Items tagged with: reproducibleBuilds

Search

Items tagged with: reproducibleBuilds


Welcome to the RB family, sNotz 🥳

apt.izzysoft.de/packages/com.s…

sNotz is a privacy-friendly, secure, and completely offline application to create, customize, and manage simple notes on your android device.

Thanks to @sunilpaulmathew for making this possible :awesome:

Oh no, RB status says no apps found now: 404 apps (32.5%), we're working on it 🤞

#reproducibleBuilds #IzzyOnDroid


#AndroidAppRain at apt.izzysoft.de/fdroid today brings you 12 updated apps (hey, all without that DependencyInfoBlob 🤩) and 1 added app:

* Octo: an unofficial FLOSS Octopus Energy agile tariff monitor 🛡️

RB stats: 401 apps (32.3%) – yupp, we crossed the 400! 🥳

At apt.izzysoft.de/magisk 5 #Magisk modules where updated.

Enjoy your #free #Android #apps with the #IzzyOnDroid repo and #reproducibleBuilds :awesome:



@IzzyOnDroid has been doing an amazing job getting our repo to over 30% of apps being reproducible. Maintaining a rebuilder takes a lot of constant work. Thank you!

As I've written before:

[...] the ecosystem is constantly moving: old toolchain and dependency bugs get fixed, but new ones keep popping up. [...] Reproducible Builds are not just an item on a checklist [...] It's an ongoing process involving not just upstream app developers, but also maintainers of repositories, clients, and rebuilders; those involved in outreach and writing documentation; developers and maintainers of tooling, toolchains, and dependencies. And often requires a lot of collaborative debugging :)


See also our "Review of 2024 and Outlook for 2025: Reproducible Builds, Security Measures and more":

android.izzysoft.de/articles/n…

#IzzyOnDroid #ReproducibleBuilds


Welcome to the RB family, NFC Alarm Clock 🥳

apt.izzysoft.de/packages/com.n…

NFC Alarm Clock lets you customize how your alarms look, easily create/delete alarms, and more. Each alarm can be configured however you want to use it. And you can also use an NFC card or tag to dismiss your alarm.

Was quite a trip – but thanks to the tremendous efforts put in by its developer, it's finally RB :awesome:

#IzzyOnDroid #reproducibleBuilds


Welcome to the RB family, Flut Renamer 🥳

apt.izzysoft.de/packages/net.s…

Flut Renamer helps you to effortlessly manage and rename files and directories – with features including inserting text, inserting file metadata and Exif data, replacing text, deleting text, rearranging, and more.

Thanks to joint efforts with its developer, the app is now RB :awesome:

Current RB status at IoD: 391 apps (31.7%)

#IzzyOnDroid #reproducibleBuilds


#AndroidAppRain at apt.izzysoft.de/fdroid today brought you 18 updated apps. Usually I only toot the rain if there are added ones, but… This time, 12 out of those 18 were #reproducibleBuilds (that is 2/3 of the updates). 2 of those failed, 1 I was able to repair (the other not, so I'll have to see we get it fixed with upstream for the next release).

Enjoy your reproducible and #free #Android #apps with the #IzzyOnDroid repo :awesome:



Welcome to the RB family, Mobile Tile Server 🥳

apt.izzysoft.de/packages/com.b…

Mobile Tile Server can be used as a HTTP server, serving Map Tiles from the device storage. When the server is running you can access the tiles from different mapping applications.

Thanks to the help of its author, Bogdan, the app now builds reproducibly :awesome:

RB status now: 389 apps (31.5%) – so almost every 3rd app is covered meanwhile 🤩

#IzzyOnDroid #reproducibleBuilds




And to make finding, installing and updating easier, Sunup will become available at #IzzyOnDroid with the next sync around 7 pm. Congrats @unifiedpush – it has the "green shield up", meaning it's reproducible :awesome:

But if you could get rid of that DEPENDENCY_INFO_BLOCK (a binary blob), that would be great. Easy to do, reach out to us for instructions, which do not fit into a toot – but wait, there are attachments, right? So for your build.gradle, see screenshot.

#reproducibleBuilds


Jetzt ist auch die deutschsprachige Version unseres "Jahresberichts" online:

Ein Blick zurück, ein Blick voraus: Wie war 2024 bei #IzzyOnDroid? Was mag Euch 2025 hier bringen, woran arbeiten wir?

android.izzysoft.de/articles/n…

Und wenn Euch jemand sagt, #security oder #reproducibleBuilds wären (einmal aufgesetzt) reine Selbstläufer: Lacht sie laut aus. Software entwickelt sich weiter – und so auch ihre Risiken und Threats…


A look back, a look ahead: How was 2024 at IzzyOnDroid? What might 2025 bring you there, what are we working on?

android.izzysoft.de/articles/n…

And if anybody ever tells you #security or #reproducibleBuilds are "set-and-forget", laugh straight into their faces. Software evolves, and so do their threats and risks…

German readers: Die Deutsche Version folgt in Kürze…

#IzzyOnDroid



I did some testing with zlib-ng, which Fedora and Arch are already using as a replacement for the original zlib and Debian plans to as well, and I'm not happy with what I found.

[...] With the original zlib, you will always get an identical output stream given the same input stream and compressor parameters [...] I expected that zlib-ng would often produce a different output steam than the original, but what I found was a lot more non-deterministic than just that.

With zlib-ng, feeding the data into the compressor in e.g. 1024-byte chunks always gave me a different output stream than using 4096-byte chunks [...] In fact, every chunk size I tried gave a different output. And that's with fixed size chunks, which is not a given if you're handling e.g. a stream of input.

Even using the same buffer size, I cannot get an identical compressed output stream with Python and Java any more [...]


lists.debian.org/debian-devel/…

#ReproducibleBuilds



@IzzyOnDroid @SylvieLorxu I would be happy to see your repo become #FreeSoftware! As you well know, F-Droid only endorses verifiable free software projects.

It is also great to see all your work on #ReproducibleBuilds. We are continuing to build upon our years of effort there. Our approach is focused on identifying issues and getting things fixed upstream as much as possible. Then devs do not need to use any special tools to achieve reproducible builds.


@SylvieLorxu @IzzyOnDroid

Yes, there is plenty of low hanging fruit like embedded timestamps or nondeterministic ordering. Many apps are already easily reproducible or require only small fixes.

But the ecosystem is constantly moving: old toolchain and dependency bugs get fixed, but new ones keep popping up.

Reproducible Builds are not just an item on a checklist, something you (ask upstreams to) enable and then you're done. Especially when it's a hard requirement like at F-Droid where new builds no longer being reproducible means users will not be able to get updates.

It's an ongoing process involving not just upstream app developers, but also maintainers of repositories, clients, and rebuilders; those involved in outreach and writing documentation; developers and maintainers of tooling, toolchains, and dependencies. And often requires a lot of collaborative debugging :)

It requires teamwork and an ongoing commitment to investigate and fix new issues when they pop up.

#ReproducibleBuilds


We're starting a sprint to look at all the issues preventing #ReproducibleBuilds in all the apps we ship. Most of the issues are simple fixes in the upstream code, like unsorted outputs or timestamps included in the build.
You can help make the #FreeSoftware #Android ecosystem be more reproducible! See the failures here and help us report them upstream: verification.f-droid.org/faile…


Welcome to the RB family, Neo Backup 🥳

apt.izzysoft.de/packages/com.m…

Neo Backup is a fork of OAndBackup bringing support for new Android versions & updated looks. It lets you make and restore backups of apps on your device and save app data to a user-accessible location. Needs root.

After figuring how to get the zlib-ng issue disappear (not me!) the app is now RB & the new release tomorrow will have the green shield up :awesome:

#reproducibleBuilds #IzzyOnDroid – now at 370 apps (30.2%) & growing


#AndroidAppRain at apt.izzysoft.de/fdroid today brings you 15 updated and 2 added apps:

* QuickEdit: a basic and lightweight Photo Editor 🛡️
* TriliumDroid: cross-platform hierarchical note taking app, for large personal knowledge bases 🛡️

And we reached a new milestone a few weeks earlier than expected: 30% of the apps at #IzzyOnDroid are now #reproducibleBuilds 🥳

Enjoy your #free #Android #apps with the #IzzyOnDroid repo :awesome:


The year's not yet up, but our RB statistics already have their days full:

365 apps (29.9%)

So while we started establishing RB for our repo only in February this year, we have added more than 1 app each day, on average. Just a little more, and we cross the 30% mark 🥳

#reproducibleBuilds #IzzyOnDroid




Welcome to the RB family, OpenAthena™ 🥳

apt.izzysoft.de/packages/com.o…

OpenAthena™ is a project that enables consumer and professional drones to identify precise locations based on their images.

After getting rid of some Umlaut in a file name, the code did not only compile – but resulted in a reproducible build. So the new release that shows up in about 2 hours from now will have the green shield up :awesome:

#reproducibleBuilds #IzzyOnDroid



Welcome to the RB family, OpenSCQ30 🥳

apt.izzysoft.de/packages/com.o…

OpenSCQ30 is free software for controlling settings for the Soundcore Q30 headphones.

Took us (the author and IoD) quite some efforts to get the "rusty" things at bay, but we finally succeeded – thanks a lot, @oppzippy :awesome:

Green shield will show up with the new release on the next sync around 7 pm UTC.

#reproducibleBuilds #IzzyOnDroid




#AndroidAppRain at apt.izzysoft.de/fdroid today brings you 16 updated and 1 new apps:

* rbtlui: if you always wanted to explore our #reproducibleBuilds this app is for you: rbtlui provides a graphical interface to explore the builders verifying the apps (and the verified apps themselves) provided by IzzyOnDroid on reproducibility. Of course rbtlui is RB itself 🛡️

So thanks to @bg443 for rbtlui! And enjoy your #free #Android #apps with the #IzzyOnDroid repo :awesome:



WLED Native now got entirely rid of the last proprietary components and no longer needs a separate FOSS flavor. What's more: it was just confirmed to be reproducible 🥳

apt.izzysoft.de/packages/ca.cg…

WLED - Native lets you easily and efficiently manage and control all your WLED light devices from your Android device.

#reproducibleBuilds #FOSS #IzzyOnDroid





@leeloo F-Droid describes itself as decentralized and stresses the importance to not be "locked into F-Droid as the monopoly app provider" (see: f-droid.org/en/2022/02/05/dece…) – so we help with that. Furthermore, several apps have #reproducibleBuilds at IoD but not there (e.g. Aurora Store). IzzyOnDroid performs extra checks (see: android.izzysoft.de/articles/n…). So this increases security and also resilience. Also, some people prefer one place and others the other, developers included 😉


#AndroidAppRain at apt.izzysoft.de/fdroid today brings you 12 updated and 3 added apps:

* Aurora Store: the inofficial PlayStore client has been added on special request. At IoD it's one of the #reproducibleBuilds 🛡️
* Aegis: the 2FA app has been added at special request, too
* OpenBible: download & read the bible in different languages 🛡️

RB: 320 apps (26.5%)

Enjoy your #free #Android #apps with the #IzzyOnDroid repo :awesome:


#AndroidAppRain at apt.izzysoft.de/fdroid today brings you 5 updated and 1 added apps:

* File Explorer: a full-featured and lightweight file manager (successor of the app by the same name, entirely rewritten)

Further, I succeeded in establishing some more apps as #reproducibleBuilds – bringing the count up to 318 apps (26.4%).

At apt.izzysoft.de/magisk 6 #Magisk #modules have been updated.

Enjoy your #free #Android #apps with the #IzzyOnDroid repo :awesome: