diff options
| author | Tom Cooks <tommasogagliardi+github@gmail.com> | 2026-10-11 06:00:55 -0400 |
|---|---|---|
| committer | Tom Cooks <tommasogagliardi+github@gmail.com> | 2026-10-11 06:00:55 -0400 |
| commit | 4c402e05224549d1ec4419db3b409172641e14c1 (patch) | |
| tree | 033d4b0f44fad64af17bb2c942263953022f1c05 /tools/build-release.sh | |
| parent | e23954aa42fe086f2c6ad3bcd82bf2b812a7605f (diff) | |
| download | reccoon-4c402e05224549d1ec4419db3b409172641e14c1.tar.gz | |
Sign v2/v3-only with preserved alignment so F-Droid reproducibility passes
Diffstat (limited to 'tools/build-release.sh')
| -rwxr-xr-x | tools/build-release.sh | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/tools/build-release.sh b/tools/build-release.sh index 588caa2..02e9dd2 100755 --- a/tools/build-release.sh +++ b/tools/build-release.sh @@ -38,8 +38,12 @@ OUT="releases/RECCoon-${VERSION}.apk" mkdir -p releases dist echo "==> Signing with $APKSIGNER" +# v2/v3 only: no v1 (JAR) signature files, so the signed APK's content is +# byte-identical to the unsigned build and F-Droid's reproducible check passes. "$APKSIGNER" sign --ks "$KS" --ks-key-alias "$ALIAS" \ --ks-pass env:RECCOON_STORE_PASS --key-pass env:RECCOON_KEY_PASS \ + --v1-signing-enabled false --v2-signing-enabled true --v3-signing-enabled true \ + --alignment-preserved \ --out "$OUT" "$UNSIGNED" cp "$OUT" dist/ |