[tor-bugs] #31564 [Applications/Tor Browser]: Android bundles based on ESR 68 are not built reproducibly anymore

[Tor Bug Tracker & Wiki]

#31564: Android bundles based on ESR 68 are not built reproducibly anymore
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:
                                                 |  needs_information
 Priority:  Very High                            |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-9.0-must-alpha,                  |  Actual Points:
  TorBrowserTeam201909R, GeorgKoppen201909       |
Parent ID:  #30324                               |         Points:  5
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by sisbell):

 I wouldn't exactly call it a random file, as its maintained by the apktool
 project but if we are updating to buster, then we can remove this step.

 I did move forward with the buster approach. The issue I've run into is
 that openjdk-8 is not supported out of the box for buster. I'll need to
 download openjdk-8 and unpack it. I'm thinking of doing this within the
 android-toolchain project so we only have to download once.

 Replying to [comment:29 gk]:
 > Hm. So, I am not overly happy using some random .jar file from the
 Internet. Do you know whether version 2.3.4 would work here as well? We
 could then think to upgrade to Debian buster which comes with it (and
 which is a thing we want to do anyway, see: #31130). If it's just a matter
 of replacing "stretch" with "buster" and then using apktool 2.3.4 (and
 nothing else breaks) then that would be the better way to go I think.
 Could you test whether that is a workable solution?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31564#comment:32>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online