Building for Android and F-Droid

[Hartmut Goebel]

Hello,

I just want to share an idea I had:

Recently I was involved in packaging a app for f-droid. The f-droid build system consists of 1) a virtual machine which get cleaned up after each build. and 2) meta-data descriptions of each package. The meta-data includes build instructions and is basically a ini-like file. For a simple examples see [1] and for a complex one see [2].

One of f-droid's goals is reproducible build. De-facto they fail on this, given the current set up since they update the virtual machine to some current state.

In got the idea to make f-droid use guix as a base. Of course, this would be a lot of work, and I do not expect this to happen any time soon. We have quite a lot of work to do on the guix-side, like building the Android tools, implement maven and graddle builds, etc.

As said: just wanted to share this idea,

[1] https://gitlab.com/fdroid/fdroiddata/blob/master/metadata/com.colinmcdonough.android.torch.txt
[2] https://gitlab.com/fdroid/fdroiddata/blob/master/metadata/pep.android.k9.txt

--
Schönen Gruß
Hartmut Goebel
Dipl.-Informatiker (univ), CISSP, CSSLP, ISO 27001 Lead Implementer
Information Security Management, Security Governance, Secure Software Development

Goebel Consult, Landshut
http://www.goebel-consult.de

Blog: http://www.goebel-consult.de/blog/digitale-burgerrechte-in-der-ara-snowden
Kolumne: http://www.cissp-gefluester.de/2011-08-horrorszenario-bring-your-own-device

smime.p7s
Description: S/MIME Cryptographic Signature