[guardian-dev] towards reproducible Orbot

Nathan of Guardian nathan at guardianproject.info
Wed Jan 27 09:01:46 EST 2016



On Wed, Jan 27, 2016, at 08:12 AM, Hans-Christoph Steiner wrote:
> 
> Nathan of Guardian:
> > 
> > 
> > On Tue, Jan 26, 2016, at 03:07 AM, Hans-Christoph Steiner wrote:
> >> With the latest update to the ./make-release-build script, Orbot is
> >> getting quite close to being reproducible.  The last piece that needs to
> >> be added to that script is the builds of the native bit for the various
> >> architectures.  Could you add that stuff to ./make-release-build?
> >> Careful when running it, it will remove all untracked changes from the
> >> git repo it is run in to ensure it is building only from files in git.
> >>
> >> Then anyone will be able to run this to verify the build:
> >>
> >> git checkout 15.1.0-RC-4
> >> ./make-release-build
> >> ./compare-to-official-release ~/Downloads/Orbot-v15.1.0-RC-4.apk \
> >>     bin/Orbot-v15.1.0-RC-4.apk
> > 
> > This is now in, pushed to my repo on Github (and Tor Gitweb):
> > https://github.com/n8fr8/orbot/commit/eaa2dde6119a5404fa25f02610a1517ba6b198ea
> > 
> > We'll have to wait until the next official release to test this of
> > course! I will run a release, using the new make-release-build, at some
> > point tomorrow.
> > 
> > +n
> 
> I just sent you another pull requiest with some minor fixes.  Which
> version of the NDK are you using for the release build?  Those will
> likely have to match exactly.  You can find out by doing:
> 
> cat /path/to/android-ndk/RELE.org

I think it is 4.8, or at least that is what we are using for ndk-build
in the jni/Application.mk

-- 
  Nathan of Guardian
  nathan at guardianproject.info


More information about the guardian-dev mailing list