I'm @eighthave on salsa.

We're still stuck on this.  We regularly have to manually do APK
comparisons because we cannot force diffoscope to treat files as APKs,
and it is misdetecting.  I posted on
https://salsa.debian.org/reproducible-builds/diffoscope/issues/28 but
the only response was to retitle the issue to go back to detection.  I
really don't think it will be possible to fix this issue something like
file magin auto-detection.  An APK can be a working APK, JAR, DEX, and
ZIP all at the same time.  Using file extensions could work.

Here's a commonly occuring example:
https://verification.f-droid.org/eu.faircode.email_914.apk.diffoscope.html

Here is a user who was blocked from using diffoscope due to this issue:
https://forum.f-droid.org/t/help-wanted-how-to-create-a-reproducible-build-fairemail/8860/11

_______________________________________________
Reproducible-builds mailing list
Reproducible-builds@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/reproducible-builds

Reply via email to