#reproduciblebuild — Public Fediverse posts

Last week in #FDroid (LWIF) in your #RSS inbox:

* #ReproducibleBuild huge repo study
* @gardiner_bryant makes lists
* @ferlagod and @allibragi blog on app inclusion
* @99managers #99managers first #Godot reproducible game
* #Matrix clients security updates
* #Odysee native app
* #SimpleX gets help from #AI
* #Mercurygram #Telegram translates
* #GithubStore gone, welcome #KomiStore
+ 72 new apps
& 328 updates
- 3 archived

Tag, you're it! https://f-droid.org/2026/06/26/twif.html

So, how would you feel?

I have changed the navigation in one of my Android apps - Foto Timer - from Compose Navigation to Nav3 successfully, and am now able to get a reproducible build. YES!

Now for the other apps...

#Android #ReproducibleBuild #BuildInPublic

I have tried for almost 3 days to get an Android app back to being reproducible, and now I am giving up. Sod it.
I'll do something else and revisit when I have re-charged enough to do so.
Big sigh!
#BuildInPublic #Android #ReproducibleBuild

@IzzyOnDroid That documentation is good, thank you for that!

All: recommended if you try to create reproducible builds of your Android apps: https://izzyondroid.org/docs/reproducibleBuilds/DebugFailedRBs/

#BuildInPublic #Android #ReproducibleBuild

This week in #FDroid (TWIF) is live:

* website maintenance w/ #reproduciblebuild info
* #FSFE @llas on #EU #DMA vs #FLOSS
* #Dib2qm depreciated, jump ship now
* #Jami talks about #FLOSS importance
* #NWS weather widget broken
* #SessionMessenger protocol v2 #PFS #PQC
+ 10 new apps
& 214 updates
- 2 apps archived

Check yo' signer: https://f-droid.org/2025/12/05/twif.html

This week in #FDroid (TWIF) is so quick:

* news from below, sneak peek on our infra
* more #Ente partnerships
* #K9Mail #Thunderbird one year later #JMAP
* fourth #ProtonPrivacy app included (still not #ProtonMail)
* #Saracroche inclus, appels de spam exclus
* #StatusIM goes legacy, new app soon
* #Syncthing Fork drama, #ReproducibleBuild to the rescue?
+ 11 new apps
& 211 updates

Expand your repertoire: https://f-droid.org/2025/11/27/twif.html

About #ReproducibleBuild in #Debian, ah, I’ve just learnt about Debian .buildinfo file. It looks like #Guix .drv derivation files. Except that I miss,

1. where is located the build script (say debian/rules);

2. how the dependency graph is uniquely identified based on ’Installed-Build-Depends’ since it only pinpoints to label versions.

🤔

2/2

Really nice talk about #ReproducibleBuilds at #DebConf24! Impressive.

« 100% reproducible is a political decision and nothing technical »

https://debconf24.debconf.org/talks/18-reproducible-builds-the-first-eleven-years

#ReproducibleBuild
1/2

Some projects funded by #NGI programme:

GNU #Mes: Full Source bootstrap
GNU Mes on ARM and RISC-V
#Cuirass: Continuous integration system for GNU #Guix

You enjoy how #ReproducibleBuild’s rooted in a minimal binary seed, thanks NGI!
You enjoy to have Guix binary substitutes, thanks NGI!
etc.

Support the Open Letter to the European Commission, spread the word.

Details: https://pad.public.cat/lettre-NCP-NGI

https://nlnet.nl/project

https://nlnet.nl/project/GNUMes-fullsource
https://nlnet.nl/project/GNUMes-ARM_RISC-V
https://nlnet.nl/project/Cuirass

@melix Been there!

I recently revamped the #cipipeline of a service at work & managed to cut down the time by ~60%.

The trick was to avoid #docker (dind) & reuse the already provisioned resources (ie the build container) while ensuring a #ReproducibleBuild: while docker was used for almost anything, turned out the only time we really needed docker was for consumer #ContractTesting & #EndtoEndTesting and w/ a bit of effort we could safely run most of the tests in the original container.

My own package reproducible server for Arch repos is humming along nicely. https://rebuilder.pitastrudl.me. Number will not reach 100%, maybe for a very long time, though the higher the better.

You can read for about it here https://reproducible-builds.org/
#archlinux #reproduciblebuilds #reproduciblebuild #linux #trust

Endlich im freien Android-App-Store F-Droid:

Die »Corona Contact Tracing Germany« basiert auf der dt. #Corona-Warn-App und funktioniert ohne proprietäre Komponenten und unabhängig von Google. Auch microG ist nicht erforderlich. It's a #reproduciblebuild!

https://f-droid.org/packages/de.corona.tracing