apksigcopier v1.0.0

2021-06-22 Thread Felix C. Stegerman
Hi! > apksigcopier is a tool for copying APK signatures from a signed APK > to an unsigned one (in order to verify reproducible builds). It can > also be used to compare two APKs with different signatures. As apksigcopier [1] -- including the vendored copy in fdroidserver [2] -- has worked

How can I contribute?

2021-05-20 Thread Felix C. Stegerman
Hi! I'd like to contribute to Reproducible Builds (for Debian). I've read [1] and requested access to [2]; unfortunately, [3] is a broken link. - Felix [1] https://reproducible-builds.org/contribute/ [2] http://salsa.debian.org/reproducible-builds [3]

Re: verifying reproducible APKs: apksigcopier

2021-04-15 Thread Felix C. Stegerman
Hi! I just released v0.5.0 of apksigcopier, which is the same code that has now also been merged into fdroidserver master as a vendored library. I've also uploaded a Debian source package to mentors.debian.net, which is now awaiting Holger's sponsorship. - Felix

Re: verifying reproducible APKs: apksigcopier

2021-03-31 Thread Felix C. Stegerman
Hi Torsten, * Torsten Grote [2021-03-31 16:58]: > On Sunday, 28 March 2021 22:02:33 -03 Felix C. Stegerman wrote: > > apksigcopier [2], a tool to copy APK signatures > > from a signed APK to an unsigned one. > > What kind of signatures does the tool support (couldn't find

verifying reproducible APKs: apksigcopier

2021-03-28 Thread Felix C. Stegerman
Hi! The F-Droid reproducible builds & verification effort recently led [1] to the development of apksigcopier [2], a tool to copy APK signatures from a signed APK to an unsigned one. ( I've started packaging it for Debian [3] and intend to file an ITP soon, but since I'm not a Debian developer

Re: reproducible .pyc files (& python-for-android)

2021-03-11 Thread Felix C. Stegerman
* "Bernhard M. Wiedemann" [2021-01-04 12:48]: > This is not a timestamp issue, though. If those are varying, they are in > the header (first 12 bytes) of the .pyc. > > > │ 00f0: 6d5a 0d62 6469 7374 5f77 696e 696e 7374 mZ.bdist_wininst > │ -0100: 5a05 6368 6563 6b5a 0675 706c 6f61 644e

Re: reproducible .pyc files (& python-for-android)

2021-01-04 Thread Felix C. Stegerman
Hi Frederik, * Frederik Rietdijk [2021-01-04 14:48]: > Recently I spent some time again as well on making the Python interpreters > in Nixpkgs build reproducibly. The following Nix expression results in > deterministic builds of the 3.x interpreters we have. Search for > `determinis` and you

Re: reproducible .pyc files (& python-for-android)

2021-01-04 Thread Felix C. Stegerman
Hi Bernhard (& Chris), * "Bernhard M. Wiedemann" [2021-01-04 12:48]: > Am 04.01.21 um 11:23 schrieb Chris Lamb: > >> p4a compiles those with "hostpython -OO -m compileall -b -f" (where > >> hostpython is the cross-compiled Python for the target -- arm64-v8a or > >> armeabi-v7a -- which is thus