| 10 Dec 2018 |
 Marcus (old) | Tovok7 same | 11:48:37 |
 _hc | Marcus (BubuIIC): there is news with the disorderfs hack now doing reliable repros :) and I'm trying to get verification.f-droid.org running smooth for you to show also | 12:05:51 |
| _hc | and I'm trying a fresh, full archive rebuild that runs the disorderfs hack on every build | 12:06:17 |
| _hc | so I guess the topic to hash out is whether the disorderfs approach is the only workable solution for that issue, until Google gets around to fixing it | 12:06:57 |
| _hc | since there will be C heads there, maybe you could try to quickly hack out a patch to submit to google based on tovok7's bug report | 12:08:34 |
| Marcus (old) | In reply to @eighthave:matrix.org
since there will be C heads there, maybe you could try to quickly hack out a patch to submit to google based on tovok7's bug report I've thought of that as well. But why C? I'd guess it would be somewhere in the android gradle toolchain. (I.e. being implemented in java.) | 12:13:00 |
| Marcus (old) | But not sure of course... | 12:13:15 |
| _hc | ah, ok, it could be C, C++ or Java | 12:15:00 |
| Marcus (old) | Yeah... | 12:15:08 |
| _hc | like build-tools | 12:15:11 |
| _hc | that's C/C++ | 12:15:16 |
| _hc | mostly | 12:15:19 |
| Marcus (old) | I try to get people together to find the culprit and hopefully stake out a patch. | 12:16:01 |
| Marcus (old) | I'll have to see if I have still all the sources on my notebook... | 12:16:29 |
| Marcus (old) | Tovok7 do you have a minimal reproducer app? | 12:16:59 |
| _hc | I think most apps | 12:18:02 |
| _hc | I this will be useful in tracking it down: | 12:21:48 |
| _hc | What might help to track down this issue is that on old version of our app didn't have this issue. There it doesn't matter if it is build in a disorderfs or not, it always is reproducible. The latest version that worked was using com.android.tools.build:gradle:3.0.1, buildToolsVersion '26.0.2' and aaptOptions { cruncherEnabled = false } | 12:21:49 |
| _hc | from https://issuetracker.google.com/issues/110237303 | 12:21:54 |
| _hc | Marcus (BubuIIC): another topic is figuring out how to get exact bit-for-bit matches reliably | 12:22:35 |
| _hc | I think we still have some ZIP header issues | 12:22:43 |
| _hc | in some of the fdroid toolign | 12:22:49 |
| _hc | see the bottom of https://f-droid.org/docs/Reproducible_Builds/ | 12:23:00 |
| _hc | Marcus (BubuIIC): you could review/merge https://gitlab.com/fdroid/fdroidserver/merge_requests/602 😀 | 12:24:47 |
| _hc | wow, there are actually a lot of APKs that are reproducible https://verification.f-droid.org/verified.json | 12:43:29 |
| _hc | to teh APK Sig v1 | 12:43:48 |
| _hc | I just double checked since I didn't believe it | 12:44:00 |
| _hc | they do still have diffs, looks like just sort order diffs in MANIFEST.MF and the ZIP header | 12:44:22 |
| Marcus (old) | In reply to @eighthave:matrix.org
they do still have diffs, looks like just sort order diffs in MANIFEST.MF and the ZIP header I think we talked about ordering them before, right? | 15:20:25 |
| 12 Dec 2018 |
 Nico Alt | Mathijs: Can you hear me? | 17:52:13 |
