F-Droid: overview of apps using reproducible builds

FC Stegerman flx at obfusk.net
Tue Dec 13 12:21:06 UTC 2022


* FC Stegerman <flx at obfusk.net> [2022-12-06 02:14]:
> TL;DR: we added 11 new apps using reproducible builds in November,
> making for a total of 31 RB apps in F-Droid as of December 1st [1].

I'd like to clarify that this is a list of apps that are using our RB
support [2] to publish APKs signed by the upstream developer, after
our build server has verified that a build from source matches the
upstream APK.

This way, the F-Droid build from source verifies the app is 100% free
software, and the upstream developer's signature verifies that our
build is 100% identical to theirs.

So this is only a subset of the apps that (happen to) build
reproducibly.  Our verification server [3] rebuilds apps regularly,
showing that many more apps build reproducibly [4].

Also, whilst the overview [1] is currently updated manually,
generating the data is mostly automated [5].  You might also like to
know that our RB documentation [2] was recently updated.

And lastly a sneak preview: we've already added 11 more RB apps this
month so far.

- FC

[1] https://gitlab.com/fdroid/fdroiddata/-/issues/2844
[2] https://f-droid.org/docs/Reproducible_Builds/
[3] https://f-droid.org/docs/Verification_Server/
[4] https://verification.f-droid.org/verified.html
[5] https://github.com/obfusk/fdroid-misc-scripts

More information about the rb-general mailing list