Oddbean new post about | logout
 I was interested in the Sideband Android app until I discovered that they closed ths ticket asking to be added to the #Fdroid repos, claiming it's too much work and not enough benefit. 😭

F-Droid reviews all apps in their default store to ensure they are really #OpenSource (or #FOSS or #FLOSS if you will) and looks for trackers. They also require a description of what changed from one version to another.

These are benefits that you don't get by installing an APK directly from Microsoft GitHub.

It's completely valid to say that benefit isn't worth the effort. That's a value judgement. To some, even a trivial amount of effort is too much. To me, it's a significant value, and if it were my project, I'd create a .yml file and submit a MR to FDroidData.

Now, the effort to make their build reproducable is a different question. That may be easy or it may take a significant effort. Whether reproducable builds are worth the effort or not depends on how much the project cares about #security. How much work it is depends on whether and other projects using buildozer have already done this. If not, it'll also depend on whether the builddozer devs are interested in helping their users do this.

https://f-droid.org/docs/Submitting_to_F-Droid_Quick_Start_Guide/

https://github.com/markqvist/Sideband/issues/32 
 Wait, but they have their own repo, no?

I have it from there 
 That's weird. The ticket said it was in Izzy's repo, but didn't mention Sideband's custom repo. That must have come later.

So I guess the devs went through all the trouble of setting up and running a custom FDroid repo instead of just getting their app into the official repo?

That seems pretty strange 
 I see your point thoufh 
 Is it easier to use zap.store than fdroid from a dev standpoint? 
 I'm going to have to go ahead and say no on the basis that I don't even see any instructions for getting into zap .store

I expected the "Home" link on the downloads page to take me to a page that would have more information about the project, but it just goes back to the downloads page. 
 nostr:nprofile1qqs83nn04fezvsu89p8xg7axjwye2u67errat3dx2um725fs7qnrqlgpzamhxue69uhhyetvv9ujumn0wd68ytnzv9hxgtcsrhspy Can you chime in on this? Getting Sideband in the mix would be really helpful. 
 ZS documentation is planned 🙏 
 Cool, all this freedom tech stuff could work really well together. Nostr and Reticulum will be a thing before too long, I think. 
 In case you haven't already stumbled across nostrastic... 😁

https://github.com/QuixoteSystems/nostrastic 
 👀 
 It's significantly easier than F-Droid - but it requires a nostr keypair.

I will be working on the website and docs. Step by step. 
 It looks like buildozer does have built-in support for reproducible builds. Their documentation is very sparse, but I found a ticket that seems to indicate this.

https://github.com/bazel-contrib/rules_oci/issues/315

Again, reproducible builds are completely independent of being included in FDroid. 
 F-Droid breaks the Android security model- prefer IzzyOnDroid over the default repositories if you must use it, and check if the app you want is available on Accrescent first