rebuilderd
rebuilderd | fdroidclient | |
---|---|---|
6 | 55 | |
344 | - | |
- | - | |
5.3 | - | |
6 months ago | - | |
Rust | ||
GNU General Public License v3.0 only | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
rebuilderd
-
Towards a Reproducible F-Droid
Arch Linux is heavily invested into it:
- https://reproducible.archlinux.org/ - Attempts to reproduce the distributed binary packages from source using reproducible builds tooling. This already works for a big chunk of packages.
- https://github.com/archlinux/archlinux-repro - This is a wrapper for Arch Linux build tooling that creates a build environment in a container that has the same packages installed as the original build environment back then. Software is expected to build reproducible in this environment and many ecosystems already do by default (Rust for example, to name one).
- https://github.com/kpcyrd/rebuilderd - This monitors the packages in Arch Linux, runs archlinux-repro on all of them and hosts the results. There are other projects supported but Arch Linux works best at the moment, and archlinux-repro offers the best integration I'm currently aware of.
There are surprisingly few people interested in running this stack on their own for verification purpose though.
-
Paranoia About Everything
Independent rebuilders can mitigate this to some degree, unless you can compromise all of them in some way. Some are listed on https://rebuilderd.com/, this is based on reproducible builds and only works for reproducible packages/software though.
-
Debian's rebuilds going up in Purdue's rebuilderd instance!
As many of you may know, one of Debian's most pressing issues for a long time has been working towards bit-for-bit reproducibility of its binary packages. Part of this initiative led to the Reproducible Builds project, in which other projects have joined with the goal of having reproducible builds of their instances. Until now, Debian's reproducibility was theoretical, as there was no proper rebuilding tool to verify its binary package reproducibility empirically. Recently, Arch Linux (and specifically one of its Trusted Users, who goes by 'kpcyrd' online, who in addition maintains packages for Debian and Alpine) produced an independent tool for verifying the reproducibility of binary packages called rebuilderd and has had its own instance running for quite some time. Apparently, collaboration between Arch Linux and Debian (and probably many other programmers and projects) lead to Debian's own instance of rebuilderd hosted by the Purdue University. You can see at Debian's reproducibility progress at:
- rebuilderd 0.9.0: reproducible builds verification system used by Arch Linux
- rebuilderd 0.9.0 has been released
fdroidclient
-
F-Droid: Android FOSS app store
This is the discussion on implementing a popcon-style feature in F-Droid if you want to read through where the project got to: https://gitlab.com/fdroid/fdroidclient/-/issues/396
-
First fully commercial, paid app requiring a key to function at all in main F-Droid repo! (Or is a free ad for the app?)
Meanwhile, the Latest tab "highlights good descriptions" (meaning in other words that it "hides" apps not meeting certain metadata criteria, even if they're completely free - as in speech and in beer - apps), which was not free of some irony, and was discussed at length with apparent consensus to change it but then every time it was back to square one. Because "Latest" apparently doesn't mean "Latest" and people don't get the nuances of English. Not kidding. Read the issue.
-
# of app downloads
Basically, not at present, I think. It's happened for some time, and for a longer time in the past, it's been discussed multiple times, but I don't think right now there's any effort in this direction.
-
⟳ 0 apps added, 1 updated at f-droid.org
F-Droid (version 1.16.3): The app store that respects freedom and privacy
- Receiving message when attempting to update repository
-
All my Open Source App Alternatives
Play Store → Aurora Store, Fdroid, Neo Store
-
is this normal when installing Fdroid?
Yep, that is the hard part: - https://gitlab.com/fdroid/fdroidclient/-/issues/1440 - https://gitlab.com/fdroid/fdroidclient/-/issues/2037 - https://gitlab.com/fdroid/fdroidclient/-/issues/2145
- New F-Droid repository format for faster and smaller updates
- f-droid seems to have stopped working on grapheneos
-
Android 14 adds new features to make third-party app stores work even better
With the speed they're pursuing targetSDK updates? https://gitlab.com/fdroid/fdroidclient/-/issues/1440
What are some alternatives?
libfaketime - libfaketime modifies the system time for a single application
Neo-Store - An F-Droid client with modern UI and an arsenal of extra features.
git2-rs - libgit2 bindings for Rust
jellyfin-android - Android Client for Jellyfin
pacman-bintrans - Experimental binary transparency for pacman with sigstore and rekor
droidVNC-NG - VNC server app for Android that does not require root privileges.
modus - A language for building Docker/OCI container images
Aurora - Non-official Library Genesis (Libgen) Android mobile client.
picosnitch - Monitor Network Traffic Per Executable, Beautifully Visualized
client - F-Droid client with Material UI.
ismyarchverifiedyet - :construction: Experimental script to query rebuilderd for results :construction:
andOTP - [Unmaintained] Open source two-factor authentication for Android