Reproducible F-Droid app not possible for published apps?

1

@hans @Licaon_Kter are reproducible F-Droid app not possible for published apps? only for new apps? see https://github.com/bk138/multivnc/issues/215

2

As said in the issue, it’s possible. But currently if you want to publish both apks, you need to add the signature to the fdroiddata repo manully for every version.

3

You can enable reproducible builds for an existing app, there are two approaches
on F-Droid with reproducible builds:

  • only publish with the upstream signer
  • publish both with the upstream signer and f-droid.org signer
4

That would mean that existing users cannot update via F-Droid?

Is it recommended to try to enable reproducible builds for existing apps?

If yes, what are the steps to do it? Are there any apps that have enabled it, that I could take a look at?

For new apps it seems to be enough to add

Binaries: url/to/upstream.apk

Ref: [feature request] Reproducible F-Droid app · Issue #324 · cvzi/ScreenshotTile · GitHub

5

Yes.

It’s not recommanded since the users can’t get update. If you want to do that, you can see how wireguard does it.

6

And with this option updates would still work?

7

Updates still work but autoupdate doesn’t work.

1 Like
8

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.