-
Notifications
You must be signed in to change notification settings - Fork 10
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Reproducible Builds #350
Comments
@ofalvai any word? |
I have not forgotten this, I'll get back to this soon! It totally makes sense and seems doable |
Thanks! Then I resist from further pings at least for a few weeks, hoping you ring my bell earlier 😉 |
FairEmail makes its embedded UUID deterministic using manifestPlaceholders.build_uuid = UUID.nameUUIDFromBytes(("github" + getVersionCode() + getRevision()).getBytes()).toString(); <meta-data
android:name="com.bugsnag.android.BUILD_UUID"
android:value="${build_uuid}" /> |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
I've checked your app if its build is reproducible (see: Reproducible bulds, special client support and more in our repo), but while I was able to successfully generate the APK using
./gradlew assembleRelease
, the APKs were not identical.APK diff:
Differences seem to be in the
AndroidManifest.xml
, so let's look at those:Looks like that's the non-deterministic
BUILD_UUID
of Bugsnag. And it seems that Bugsnag has an alternative for that:Could you please look into that? We'd appreciate if you could help making your build reproducible. We've also prepared some hints on reproducible builds for that – though those do not include this Bugsnag thingy. So if you cound confirm the alternative, and let us know how to achieve it, that might even help others and we could add it to those hints.
Thanks in advance – and looking forward to your reply!
The text was updated successfully, but these errors were encountered: