| 9 Apr 2021 |
 _hc | artectrex: we're just finalizing a major overhaul to the reproducible publishing process, so now is a great time to try. c!893 | 12:09:25 |
![@freenode_[gibot]:matrix.org](./avatar/%5Bgibot%5D) [gibot] | [client] !893: UpdateService: fix update scheduling condition - https://gitlab.com/fdroid/fdroidclient/merge_requests/893 | 12:09:26 |
 artectrex | Good, I'm certainly trying 😅 | 12:09:46 |
| _hc | oops, the right merge request was s!893 | 12:13:46 |
| [gibot] | [server] !893: WIP: vendor & use apksigcopier - https://gitlab.com/fdroid/fdroidserver/merge_requests/893 | 12:13:47 |
| artectrex | So, should I switch to that branch to try it out? I'm still running makebuildserver lol, taking forever | 12:55:51 |
| _hc | that will take a while. you can run builds without a buildserver instance to get started | 13:09:00 |
| _hc | artectrex: have you seen https://f-droid.org/docs/Reproducible_Builds/ | 13:09:32 |
| artectrex | Yes | 13:09:49 |
| _hc | you'll have to do some setup of the app build to ensure reproducibility | 13:09:59 |
| _hc | preshrinking the PNGs is a requirement, unless you're lucky | 13:10:17 |
| artectrex | Wait I don't need a buildserver? | 13:10:36 |
| _hc | you might in the end, if there are obscure issues | 13:10:50 |
| artectrex | My thoughts about how this worked was that I make my own buildserver, and then run the build on there to make sure I have the same setup | 13:11:09 |
| _hc | you can run fdroid build without a buildserver, then it just runs on your local setup | 13:11:10 |
| artectrex | Oh OK, didn't know that | 13:11:22 |
| _hc | also, if you're lucky, it'll be widely reproducible | 13:11:38 |
| _hc | if the app is only Java/Kotlin, that's a lot more likely | 13:11:49 |
| artectrex | I doubt that, I have some ndk dependencies I think | 13:11:56 |
| artectrex | The app is only kotlin, but dependencies for image processing use some native code iirc | 13:12:39 |
| _hc | NDK stuff is more sensitive to the build en | 13:14:12 |
| _hc | v | 13:14:24 |
| artectrex | Is there somewhere I can understand the situation about the different signature versions? | 13:16:06 |
| artectrex | What do I need to do about that whole thing? should I just put my signatures in the pull request to add my application (as described in https://f-droid.org/docs/Reproducible_Builds/ ) | 13:17:11 |
| _hc | artectrex: first, get it reproducible on your local machine. That means just running ./gradlew assembleRelease, copying the APK somewhere, then run ./gradlew clean | 13:22:39 |
| artectrex | Right, makes sense... I think I'll write a "how to for dummies" using my own experience, I'm sure it could be helpful to others | 13:24:10 |
| artectrex | That is, if I end up figuring it out myself haha | 13:24:33 |
| _hc | that would be great | 13:33:40 |
| _hc | do you know diffoscope? That's the best tool for comparing APKs | 13:33:59 |
| artectrex | I saw mentions of it yes, thanks | 13:51:57 |
