I am making a copy here of a correspondence I am trying to establish with Tangem.

Context: I am trying to verify the reproducibility of the Tangem bitcoin Android app by first attempting to build it.

tldr: it does not build, and fails at updating the submodules. I wait for their response on reddit. I am mostly ignored on twitter.

--BEGIN--

Hello, Danny here from walletscrutiny.com.

I tried to post an `issue` in the appropriate GitHub repository but sadly, there was no `issue` tab there. On Twitter I am mostly ignored.

So I start with bare bones docker image, with the latter parts commented out since I am having problems in those areas:

# Use an official image as a base

FROM ubuntu:22.04

# Install dependencies

RUN apt-get update && apt-get install -y \

openjdk-11-jdk \

curl \

wget \

git \

unzip \

lib32stdc++6 \

lib32z1 \

gradle \

&& apt-get clean

# Set environment variables

ENV ANDROID_SDK_ROOT=/opt/android-sdk

ENV PATH=$ANDROID_SDK_ROOT/cmdline-tools/latest/bin:$ANDROID_SDK_ROOT/platform-tools:$PATH

ENV GRADLE_USER_HOME=/opt/gradle

# Download and install Android SDK command line tools

RUN mkdir -p $ANDROID_SDK_ROOT/cmdline-tools && \

wget https://dl.google.com/android/repository/commandlinetools-linux-9477386_latest.zip -O sdk-tools.zip && \

unzip -d $ANDROID_SDK_ROOT/cmdline-tools && \

mv $ANDROID_SDK_ROOT/cmdline-tools/cmdline-tools $ANDROID_SDK_ROOT/cmdline-tools/latest && \

rm

# Set up Android SDK

RUN yes | sdkmanager --licenses && \

sdkmanager "platform-tools" "platforms;android-31" "build-tools;31.0.0"

# Clone the Tangem Android app repository

WORKDIR /workspace

# RUN git clone .

# Update submodules to use HTTPS instead of SSH

# RUN sed -i 's/git@github.com:/https:\/\/github.com\//g' .gitmodules

# Initialize and update submodules

# RUN git submodule init && git submodule update

# Build the app

# RUN ./gradlew clean assembleDebug

# Set entrypoint for manual build

CMD ["/bin/bash"]

sdk-tools.zipsdk-tools.ziphttps://github.com/tangem/tangem-app-android.git

I build it, run it and then clone the repository:

docker run -it tangem-build:tag

Then I clone the repository:

root@cf9fc947579d:/workspace# git clone

Cloning into 'tangem-app-android'...

remote: Enumerating objects: 188837, done.

remote: Counting objects: 100% (13415/13415), done.

remote: Compressing objects: 100% (4324/4324), done.

remote: Total 188837 (delta 5181), reused 12167 (delta 4442), pack-reused 175422 (from 1)

Receiving objects: 100% (188837/188837), 75.85 MiB | 25.47 MiB/s, done.

Resolving deltas: 100% (102794/102794), done.https://github.com/tangem/tangem-app-android

Then update the submodules:

root@cf9fc947579d:/workspace/tangem-app-android# git submodule update --init --recursive

Submodule 'app/src/main/assets/tangem-app-config' (git@github.com:tangem/tangem-app-config.git) registered for path 'app/src/main/assets/tangem-app-config'

Submodule 'tangem-android-tools' (git@github.com:tangem/tangem-android-tools.git) registered for path 'tangem-android-tools'

Cloning into '/workspace/tangem-app-android/app/src/main/assets/tangem-app-config'...

The authenticity of host 'github.com (140.82.121.3)' can't be established.

ED25519 key fingerprint is SHA256:+DiY3wvvV6TuJJhbpZisF/zLDA0zPMSvHdkr4UvCOqU.

This key is not known by any other names

Are you sure you want to continue connecting (yes/no/[fingerprint])? yes

Warning: Permanently added 'github.com' (ED25519) to the list of known hosts.

git@github.com: Permission denied (publickey).

fatal: Could not read from remote repository.

Please make sure you have the correct access rights

and the repository exists.

fatal: clone of 'git@github.com:tangem/tangem-app-config.git' into submodule path '/workspace/tangem-app-android/app/src/main/assets/tangem-app-config' failed

Failed to clone 'app/src/main/assets/tangem-app-config'. Retry scheduled

Cloning into '/workspace/tangem-app-android/tangem-android-tools'...

git@github.com: Permission denied (publickey).

fatal: Could not read from remote repository.

Please make sure you have the correct access rights

and the repository exists.

fatal: clone of 'git@github.com:tangem/tangem-android-tools.git' into submodule path '/workspace/tangem-app-android/tangem-android-tools' failed

Failed to clone 'tangem-android-tools'. Retry scheduled

Cloning into '/workspace/tangem-app-android/app/src/main/assets/tangem-app-config'...

git@github.com: Permission denied (publickey).

fatal: Could not read from remote repository.

Please make sure you have the correct access rights

and the repository exists.

fatal: clone of 'git@github.com:tangem/tangem-app-config.git' into submodule path '/workspace/tangem-app-android/app/src/main/assets/tangem-app-config' failed

Failed to clone 'app/src/main/assets/tangem-app-config' a second time, aborting

Can you help me with this? Thanks!

-- END --

Reply to this note

Please Login to reply.

Discussion

Update 16:52. They responded, but want it private in email.

Comment: I have qualms about this, as "Open Source" matters should be discussed in public for others to verify, corroborate and witness, and not through email.