Items tagged with: ReproducibleBuilds

Search

Items tagged with: ReproducibleBuilds


Oh, PS: I forgot to mention some nice numbers. We are now available in 4k – err, I mean, our main builder today reached 4,000 k packages coverage :awesome:

> 4000 packages, 3875 reproducible

RB status: 687 apps (52.2%)

#reproducibleBuilds #IzzyOnDroid


Welcome to the RB family, Prism File Explorer 🥳

apt.izzysoft.de/packages/com.r…

Prism File Explorer is a modern, feature-rich, and lightweight file manager for Android, delivering a seamless file management experience with a beautiful Material Design interface. Thanks to the efforts taken by its developer (and now using CI to build it), the app is now reproducible.

#reproducibleBuilds #IzzyOnDroid


And you can be affirmed it's the very same FOSS build, as at IzzyOnDroid it is a Reproducible Build – meaning, our builders built the APK from Sylvia's code, and ended up with a byte-by-byte identical APK.

Bonus points: updates usually reach you within 24h of Sylvia making them available. Our build cycles are pretty short: just a few hours, instead of a few days 😉

#IzzyOnDroid #reproducibleBuilds #updates



W00t, w00t! New NeoStore (one of our F-Droid clients) arrived, now showing the RB status directly next to the versions of each app 🥳

#IzzyOnDroid #reproducibleBuilds


@IzzyOnDroid @bg443

I believe it will be recorded and live streamed ... presuming, of course, no serious intervention by gremlins!

I have not followed closely, but always glad to see all the work done verifying android apps!

#ReproducibleBuilds has definitely grown to span many different types of software, and really it should be helpful everywhere!


will the session be recorded, for those who cannot attend in person? Running multiple RB verification builders for Android apps ourselves (see e.g. android.izzysoft.de/articles/n… and codeberg.org/IzzyOnDroid/rbtlo… plus codeberg.org/bg443/rbtlog / shields.rbtlog.dev/), we're of course interested in what you and Chris have to say 🤗

@bg443

#reproducibleBuilds


Welcome to the RB family, FlorisBoard 🥳

apt.izzysoft.de/packages/dev.p…

FlorisBoard is your versatile keyboard app, loaded with many features, keyboard layouts, skins and more. At IzzyOnDroid, we ship the "early birds": alpha & beta versions.

Thanks to the hard work of the FlorisBoard team (thank you so much, Patrick & lm41!), the app is finally RB!

#reproducibleBuilds #IzzyOnDroid


(2/2)

And just 15 days before the first anniversary of our public RB GoLive (which happened on August 1st, 2024), we've reached 50% coverage:

Every 2nd app at IzzyOnDroid is now RB! 🥳

#reproducibleBuilds #IzzyOnDroid


Welcome to the RB family, KeePassDX 🥳

Both, the libre and the free flavor were just confirmed:

apt.izzysoft.de/packages/com.k…

apt.izzysoft.de/packages/com.k…

KeePassDX is a password safe and manager allows editing encrypted data in a single file in the open KeePass format and fill in the forms in a secure way, requires no Internet connection and integrates Android design standards.

#reproducibleBuilds #IzzyOnDroid





sorry, but I had to boost this again now. @fdroidorg can you please make optically clear which APKs you reproduced? Developers knock our doors wondering why we say their app is not RB, while you claim it is – and checking, EACH SINGLE TIME we find the app is NOT set up RB at your end, and the JSON at your verification server clearly states you verified YOUR OWN build. Yes, that might show your build is deterministic – but not that theirs is RB. It's confusing.

#reproducibleBuilds



Speaking of RB:

DavDroid 4.5.1 unfortunately failed RB. Which shows the thin line between "deterministic" and "reproducible":

We were able to build the app umpteen times, and got the very same, byte identical APK on each build: deterministic. So, it was reproducible, right? Well: no. It didn't match the APK built by the developer. A very slight difference in this case, an "off-by-one" in the baseline (so don't you worry, it's just the optimizer).

#reproducibleBuilds #IzzyOnDroid (1/2)


#AndroidAppRain at apt.izzysoft.de/fdroid today with 14 updated and 1 added apps:

* Pomozen: a Pomodoro timer designed to boost productivity and focus 🛡️

Enjoy your (1315) #free #Android #apps with the #IzzyOnDroid repo – 627 of them (47.7%) are #reproducibleBuilds :awesome:


Welcome to the RB family, Aegis 🥳

apt.izzysoft.de/packages/com.b…

Aegis Authenticator is a free, secure and open source app to manage your 2-step verification tokens for your online services.

Thanks to the help of the Aegis team, the app is now finally RB – expect the green shield coming up in a few hours :awesome:

#reproducibleBuilds #IzzyOnDroid


Btw: kudos for this go to @bg443 – who runs an independent builder (i.e. Ben is not a member of IzzyOnDroid himself, but his builder covers several of our apps. So it's verifying our builders are telling the truth, so to say).

So while IoD takes the APKs directly from the devs, our builders verify they were indeed built from the source code the devs claim to – while independents like Ben verify we're not "cheating". The winners are YOU :awesome:

#reproducibleBuilds #IzzyOnDroid



#AndroidAppRain at apt.izzysoft.de/fdroid today brings you 13 updated and 1 added apps:

* App2Proxy: redirect the traffic of selected apps through a local proxy using iptables (root needed) 🛡️

And with that, we reached a new milestone: 600 of the apps at #IzzyOnDroid are #reproducibleBuilds now 🥳

Enjoy your #free #Android #apps with the #IzzyOnDroid repo :awesome:


oof, misconfiguration at our end 🙈 Sincere apologies! Corrected now, 0.62.9 will show up with the next sync (and future releases in time again).

Oh, and btw: at #IzzyOnDroid of course as #reproducibleBuilds :awesome:


Welcome to the RB family, QRServ 🥳

apt.izzysoft.de/packages/dev.u…

QRServ takes any selected file on your device and makes it available through its own HTTP server at an unused port number. The selected file can then be downloaded via web browser on another device or software that allows file downloads over HTTP from QR codes.

This was made possible thanks to the efforts by its author – and thanks to his SteamDeck running our RB framework :awesome:

#reproducibleBuilds #IzzyOnDroid #SteamDeck




Thanks for giving us a boost 🤗 And as you use the 🛡️ symbol: #IzzyOnDroid also supports #reproducibleBuilds (yes, we can also build from source – but we ALWAYS ship the APKs provided by their resp. developers), see android.izzysoft.de/articles/n… :awesome:

(our toots use the 🛡️ to indicate RB. Our repo browser indicates RBs by shields, too, for the apps covered by one of our builders)



You're interested in Reproducible Builds for Android apps? We've just updated our Wiki on those:

gitlab.com/IzzyOnDroid/repo/-/…

There are new pages for setting up build recipes, and debugging/fixing RBs – which should help you when running your own builder. Which you btw can set up on your Linux machine within 5 minutes using the scripts provided at codeberg.org/IzzyOnDroid/rbuil… :awesome:

Developers also find pages there on making/keeping their apps RB.

#reproducibleBuilds #Android #IzzyOnDroid


Welcome to the RB family, Farhan 🥳

apt.izzysoft.de/packages/ly.co…

Farhan empowers you to take control of your digital experience. Say goodbye to manipulative strategies used by other apps and get ready to focus on what matters to you.

Thanks to the work of Taha Ben Ashur, its developer, the app is now RB :awesome:

#reproducibleBuilds #IzzyOnDroid




Welcome to the RB family, Inure 🥳

github.com/Hamza417/Inure

Inure is a powerful open source applications manager and analyzer with a good-looking & easy to use interface.

Joint efforts from 3 parties at work here. Most work was done by the developer (thank you, Hamza!) F-Droid devs joined in, and IzzyOnDroid's new builder tools finally brought in the victory on the developer's side. With the next sync, Inure will be available at IoD and F-Droid as RB :awesome:

#reproducibleBuilds #IzzyOnDroid




Wanted to run your own builder for #reproducibleBuilds and were disappointed our RBuilder Setup was only available for Debian-based systems? Then we have good news for you: a few min ago, 2 PRs have been merged. The setup scripts now also support RPM & Arch based systems 🥳

RPM/Arch lack packages for apksigner & dexdiff (which are needed for debugging). We're on it, those will follow hopefully soon™.

Thanks to @Iamlooker and Patrick (from FlorisBoard) for your help!

codeberg.org/IzzyOnDroid/rbuil…


We just got our first feedback on our RB builder setup scripts (codeberg.org/IzzyOnDroid/rbuil…) today, and that made us really happy, seeing a goal achieved:

> I did set up and ran your scripts in my Ubuntu server (noble) and found the process of setting it up a breeze, and it helped me a lot into finding the source of the issue.

So if you're an Android dev looking into getting your app RB, it might be worth a try!

#IzzyOnDroid #reproducibleBuilds


For our "automated builder setup", I've just prepared a PR adding support for RPM based systems. The PR is still marked WIP as I don't have any RPM test system at hand here – so I'm calling out for help:

Anybody willing to test the setup scripts on Fedora, RHEL, CentOS or the likes? 🙏

(more tests on Debian-based systems (Debian, Ubuntu, Mint …) are of course welcome, too)

codeberg.org/IzzyOnDroid/rbuil…

:boost_love:

#reproducibleBuilds #Android


Welcome to the RB family, Minimo Launcher 🥳

apt.izzysoft.de/packages/com.m…

Designed for users who want to de-clutter their home screen, Minimo offers a clean and intuitive minimalist interface that prioritizes functionality without unnecessary distractions.

And thanks to the efforts by its developer, its new release today is RB :awesome:

RB status at IoD now: 530 apps (41.7%)

#IzzyOnDroid #reproducibleBuilds


Welcome to the RB family, RadioUpnp 🥳

apt.izzysoft.de/packages/com.w…

RadioUpnp reads any internet radio. Minimalist and full customizable. With support for UPnP/DLNA. And thanks to the efforts by its developer, with its latest release today it is reproducible :awesome:

So the current RB status at the IzzyOnDroid repo is: 508 apps (40.6%)

#reproducibleBuilds #IzzyOnDroid