F-Droid

8085 readers

35 users here now

F-Droid is an installable catalogue of FOSS (Free and Open Source Software) applications for the Android platform. The client makes it easy to browse, install, and keep track of updates on your device.

Website | GitLab | Mastodon

Matrix space | forum | IRC

founded 3 years ago

MODERATORS

[email protected]

Statuses updated and a keyboard | F-Droid | TWIF (f-droid.org)

submitted 1 month ago* (last edited 1 month ago) by [email protected] to c/[email protected]

12 comments fedilink hide all child comments

F-Droid Build Status was updated to 5.6.4 and no one will get this update. Why? Well, the app is now built reproducibly so if you have it installed you need to uninstall it and then reinstall it. (Yes, we wish this switch to be easier to perform, but the UI is not there yet)

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 4 points 1 month ago (1 children)

[…], from that point the app will be built by f-droid with their own digital signature.

This part of your comment is not quite true. One of the advantages of reproducible builds is that the app can be signed by the developer but fdroid can still verify that it has been built from the correct source code. You can check out the documentation here: https://f-droid.org/docs/Reproducible_Builds/

[–] [email protected] 2 points 1 month ago (2 children)

you're right, thanks for letting me know

This means that F-Droid can verify that an app is 100% free software while still using the original developer’s APK signatures.

then I don't understand it either why it can't be updated directly

[–] [email protected] 2 points 1 month ago

If an app doesn't support reproducible builds, the version you can download from F-Droid was built and signed by F-Droid, not by the dev

[–] [email protected] 2 points 1 month ago

Because there will be a signature mismatch. Apps built by F-Droid will use the F-Droid signature, reproducible apps will use the dev signature.