Bug#884095: revisiting this
Hans-Christoph Steiner
hans at eds.org
Wed Mar 25 15:12:24 GMT 2020
I'm @eighthave on salsa.
We're still stuck on this. We regularly have to manually do APK
comparisons because we cannot force diffoscope to treat files as APKs,
and it is misdetecting. I posted on
https://salsa.debian.org/reproducible-builds/diffoscope/issues/28 but
the only response was to retitle the issue to go back to detection. I
really don't think it will be possible to fix this issue something like
file magin auto-detection. An APK can be a working APK, JAR, DEX, and
ZIP all at the same time. Using file extensions could work.
Here's a commonly occuring example:
https://verification.f-droid.org/eu.faircode.email_914.apk.diffoscope.html
Here is a user who was blocked from using diffoscope due to this issue:
https://forum.f-droid.org/t/help-wanted-how-to-create-a-reproducible-build-fairemail/8860/11
More information about the Reproducible-builds
mailing list