Signal Desktop Builder For Mobian

signal-desktop_7.35.1_arm64.deb

This project reproducibly builds Signal Desktop for Debian Bookworm on ARM64, currently targeting tag 7.35.x

Now with an optional update client: auto-update-cron.sh

This is the latest release: builds/release/signal-desktop_7.35.1_arm64.deb

Sha512Sum: builds/release/release.sha512sum

SBOM: builds/release/manifest.spdx.json

Grype Scan: builds/release/manifest.grype.json

0mniteck’s Current GPG Key ID: 287EE837E6ED2DD3

^{*Vigilant Mode is on for this repo so all remote pushes/tags should be signed with a verified key.}

Build Instructions/Usage:

Build:

buildscript.sh:
  -i {Increment: .version}
  -d {Date: source_date_epoch}
  -m {Mount /dev/mmcblk1: yes/no}
  -p {Push-branch: debug}
  -r {Release-tag: tagname}
  -t {run-Tests: yes/no}

A. To build later releases run:

sudo su && \
git clone git@github.com:0mniteck/Signal-Desktop-Mobian.git && \
cd Signal-Desktop-Mobian && \
./buildscript.sh -i .01 -p master -r 7.35.1

B. To build the current release for reproducibility:

sudo su && \
git clone git@github.com:0mniteck/Signal-Desktop-Mobian.git -b 7.35.x && \
cd Signal-Desktop-Mobian && \
./buildscript.sh

Usage:

Download the .deb to your device, verify the sha512sum, then install:

[Current Sha512sum] (https://github.com/0mniteck/Signal-Desktop-Mobian/blob/d0af5626a5bb7d381ea987d1d132831523560318/builds/release/release.sha512sum#L2)

sha512sum signal-desktop_7.35.1_arm64.deb

sudo apt install ./signal-desktop_7.35.1_arm64.deb

Optional Updater:

Install updater auto-update-cron.sh by running:

sudo su && \
curl -sSL https://raw.githubusercontent.com/0mniteck/Signal-Desktop-Mobian/master/auto-update-cron.sh | bash

Current Status:‎‎‏‏‎‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ _{^{signalapp/Signal-Desktop}}

• Built with 0mniteck/debian:2024-11-11
• Signal Desktop builds
• Auto-Update script
• Reproducible builds
• Generate/Scan SBOM at buildtime

Release Cycle:

Currently building upstream releases twice to improve reproducibility/reliability:

build/release to branch 7.xx.x –> test on hardware, document –> build/release to master branch

See also:

• https://snapshot.debian.org
• https://hub.docker.com/_/debian/tags
• https://hub.docker.com/r/0mniteck/tags
• https://github.com/signalapp/Signal-Desktop/blob/main/reproducible-builds/README.md
• https://github.com/signalapp/Signal-Desktop/blob/development/CONTRIBUTING.md