Open xrviv opened 3 months ago
Yes, please do. If reproducibility is already important to achieve in the other apps, like Mail, VPN, etc, let alone in a wallet app, where it's 10x more crucial! Open-source (specially in this type of software) without independently verifiable reproducibility is just not trustworthy and almost as bad as closed source, if I can be blunt.
I'm aware this is still in early access; I'm just commenting to ask to please make it a priority from the get go, instead of prioritizing features and whatnot. And it's important to publish on F-Droid too (not so much for the user base itself, but mainly because it can count as a proof of reproducibility).
Also, @xrviv I believe both "issue" links in https://walletscrutiny.com/android/me.proton.wallet.android/ are pointing to a different wallet app instead of here?
Greetings team @ProtonWallet!
Hi! I'm Danny and I work with walletscrutiny.com. We verify the reproducibility of Bitcoin apps and devices. We have scrutinized over 6000+ bitcoin-related apps and devices.
I am trying to build from the command line using this Dockerfile, but always wound up with some errors:
From there I run
$ docker build -t proton-build .
Then run:
docker run --rm -it proton-build
Inside the workspace directory I move to
./rust
to find the cargo.toml file. I then try to run:cargo build --target aarch64-linux-android --release --verbose
which results in:
From my understanding, this seems to be an internal registry that is causing the build to fail.
Request to provide Dockerfile to build the app
We would appreciate it!