[rb-general] Reproducible Android apps: resources.arsc

[Holger Levsen]

On Mon, Jun 18, 2018 at 09:14:30PM +0100, Chris Lamb wrote:
> > We are aware of at least two other Android apps that are affected by
> > this problem. So far, we are working around the issue by using
> > disorderfs in stable sorting mode.
> Eek! I must say this made me squirm IRl as disorderfs was intended to
> locate, detect and ultimately fix non-determinism, not to work-around
> it!  :'-(

well, this is the irony of disorderfs since day one of its existance:
a project to get rid off non-deterministic behaviours everywhere created
a tool to create non-deterministic behaviour :)

that said, I didn't eek but rather smiled when I read this. Using
disorderfs to force orderly fs behaviour is IMO a clever hack / aka 
hacky workaround to an annoying not easily fixable problem elsewhere, so
yay.

and of course fixing it properly is better, but if this cannot be done
now, so be it.

On Tue, Jun 19, 2018 at 05:14:35PM +0200, Sylvain wrote:
> Android is very committed to reproducible builds.  They even commit
> their compiler binaries in Git repositories so everybody reuse the
> exact bit-for-bit identical compiler.  They go as far as [...]

this sounds quite promising actually, so I'd definitly recommend filing
an issue at the appropriate place, surely best with a patch attached ;)


-- 
cheers,
	Holger
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.reproducible-builds.org/pipermail/rb-general/attachments/20180621/df147a4b/attachment.sig>