[tbb-bugs] #27438 [Applications/Tor Browser]: Android Gradle Build Downloads

[Tor Bug Tracker & Wiki]

#27438: Android Gradle Build Downloads
-------------------------------------------------+-------------------------
 Reporter:  sisbell                              |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:  new
 Priority:  Medium                               |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-rbm, tbb-mobile,                 |  Actual Points:
  TorBrowserTeam201808                           |
Parent ID:  #26693                               |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by sisbell):

 We can either have RBM manage each download from their original source  OR
 we can tar the dependencies and have a single download.

 I have  created a program (in Rust) that downloads the Android
 dependencies. It  verifies each downloaded artifact based on GPG
 signatures or Sha2 hash.

 The program handles individual downloads (1, 2) or tarball options (3):

  1. Generates RBM config files containing each URL and Sha256 OR GPG
 key_id
  1. Generates RBM build files that copy each downloaded artifact into a
 maven repo structure that the android build can use
  1. Archives the artifacts as a tarball and add that to the config/build
 files. (We would need a place to upload the tarball)

 Remaining issues

  1. import of gpg keys into keyring;
  1. command line interface
  1. Push code to git repo
  1. Upload program to crates.io

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27438#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online