Ubuntu Touch Q&A 173 call for questions
-
Ubuntu Touch Q&A 173 will be live this Saturday 6th Sept, if you can please join us at the usual time of 19:00 UTC.
Before then though, if you have any questions on or about UBports and Ubuntu Touch please post them below and we will do our best to answer them in the Q&A.Remember that questions on porting to device **** or its status, and questions on bugs, will not be answered.
-
U UBportsNews pinned this topic
-
@UBportsNews is the updated Morph browser going to be included in the 24.04 update? I know you guys are aware of the problems, but Morph is getting worse every day. Websites that I could view last week, are not, or only partially loading today.
Thank you for all the great work!
-
U UBportsNews referenced this topic
-
U UBportsNews referenced this topic
-
Are there any plans to migrate from PulseAudio to PipeWire with the Wireplumber plugin? What benefits or challenges do you anticipate with such a transition?
-
How do we verify the apps on the open-store match the source code listed?
For example, a developer makes a chess app, says it is a chess app, links source code to a chess app, but then uploads a prebuilt click which could actually be a link 'rickrolling' people.
The only way to verify app integrity currently is to rebuild the app personally and make sure it matches.
I ask, coming from an F-Droid background. In the F-Droid store (FOSS android apps), you submit links to the build source, and a build recipe, then F-Droid has an automated server that builds the app for release, making sure the uploaded app is in fact built from the source.
Is there any system in place to verify the integrity of the open-store apps? Or do they get scanned somehow?
Do we plan in the future to implement a build system to ensure that the apps are safe?Thanks for all you do!
-
After some discussion on the telegram chat, an idea was to disable manual upload of appps, and only allow gitlab CI to update apps, ensuring source code is what is built.
We could still have a few select users with manual upload permission, for 'reviewed' apps.
Just a thought.
-
And it was suggested that I move this conversation to the open-store group.
Sorry for posting it in the wrong place. So no worries if you don't address this during the stream.