F-Droid

8298 readers

15 users here now

F-Droid is an installable catalogue of FOSS (Free and Open Source Software) applications for the Android platform. The client makes it easy to browse, install, and keep track of updates on your device.

Website | GitLab | Mastodon

Matrix space | forum | IRC

founded 3 years ago

MODERATORS

fossdd@lemmy.ml

testman@lemmy.ml

Overview of F-Droid apps published with Reproducible Builds · GitLab (gitlab.com)

submitted 8 months ago* (last edited 8 months ago) by barbara@lemmy.ml to c/fdroid@lemmy.ml

8 comments fedilink hide all child comments

It's awesome there are already so many reproduxible builds on fdroid. Why aren't there more? Do devs simply not care enough? Or is it too difficult?

top 8 comments

sorted by: hot top controversial new old

[–] stanka@lemmy.ml 6 points 8 months ago* (last edited 8 months ago) (3 children)

It is a hard problem.

Look at the monumental effort Debian went through (or hell maybe they are also still working on it) http://wiki.debian.org/ReproducibleBuilds

[–] shortwavesurfer@monero.town 7 points 8 months ago (1 children)

Your link is incorrect. Its "wiki." not "wili."

[–] stanka@lemmy.ml 1 points 8 months ago

Crap on my head, sorry, I literally typed it out like we lost a damn war.

Thanks for correcting.

[–] lemmyreader@lemmy.ml 5 points 8 months ago

Thanks for the pointer. https://wiki.debian.org/ReproducibleBuilds

ReproducibleBuilds (last modified 2022-02-20 01:54:19)

[–] barbara@lemmy.ml 1 points 8 months ago* (last edited 8 months ago) (1 children)

Link is dead

Isn't that something different?

It is already possible to make apps reproducible

[–] stanka@lemmy.ml 1 points 8 months ago (1 children)

I just typoed it because I am a damn human.

[–] InternetCitizen2@lemmy.world 3 points 8 months ago

Nice try bot. A human would be too lazy and would copy paste.

[–] dipak@lemmy.ml 2 points 8 months ago

Few things which makes achieving reproducible/deterministic builds hard are - timestamps of generated/compiled files, continuously updating versions of build tools(+support libraries), output binary difference compiled across different OS.

We can use docker based build system for this, but it would require very carefully configured Dockerfile to keep the build tools+libraries on specific version. And if we do a pre-built Docker Image, then the Reproducibility of that Docker Image has to be proven first. It is indeed a difficult task, but not an impossible one. With F-Droid providing a sound framework for reproducible build generation, I believe we would have majority of large Android Apps reproducible in next few years.