Skip to content

Build and verify Android ARM64 debug candidates from pinned upstream dev - #1

Draft
Mafei wants to merge 4 commits into
build/upstream-dev-caf470f3from
candidate/android-ci-20261009
Draft

Mafei wants to merge 4 commits into
build/upstream-dev-caf470f3from
candidate/android-ci-20261009

Conversation

@Mafei

@Mafei Mafei commented Oct 9, 2026 •

Copy link
Copy Markdown
Owner

Build Android ARM64 from upstream dev caf470f (0.51.0), including the post-release launch-lock fix VoltiusApp#593. Align the build image with SDK 36/pnpm 11.5.2 and the Android cdylib with 16 KiB LOAD/RELRO page boundaries. Add candidate-branch Actions builds, APK signature/package/ABI/alignment checks, public build evidence, and the fork maintenance runbook.

This draft targets the frozen upstream review baseline, so it preserves the fork's newer main/dev branches and shows only the build adaptations and CI additions. Keep it as a draft; do not merge it into main or trigger releases.

Validation already completed in the isolated Linux cloud workspace: ARM64 debug APK build; 6 relevant frontend test files / 60 cases; 3 voltius-crypto tests; rustfmt; APK signature v2; package com.voltius.app, version 0.51.0/code 51000, minSdk 24/targetSdk 36; ARM64-only native library; ZIP and ELF LOAD/RELRO 16 KiB alignment. GitHub Actions run 38000507317 completed successfully for exact head a4514c1: build, 60 frontend cases, 3 crypto cases, formatting, signature/package/ABI/16 KiB checks and artifact upload all passed. Download the CI artifact (retained until 2026-10-23). CI APK SHA256: 6647fceb0bbad84d83f13261a33b71ca4c663f570608cc61cf61cc0a0acbb323. Maintenance branch mafei/android was advanced by an ordinary fast-forward push to this validated head; this PR remains an open draft against the frozen review baseline. Phone/emulator startup, biometrics, InputConnection and SSH/SFTP runtime behavior have not been tested.

The delivered APK came from local commit ed14a22. GitHub rejected its private author email with GH007; published equivalent e92ea05 has the identical tree 7e15e7b44216face7654047c61160aab785e905b and uses Mafei's GitHub noreply identity. Original local commits are retained. Delivered APK SHA256: f0a1517f21a88027fdd656880aa2fc00b61a05e8b9a00b7d69c16beabbc321f7.

Signing uses the existing upstream public development test key. Certificate SHA256: 975c51aa7858bd9af3a8e75e96d36778ac133e29aa09a7a2a71eb5c206fe590a. It is unsuitable for long-term production upgrades. Artifacts exclude private keys; no signing secrets, new persistent credentials or paid resources are required. AGPLv3 license and upstream history remain intact. The existing daily sync schedule is managed by the main thread.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant