Bug#884095: revisiting this

Hans-Christoph Steiner hans at eds.org
Wed Mar 25 15:12:24 GMT 2020


I'm @eighthave on salsa.

We're still stuck on this.  We regularly have to manually do APK
comparisons because we cannot force diffoscope to treat files as APKs,
and it is misdetecting.  I posted on
https://salsa.debian.org/reproducible-builds/diffoscope/issues/28 but
the only response was to retitle the issue to go back to detection.  I
really don't think it will be possible to fix this issue something like
file magin auto-detection.  An APK can be a working APK, JAR, DEX, and
ZIP all at the same time.  Using file extensions could work.

Here's a commonly occuring example:
https://verification.f-droid.org/eu.faircode.email_914.apk.diffoscope.html

Here is a user who was blocked from using diffoscope due to this issue:
https://forum.f-droid.org/t/help-wanted-how-to-create-a-reproducible-build-fairemail/8860/11



More information about the Reproducible-builds mailing list