From mboxrd@z Thu Jan 1 00:00:00 1970 From: Hartmut Goebel Subject: Building for Android and F-Droid Date: Thu, 1 Sep 2016 13:33:24 +0200 Message-ID: <57C81204.3090602@goebel-consult.de> Mime-Version: 1.0 Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms000006050503050109050102" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:60346) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bfQFS-0003gY-F0 for guix-devel@gnu.org; Thu, 01 Sep 2016 07:33:39 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bfQFM-0003XK-LK for guix-devel@gnu.org; Thu, 01 Sep 2016 07:33:33 -0400 Received: from mail-out.m-online.net ([212.18.0.9]:48271) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bfQFM-0003X8-B2 for guix-devel@gnu.org; Thu, 01 Sep 2016 07:33:28 -0400 Received: from frontend01.mail.m-online.net (unknown [192.168.8.182]) by mail-out.m-online.net (Postfix) with ESMTP id 3sQ0WB6vyJz3hryJ for ; Thu, 1 Sep 2016 13:33:26 +0200 (CEST) Received: from localhost (dynscan1.mnet-online.de [192.168.6.68]) by mail.m-online.net (Postfix) with ESMTP id 3sQ0WB5vbkzwdm2 for ; Thu, 1 Sep 2016 13:33:26 +0200 (CEST) Received: from mail.mnet-online.de ([192.168.8.182]) by localhost (dynscan1.mail.m-online.net [192.168.6.68]) (amavisd-new, port 10024) with ESMTP id i6LhQukYkKBg for ; Thu, 1 Sep 2016 13:33:25 +0200 (CEST) Received: from hermia.goebel-consult.de (ppp-188-174-152-68.dynamic.mnet-online.de [188.174.152.68]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by mail.mnet-online.de (Postfix) with ESMTPS for ; Thu, 1 Sep 2016 13:33:24 +0200 (CEST) Received: from [192.168.110.2] (lenashee.goebel-consult.de [192.168.110.2]) by hermia.goebel-consult.de (Postfix) with ESMTP id 4E0F0608FC for ; Thu, 1 Sep 2016 13:33:24 +0200 (CEST) List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: guix-devel This is a cryptographically signed message in MIME format. --------------ms000006050503050109050102 Content-Type: multipart/alternative; boundary="------------080209050909000609020007" This is a multi-part message in MIME format. --------------080209050909000609020007 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hello, I just want to share an idea I had: Recently I was involved in packaging a app for f-droid. The f-droid build system consists of 1) a virtual machine which get cleaned up after each build. and 2) meta-data descriptions of each package. The meta-data includes build instructions and is basically a ini-like file. For a simple examples see [1] and for a complex one see [2]. One of f-droid's goals is reproducible build. De-facto they fail on this, given the current set up since they update the virtual machine to some current state. In got the idea to make f-droid use guix as a base. Of course, this would be a lot of work, and I do not expect this to happen any time soon. We have quite a lot of work to do on the guix-side, like building the Android tools, implement maven and graddle builds, etc. As said: just wanted to share this idea, [1] https://gitlab.com/fdroid/fdroiddata/blob/master/metadata/com.colinmcdono= ugh.android.torch.txt [2] https://gitlab.com/fdroid/fdroiddata/blob/master/metadata/pep.android.k9.= txt --=20 Sch=C3=B6nen Gru=C3=9F Hartmut Goebel Dipl.-Informatiker (univ), CISSP, CSSLP, ISO 27001 Lead Implementer Information Security Management, Security Governance, Secure Software Development Goebel Consult, Landshut http://www.goebel-consult.de Blog: http://www.goebel-consult.de/blog/digitale-burgerrechte-in-der-ara-snowde= n Kolumne: http://www.cissp-gefluester.de/2011-08-horrorszenario-bring-your-own-devi= ce --------------080209050909000609020007 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hello,

I just want to share an idea I had:

Recently I was involved in packaging a app for f-droid. The f-droid build system consists of 1) a virtual machine which get cleaned up after each build. and 2) meta-data descriptions of each package. The meta-data includes build instructions and is basically a ini-like file. For a simple examples see [1] and for a complex one see [2].
One of f-droid's goals is reproducible build. De-facto they fail on this, given the current set up since they update the virtual machine to some current state.

In got the idea to make f-droid use guix as a base. Of course, this would be a lot of work, and I do not expect this to happen any time soon. We have quite a lot of work to do on the guix-side, like building the Android tools, implement maven and graddle builds, etc.<= br>
As said: just wanted to share this idea,

[1] https:/= /gitlab.com/fdroid/fdroiddata/blob/master/metadata/com.colinmcdonough.and= roid.torch.txt
[2] https://gitlab.com/fdroid= /fdroiddata/blob/master/metadata/pep.android.k9.txt

--
Sch=C3=B6nen Gru=C3=9F
Hartmut Goebel
Dipl.-Informatiker (univ), CISSP,= CSSLP, ISO 27001 Lead Implementer
Information Security Management, Security Governance, Secure Software Development

Goebel Consult, Landshut
ht= tp://www.goebel-consult.de

Blog: http://www.goebel-consult.de/blog/digitale-burgerrechte-in-der= -ara-snowden
Kolumne: http://www.cissp-gefluester.de/2011-08-horrorszenario-bring-y= our-own-device

--------------080209050909000609020007-- --------------ms000006050503050109050102 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC BYswggWHMIIDb6ADAgECAgMR5Y4wDQYJKoZIhvcNAQENBQAweTEQMA4GA1UEChMHUm9vdCBD QTEeMBwGA1UECxMVaHR0cDovL3d3dy5jYWNlcnQub3JnMSIwIAYDVQQDExlDQSBDZXJ0IFNp Z25pbmcgQXV0aG9yaXR5MSEwHwYJKoZIhvcNAQkBFhJzdXBwb3J0QGNhY2VydC5vcmcwHhcN MTYwMzI5MDk1NTAzWhcNMTYwOTI1MDk1NTAzWjBFMRgwFgYDVQQDEw9DQWNlcnQgV29UIFVz ZXIxKTAnBgkqhkiG9w0BCQEWGmguZ29lYmVsQGdvZWJlbC1jb25zdWx0LmRlMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykbRbJ57m2Wx9zb8EBr9nMk46l9VRzELF//iqO03 wrtAaROtXXC8o8jK8Ah32vnJjpvsToNK3vB+AuHvFZtDA4nanRZpZJvHZhMfH4hYL2+2IQMG xlHvWBc+3PiPotZE8pA2xvfM3raiY4DRqbKjWFa13gdShFDF9V3kQ0QaSsvV7oS44OFkgIlY k3ZK/27x6tkYQ3N9R4xRADl4BmGzupDXxFUM+pTEjg7xfqr2WS7fnA4OLoUcIgrgrAVSqEkR rcstQKOT07FzO1WaCpNGIJJt6ixts2ng4blUsrYfX+Zdu9cL0RkE1ZMn5GvNlZyQWMzuBl/C EXiNaDE/1az5ewIDAQABo4IBSjCCAUYwDAYDVR0TAQH/BAIwADBWBglghkgBhvhCAQ0ESRZH VG8gZ2V0IHlvdXIgb3duIGNlcnRpZmljYXRlIGZvciBGUkVFIGhlYWQgb3ZlciB0byBodHRw Oi8vd3d3LkNBY2VydC5vcmcwDgYDVR0PAQH/BAQDAgOoMEAGA1UdJQQ5MDcGCCsGAQUFBwME BggrBgEFBQcDAgYKKwYBBAGCNwoDBAYKKwYBBAGCNwoDAwYJYIZIAYb4QgQBMDIGCCsGAQUF BwEBBCYwJDAiBggrBgEFBQcwAYYWaHR0cDovL29jc3AuY2FjZXJ0Lm9yZzAxBgNVHR8EKjAo MCagJKAihiBodHRwOi8vY3JsLmNhY2VydC5vcmcvcmV2b2tlLmNybDAlBgNVHREEHjAcgRpo LmdvZWJlbEBnb2ViZWwtY29uc3VsdC5kZTANBgkqhkiG9w0BAQ0FAAOCAgEAG4saZUHqi9Gk kLRWCd/Ir7yA6mTHmhkXZuiHwdUbCtIX+zvXx3H+SJ5rKCn1lgPFTtNcmaikSkEv3NJaCdkO y+VR7A1PGkG2iVVfy2xcPEhyDf1OdIHUANLjWZ9sPm8ThGgf+WLIirC0JfHfxQzJCkmxIrAM m6eVI32utOYdibzAcM30/engjUDyXqfWI27oMQJfqFdIQmbpHNkaTiTGNDj+Rtm/C3bepcyu mPK1Me/psFi/Lrm5/0cYO9WYrtcvneDfJ1cA0lv2CO+pQrHYNrg1eN5MiVFgf/1ZZn7491ka 5Anjv2qzkaE/KlSkD0jbIJiVM7sjclbawArPB1nInwE3flnDylYxsEuyS64ehRV3oWgePgQ2 ntxmkRk/8ECm8HO0IZdu/WLl1WwDERRPRQZs5PZhhL0RVOA+o4TY/cvqcu16e8S6jaMFQVKe pdGfZFcLOtxYBPEjdmisBaBv7uzaQdTMTSbEFuA4Gtlbf913QSQmigtxRAlwUQlbtMib6+KP OWxFaoBmIzryxGLdOph8XacpFmgJ4LuBavl9Jic4oCvaelZ3cAMjUCSv3+HiRdhL6o0ujNb6 tCzsf6r3VSU7g5REHSkku1sVUy5Wdrl3QzvostEVIpLrD6HtMiNKcq9az4IJN14GjFowMHx3 Uo8j/TXzjRH0TlptQlLrnPoxggOxMIIDrQIBATCBgDB5MRAwDgYDVQQKEwdSb290IENBMR4w HAYDVQQLExVodHRwOi8vd3d3LmNhY2VydC5vcmcxIjAgBgNVBAMTGUNBIENlcnQgU2lnbmlu ZyBBdXRob3JpdHkxITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAY2FjZXJ0Lm9yZwIDEeWOMA0G CWCGSAFlAwQCAQUAoIICATAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJ BTEPFw0xNjA5MDExMTMzMjRaMC8GCSqGSIb3DQEJBDEiBCCEYIZHmaL9DULG73QB1Gi/lzBT iF+4WT+jGTkJixs7ujBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQME AQIwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIH MA0GCCqGSIb3DQMCAgEoMIGRBgkrBgEEAYI3EAQxgYMwgYAweTEQMA4GA1UEChMHUm9vdCBD QTEeMBwGA1UECxMVaHR0cDovL3d3dy5jYWNlcnQub3JnMSIwIAYDVQQDExlDQSBDZXJ0IFNp Z25pbmcgQXV0aG9yaXR5MSEwHwYJKoZIhvcNAQkBFhJzdXBwb3J0QGNhY2VydC5vcmcCAxHl jjCBkwYLKoZIhvcNAQkQAgsxgYOggYAweTEQMA4GA1UEChMHUm9vdCBDQTEeMBwGA1UECxMV aHR0cDovL3d3dy5jYWNlcnQub3JnMSIwIAYDVQQDExlDQSBDZXJ0IFNpZ25pbmcgQXV0aG9y aXR5MSEwHwYJKoZIhvcNAQkBFhJzdXBwb3J0QGNhY2VydC5vcmcCAxHljjANBgkqhkiG9w0B AQEFAASCAQCERQBwMQIjWOkuIqDFRyVfBa5AOmwMTaqT5BKiJlHicy+d5SaNVkwkIphlBD8m Gb5ojfXzSKgSkDeuK3g2WVaI64YTI5VVsVAGGzvnA4BSLtlDe6jDgrP5Gi77TDkmkvfbxtjr DxZQU1hASUtVHt0zVJvZtS0shP13fVAn7zSpIAy/mSAIUgQNpIPYTzYbrZNoG+mcCEibfyp2 B3vwP7eYSw2G7qC/JqP9kJsR7IvPJ7UEUi7gIRj24X7RZmWWotqyDL+iN4pRRRTkgIwLwSGE eUFHy5J3aULEmkVwwh50i2+viDfWiAx4xMpK+bT/xpj6RH0RLc2AQZhM48yHcatwAAAAAAAA --------------ms000006050503050109050102--