verifying reproducible APKs: apksigcopier

[Hans-Christoph Steiner]

Great work, Felix!  We're also rolling this out to our whole CI testing setup to 
make it easy for app developers to create and publish reproducible APKs.  It 
should now be possible to submit an app to F-Droid via merge request to
https://gitlab.com/fdroid/fdroiddata/-/merge_requests

And the `fdroid build` CI job will run a build and test whether its 
reproducible.  Here's a test case:
https://gitlab.com/fdroid/fdroiddata/-/merge_requests/8816

.hc

Felix C. Stegerman:
> Hi!
> 
> I just released v0.5.0 of apksigcopier, which is the same code that
> has now also been merged into fdroidserver master as a vendored
> library.
> 
> I've also uploaded a Debian source package to mentors.debian.net,
> which is now awaiting Holger's sponsorship.
> 
> - Felix
> 

-- 
PGP fingerprint: EE66 20C7 136B 0D2C 456C  0A4D E9E2 8DEA 00AA 5556
https://pgp.mit.edu/pks/lookup?op=vindex&search=0xE9E28DEA00AA5556