Reproducible Builds at Threema

[Holger Levsen]

Hi Danilo,

thank you for reaching out and sharing the news!

On Wed, Dec 30, 2020 at 04:58:31PM +0100, Danilo wrote:
> Since a few days, the Threema messenger is open source and provides reproducible builds for the Android app:
> 
> https://threema.ch/en/open-source/reproducible-builds
> 
> I was involved in that project (I work for Threema) and set up the reproducible builds. So far these builds for the Android app seem to work nicely, after we fixed an initial issue with an NDK Makefile that linked object files in a non-deterministic way depending on the filesystem.

that's pretty nice!

How is version 4.5 coming along? And have you been in contact with the F-Droid folks
about including it there?
 
[...]
> Are there any other examples of iOS apps providing reproducible builds? I feel that an approach with a VM and requiring a jailbroken device results in a process that is hard to reproduce, will break often and is an endless fight against Apple who are trying to lock down their ecosystem. And if a process is not reliable, then I don't think that it's of much value (since any failure to reproduce a build can be attributed to the unreliability of the build process itself).

sadly I can just say that I agree with you.


-- 
cheers,
	Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁       holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀ PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C
 ⠈⠳⣄

„If you don't like vaccination, try the disease.“ (Herwig Kollaritsch)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.reproducible-builds.org/pipermail/rb-general/attachments/20210119/41d4a3da/attachment.sig>