social.tchncs.de is one of the many independent Mastodon servers you can use to participate in the fediverse.
A friendly server from Germany – which tends to attract techy people, but welcomes everybody. This is one of the oldest Mastodon instances.

Administered by:

Server stats:

3.8K
active users

#reproduciblebuilds

0 posts0 participants0 posts today

You're interested in Reproducible Builds for Android apps? We've just updated our Wiki on those:

gitlab.com/IzzyOnDroid/repo/-/

There are new pages for setting up build recipes, and debugging/fixing RBs – which should help you when running your own builder. Which you btw can set up on your Linux machine within 5 minutes using the scripts provided at codeberg.org/IzzyOnDroid/rbuil :awesome:

Developers also find pages there on making/keeping their apps RB.

GitLabReproducible Builds · Wiki · IzzyOnDroid / repo · GitLabThe F-Droid compatible repo at https://apt.izzysoft.de/fdroid/

Welcome to the RB family, Farhan 🥳

apt.izzysoft.de/packages/ly.co

Farhan empowers you to take control of your digital experience. Say goodbye to manipulative strategies used by other apps and get ready to focus on what matters to you.

Thanks to the work of Taha Ben Ashur, its developer, the app is now RB :awesome:

IzzyOnDroid App Repo„Farhan - Brake Phone Addiction“ – IzzyOnDroid F-Droid RepositoryFarhan offers different tools that can help you with smartphone addiction

Welcome to the RB family, WalkersGuide 🥳

apt.izzysoft.de/packages/org.w

WalkersGuide is a navigational aid primarily intended for blind and visual impaired pedestrians. It calculates routes and shows nearby points of interest.

Thanks to the help by its developer, the app is RB now :awesome:

IzzyOnDroid App Repo„WalkersGuide“ – IzzyOnDroid F-Droid RepositoryFree navigational aid for the blind and visual impaired based on OpenStreetMap

Welcome to the RB family, Rattlegram 🥳

apt.izzysoft.de/packages/com.a

Rattlegram lets you transmit short text messages over COFDMTV encoded audio signals.

Thanks to joined efforts with its developer, Rattlegram (along with its 2 sister-apps) is now RB :awesome:

IzzyOnDroid App Repo„Rattlegram - SMS via audio!“ – IzzyOnDroid F-Droid RepositoryTransmit short text messages over COFDMTV encoded audio signals

Welcome to the RB family, Inure 🥳

github.com/Hamza417/Inure

Inure is a powerful open source applications manager and analyzer with a good-looking & easy to use interface.

Joint efforts from 3 parties at work here. Most work was done by the developer (thank you, Hamza!) F-Droid devs joined in, and IzzyOnDroid's new builder tools finally brought in the victory on the developer's side. With the next sync, Inure will be available at IoD and F-Droid as RB :awesome:

GitHubGitHub - Hamza417/Inure: An elegant and beautiful premium Android app manager for rooted and non-rooted devices with a built-in terminal, analytics, debloat, stats and various other features with an custom theme engine, developed with purely custom UI design and reproducible build.An elegant and beautiful premium Android app manager for rooted and non-rooted devices with a built-in terminal, analytics, debloat, stats and various other features with an custom theme engine, de...
Replied in thread

@licho @osman provide evidence the code @signalapp released is actually being deployed.

Not to mention pushing a #Shitcoin-#Scam (#MobileCoin) disqualifies #Signal per very design!
youtube.com/watch?v=tJoO2uWrX1M

  • Given the collection of #PII like #PhoneNumbers, the ability to restrict functionality based off those and the fact that #Signal is subject to #CloudAct make it inherently not trustworthy.

And don't even get me started on the fact.it's not sustainable to run it as a #VCmoneyBurningParty!

Same as identifying users: They already got a #PhoneNumber which in many juristictions one can't even obtain without #ID legally, thus making it super easy to i.e. find and locate a user. Even tze cheapest LEAs can force their local M(V)NOs to #SS7 a specific number...

  • All these are unnecessary risks, that could've been avoided, but explicitly don't even get remediated retroactively!

Again: Signal has a #Honeypot stench, and you better learn proper #E2EE, #SelfCustody and #TechLiteracy because corporations can't pull the 5th [Amendment] on your behalf!

"Over the last few releases, we changed our build infrastructure to make package builds reproducible. This is enough to reach 90%. The remaining issues need to be fixed in individual packages. After this Change, package builds are expected to be reproducible. Bugs will be filed against packages when an irreproducibility is detected. The goal is to have no fewer than 99% of package builds reproducible."

phoronix.com/news/Fedora-43-Ex

www.phoronix.comFedora 43 Hopes To Set An Expectation That Package Builds Are Reproducible
Continued thread

Oh, and the Readme of the rbuilder_setup repo needed a few updates as well 🙈 Done now: codeberg.org/IzzyOnDroid/rbuil

If you've set up a builder, we'd love to hear from your experiences – concerning the setup (was it easy enough and straight-forward?) as well as from operation :awesome:

Forgejo: Beyond coding. We Forge.rbuilder_setupScripts to automate setup of rbtlog, rbhelper, and their dependencies

Wanted to run your own builder for #reproducibleBuilds and were disappointed our RBuilder Setup was only available for Debian-based systems? Then we have good news for you: a few min ago, 2 PRs have been merged. The setup scripts now also support RPM & Arch based systems 🥳

RPM/Arch lack packages for apksigner & dexdiff (which are needed for debugging). We're on it, those will follow hopefully soon™.

Thanks to @Iamlooker and Patrick (from FlorisBoard) for your help!

codeberg.org/IzzyOnDroid/rbuil

Forgejo: Beyond coding. We Forge.rbuilder_setupScripts to automate setup of rbtlog, rbhelper, and their dependencies

We just got our first feedback on our RB builder setup scripts (codeberg.org/IzzyOnDroid/rbuil) today, and that made us really happy, seeing a goal achieved:

> I did set up and ran your scripts in my Ubuntu server (noble) and found the process of setting it up a breeze, and it helped me a lot into finding the source of the issue.

So if you're an Android dev looking into getting your app RB, it might be worth a try!

Forgejo: Beyond coding. We Forge.rbuilder_setupScripts to automate setup of rbtlog, rbhelper, and their dependencies

For our "automated builder setup", I've just prepared a PR adding support for RPM based systems. The PR is still marked WIP as I don't have any RPM test system at hand here – so I'm calling out for help:

Anybody willing to test the setup scripts on Fedora, RHEL, CentOS or the likes? 🙏

(more tests on Debian-based systems (Debian, Ubuntu, Mint …) are of course welcome, too)

codeberg.org/IzzyOnDroid/rbuil

:boost_love:

Codeberg.orgWIP: add support for installation on RPM based systemsFixes #2 This adds support for installing the builder package on RPM based systems. Testing needed: someone running an RPM based system, please give it a try!

Welcome to the RB family, Minimo Launcher 🥳

apt.izzysoft.de/packages/com.m

Designed for users who want to de-clutter their home screen, Minimo offers a clean and intuitive minimalist interface that prioritizes functionality without unnecessary distractions.

And thanks to the efforts by its developer, its new release today is RB :awesome:

RB status at IoD now: 530 apps (41.7%)

IzzyOnDroid App Repo„Minimo Launcher“ – IzzyOnDroid F-Droid RepositoryHome screen without distractions. Improve your focus and productivity.

Welcome to the RB family, RadioUpnp 🥳

apt.izzysoft.de/packages/com.w

RadioUpnp reads any internet radio. Minimalist and full customizable. With support for UPnP/DLNA. And thanks to the efforts by its developer, with its latest release today it is reproducible :awesome:

So the current RB status at the IzzyOnDroid repo is: 508 apps (40.6%)

IzzyOnDroid App Repo„RadioUpnp“ – IzzyOnDroid F-Droid RepositoryClean designed internet radio player with integrated UPnP/DLNA function

🐣 oops… the Easter egg hatched early! We've just reached a goal we hoped to achieve around Easter:

At #IzzyOnDroid 40% – so 2 out of every 5 apps – are now #reproducibleBuilds 🥳

So whenever you see one or more green shields next to the version of an app in our repo browser at apt.izzysoft.de/fdroid you can be sure: this was built exactly from the source code it claims to be, nothing added or taken away.

Oh, and we should roll out those new shields soon™, so you see the independent builders 😉

Want to try running your own builder – to confirm apps as #reproducibleBuilds or just to build your own apps? At #IzzyOnDroid we've just made "easy setup scripts" available which should take care for all requirements, while letting you choose which parts you want:

codeberg.org/IzzyOnDroid/rbuil

These scripts are not yet thoroughly tested (just a bit on Linux Mint/Debian/Ubuntu), so we'd welcome volunteers & their feedback.

Thanks to @nlnet for supporting us on this project! You're awesome :awesome: