fix: implement deterministic build hardening for F-Droid RB

potatameister · potatameister · commit 08a2b2d88fac · 2026-02-14T17:25:33.000+07:00
diff --git a/android/app/build.gradle b/android/app/build.gradle
@@ -31,13 +31,18 @@ android {
             v1SigningEnabled true
             v2SigningEnabled true
         }
+        release {
+            v1SigningEnabled true
+            v2SigningEnabled true
+        }
     }
 
     buildTypes {
         release {
             minifyEnabled false
             shrinkResources false
             proguardFiles getDefaultProguardFile('proguard-android.txt'), 'proguard-rules.pro'
+            signingConfig signingConfigs.release
         }
     }
 
diff --git a/android/gradle.properties b/android/gradle.properties
@@ -20,3 +20,5 @@ org.gradle.jvmargs=-Xmx1536m
 # Android operating system, and which are packaged with your app's APK
 # https://developer.android.com/topic/libraries/support-library/androidx-rn
 android.useAndroidX=true
+android.enableResourceOptimizations=false
+android.bundle.enableUncompressedNativeLibs=false
diff --git a/com.paperknife.app.yml b/com.paperknife.app.yml
@@ -30,7 +30,7 @@ Builds:
       - rm -rf public/tesseract/
       - echo "export default function PdfToTextTool() { return null; }" > src/components/tools/PdfToTextTool.tsx
       - export VITE_DISABLE_OCR=true
-      - npm install --build-from-source
+      - npm ci
       - npm run build
       - npx cap sync android
     scanignore:
diff --git a/fdroid.yml b/fdroid.yml
@@ -33,7 +33,7 @@ Builds:
       - rm -rf public/tesseract/
       - echo "export default function PdfToTextTool() { return null; }" > src/components/tools/PdfToTextTool.tsx
       - export VITE_DISABLE_OCR=true
-      - npm install --build-from-source
+      - npm ci
       - npm run build
       - npx cap sync android
     scanignore:

Original file line number	Diff line number	Diff line change
`@@ -31,13 +31,18 @@ android {`
`31`	`31`	`v1SigningEnabled true`
`32`	`32`	`v2SigningEnabled true`
`33`	`33`	`}`
	`34`	`+ release {`
	`35`	`+ v1SigningEnabled true`
	`36`	`+ v2SigningEnabled true`
	`37`	`+ }`
`34`	`38`	`}`
`35`	`39`
`36`	`40`	`buildTypes {`
`37`	`41`	`release {`
`38`	`42`	`minifyEnabled false`
`39`	`43`	`shrinkResources false`
`40`	`44`	`proguardFiles getDefaultProguardFile('proguard-android.txt'), 'proguard-rules.pro'`
	`45`	`+ signingConfig signingConfigs.release`
`41`	`46`	`}`
`42`	`47`	`}`
`43`	`48`