia

mastodon - Link to source

Gadgetbridge

@SylvieLorxu Sure, no problem! In the end it wasn't difficult because our build process was already reproducible. So we only had to find the correct way to update our F-Droid metadata.

High level it works like this:
- build&sign the apk
- extract signatures with "fdroid signatures <out_filename>"
- create MR in F-Droid like this: gitlab.com/fdroid/fdroiddata/-…

For our next release, we won't have autoupdates. We'll need to create an fdroid MR with a copy of the last metadata and the new signatures.


Add Gadgetbridge 0.87.1 extracted signatures (!27127) · Merge requests · F-Droid / Data · GitLab

Gadgetbridge now has signed reproducible builds published. Not adding Bangle builds for now, since the version code is 0.87.1-banglejs and I'm not yet sure how...
GitLab
@Sylvia
⇧