[orbot/master] make-release-build: use strip-nondeterminism to get reproducible build

commit 58d53ea347d2c923d781aed450bbb922b3888210 Author: Hans-Christoph Steiner <hans@eds.org> Date: Thu Jan 14 20:59:17 2016 +0100 make-release-build: use strip-nondeterminism to get reproducible build strip-nondeterminism sets the timestamps in the zip based on the timestamp of the git commit. --- make-release-build | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/make-release-build b/make-release-build index 3c18ce0..2d5947a 100755 --- a/make-release-build +++ b/make-release-build @@ -71,6 +71,14 @@ faketime -f "$TIMESTAMP_5" ant release apk=$projectroot/bin/$projectname-v$describe.apk +# standardize timestamps in ZIP headers, requires strip-nondeterminism 0.014 +if which strip-nondeterminism > /dev/null; then + strip-nondeterminism -t zip -T $(git log -n1 --format=format:%at) $apk +fi + +# echo the checksum to build logs +sha256sum $apk + if which gpg > /dev/null; then if [ -z "`gpg --list-secret-keys`" ]; then echo "No GPG secret keys found, not signing APK"
participants (1)
-
n8fr8@torproject.org