me-web? 0.15.1: the F-Droid repository is signed with the app's own key
Build / Desktop, server and tools (push) Successful in 1m6s
Release / Every platform, the server, the release (push) Failing after 8m5s

- The Arasaka F-Droid repository, packages.arasaka.software/fdroid/repo, is signed with the same key as the app, so
  the fingerprint F-Droid or Obtainium checks is the one already on the download page for the APK.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01T9uhaCTSycTh1r8At679Pz
This commit is contained in:
thepraandClaude Opus 5.5 committed 2026-10-31 09:24:50 +01:00
1 parent b38f50ee5e
commit 94cc74bb95
8 files changed
+26 -27

No files matched your search

+2 -3
View File
@@ -55,9 +55,8 @@ is `packaging/arasaka-repository.sh`; it never calls the package manager,
leaves files you edited alone, and removes the repository only when no Arasaka package is left (purge or erase).
On Android, the same signed APK is also in an F-Droid repository, so F-Droid, a store like it, or Obtainium can bring
the updates: add `https://packages.arasaka.software/fdroid/repo`, whose key has the SHA-256
`42:C4:76:59:B6:99:E0:B1:A8:BC:F6:F9:CE:2C:49:72:97:22:65:B5:92:BE:32:B5:72:5B:8F:87:C6:BD:03:74`. The download page
links to both. The app is not in F-Droid's own catalogue, which builds every app from source on F-Droid's servers.
the updates: add `https://packages.arasaka.software/fdroid/repo`, which is signed with the same key as the APK. The
download page links to both. The app is not in F-Droid's own catalogue, which builds every app from source on F-Droid's servers.
## Privacy