Re:F-Droid: how it weakens Android's security model
by southerntofu on Friday February 25, 2022 @07:03AM
(#30466364)
That's a very good point! Although, would it not be trivial to setup a 3rd-party F-Droid-compatible repo that just distributes CI/CD artifacts (eg. Github releases) by subscribing to a RSS feed? I personally wouldn't do it for the reasons you mentioned, but it could certainly be useful for some people.
[ Parent
| on HN ]
Re:F-Droid: how it weakens Android's security model
by kuschku on Friday February 25, 2022 @07:09AM
(#30466403)
It's easily possible, and many people already do it. e.g. Quasseldroid is available via https://repo.kuschku.de/fdroid/repo/?fingerprint=A0CBC2C29E3... a custom repo generated from the same CI builds that also get pushed to Google Play.
Re:F-Droid: how it weakens Android's security model
by southerntofu on Friday February 25, 2022 @07:38AM
(#30466629)
Ah yes, but this requires adding one repo per app. I meant having a "single" (though selfhostable) Fdroid gateway to CI artifacts so i could just add "cidroid.org" repository to my Fdroid then choose for each application if i want it from F-droid repo or from fresher CIDroid.
Re:F-Droid: how it weakens Android's security model
by kuschku on Friday February 25, 2022 @09:43AM
(#30467772)
It's pretty much the same as PPAs on Ubuntu.
For what you're asking for, IzzyDroid's repo may be the closest to what you're asking for.
Re:F-Droid: how it weakens Android's security model
by southerntofu on Saturday February 26, 2022 @06:19AM
(#30476722)
Thanks i was not aware of this! It's almost exactly what i was looking for, although admittedly i wanted something more automated (along the lines of here's an RSS feed of releases, use this xpath query to extract the download URLs for various architectures).