F-Droid reproducible build failed

[linsui]

tech.lolli.toolbox_136501.html Any idea? The ndk build-id needs to be removed with --build-id=none.

[linsui]

Other diff is caused by jdk version. We use jdk 21 but you use jdk 17. Not sure why it worked for 1340. Can you bump the jdk version to 21?

[GT-610]

Thanks for the report.

We investigated the reproducibility issue on our side, and it does appear to be related to the newly introduced jni native library build path.

One of the project's dependencies, path_provider_android, has been updated from 2.2.23 to 2.3.0; this new implementation is now based on JNI, and the package definition directly declares dependencies on jni and jni_flutter. This version of path_provider_android is introduced in v1365.

We made two changes on a dedicated branch for you to retest:

1. For the jni native library, we explicitly add --build-id=none on the Android release native link step, so the NDK-generated build-id should no longer affect reproducibility.
2. We also updated the Android Gradle toolchain to use JDK 21 consistently, to match your build environment.

We then verified the release build locally with:

./gradlew :jni:externalNativeBuildCleanRelease :app:assembleRelease

The release build completed successfully, and the jni release native build now contains the added --build-id=none linker flag.

Changes have not been merged into main yet, and it is in this branch. Could you please rerun the reproducible build test against this branch and let us know whether the remaining diff is resolved?

If needed, we can also help narrow down any remaining differences from your next diff report.

[licaon-kter]

You have an APK for that branch to test against?

[Integral-Tech]

@GT-610 The JDK version used in GitHub Action is still 17:

 - uses: actions/setup-java@v4
   with:
     distribution: "zulu"
     java-version: "17"

[lollipopkit]

• apk: https://cdn.lpkt.cn/serverbox/pkg/ServerBox_1365_arm64.apk
• branch: https://github.com/lollipopkit/flutter_server_box/tree/lk/fix-fdroid-build

Can you help with checking the reproducibility?

[linsui]

We need to use the same patch on both side. Can you put the patch steps in a script so that we can use it directly?