TheAnachronism/tt-rss-viewer
1
0
Fork 0
Code Issues Pull requests Projects Releases 5 Packages Wiki Activity Actions

Alpha APK signing reality #53

New issue
Closed
opened 2026-08-03 22:43:03 +00:00 by TheAnachronism · 1 comment
TheAnachronism commented 2026-08-03 22:43:03 +00:00
Owner
Copy link

Part of #41

Question

How are APKs from .forgejo/workflows/alpha-release.yml actually signed today (Flutter/Android defaults, keystore, v1/v2), and what does that imply for install trust and update-in-place when a friend sideloads? Primary sources: this workflow, android/ Gradle config, Flutter/Android signing docs.

Part of #41 ## Question How are APKs from .forgejo/workflows/alpha-release.yml actually signed today (Flutter/Android defaults, keystore, v1/v2), and what does that imply for install trust and update-in-place when a friend sideloads? Primary sources: this workflow, android/ Gradle config, Flutter/Android signing docs.
TheAnachronism commented 2026-08-04 00:05:04 +00:00
Author
Owner
Copy link

Resolved on branch research/alpha-apk-signing-reality in docs/research/alpha-apk-signing-reality.md (commit e27472d). Alpha release-mode APKs are signed with the runner user's debug keystore; current output is v2-only, and the workflow does not guarantee key persistence, so a clean/different runner can break Android update-in-place and require uninstall/reinstall.

Resolved on branch `research/alpha-apk-signing-reality` in [`docs/research/alpha-apk-signing-reality.md`](https://git.anachronis.dev/TheAnachronism/tt-rss-viewer/src/branch/research/alpha-apk-signing-reality/docs/research/alpha-apk-signing-reality.md) (commit `e27472d`). Alpha release-mode APKs are signed with the runner user's debug keystore; current output is v2-only, and the workflow does not guarantee key persistence, so a clean/different runner can break Android update-in-place and require uninstall/reinstall.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
master
beta/0.0.4
beta/0.0.3
beta/0.0.2
beta/0.0.1
alpha/0.0.2
Labels
Clear labels   
needs-info
Waiting on reporter for more information

  
needs-triage
Maintainer needs to evaluate this issue

  
ready-for-agent
Fully specified, ready for an AFK agent

  
ready-for-human
Requires human implementation

  
wayfinder:grilling
HITL grilling/decision ticket

  
wayfinder:map
Wayfinder effort map

  
wayfinder:prototype
HITL prototype ticket

  
wayfinder:research
AFK research ticket

  
wayfinder:task
Unblocking manual task ticket

  
wontfix
Will not be actioned

No labels
needs-info
needs-triage
ready-for-agent
ready-for-human
wayfinder:grilling
wayfinder:map
wayfinder:prototype
wayfinder:research
wayfinder:task
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
TheAnachronism
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
TheAnachronism/tt-rss-viewer#53
No description provided.