F-Droid/Website Posts — Chinese (Simplified) @ Hosted Weblate: Maven Central

Zen

	English	Chinese (Simplified)	Actions
	We have considered offering a selection of base images. This is a possible solution, but it is not easy as just using any available Docker image. Only base images that are guaranteed to be free software are appropriate. Just pointing to any Docker image would open up the possibility of proprietary build dependencies, since it is not possible to automatically check whether any Docker image is 100% free software. Using a selection of pre-approved base boxes could solve that. Keep in mind, this is more complex than with GNU/Linux distros since Android apps are cross-compiled. GNU/Linux distros build their packages on their own OS. During builds, Debian does not even allow network access since all dependencies need to come from Debian packages. That level of verification is a goal of F-Droid, and [Maven](https://maven.apache.org/guides/mini/guide-reproducible-builds.html)'s work towards a reproducible [Maven Central](https://reproducible-builds.org/docs/jvm/) ecosystem helps a lot.	我们考虑过提供一系列基础镜像。这是一个可能的解决方案，但它并不像使用任何可用的 Docker 映像那样容易。只有保证是自由软件的基础镜像才是合适的。仅仅指向任意 Docker 镜像将会产生带来专有构建依赖项的可能性，因为无法自动检查任何 Docker 镜像是否是 100% 的自由软件。使用一系列预先批准的基础镜像可以解决这个问题。请记住，这比使用 GNU/Linux 发行版更复杂，因为 Android 应用是交叉编译的。 GNU/Linux 发行版在他们自己的操作系统上构建他们的包。在构建期间，Debian 甚至不允许网络访问，因为所有依赖项都需要来自 Debian 软件包。这种级别的验证是 F-Droid 的目标，而 [Maven](https://maven.apache.org/guides/mini/guide-reproducible-builds.html) 致力于实现可重复的 [Maven Central](https://reproducible-builds.org/docs/jvm/) 生态系统有很大帮助。
	Since [CalyxOS](https://calyxos.org/) builds in F-Droid by default, [Calyx Institute](https://calyxinstitute.org/) also want to ensure that F-Droid is running smoothly, and that app developers are happy. I would like to thank Calyx Institute for sponsoring 42 hours a month of my time to work on making our build infrastructure run smoothly. Additionally, I will be working on improving the automation of the signing process. Our signing process is currently 100% offline. While this is nice for security, it does slow down the release process. With modern hardware security modules and server setups, it is possible to have good security without being 100% offline. Having signing automation then opens up possibilities for parallelizing the whole process, including running multiple app builds, and also, running the main steps of building, index generating, and signing all in parallel. This work will be incrementally deployed as each bit is finished. So be patient, and you will notice releases happening faster and faster!	由于 [CalyxOS](https://calyxos.org/) 默认内置 F-Droid，[Calyx Institute](https://calyxinstitute.org/) 也希望确保 F-Droid 能够顺利运行以及使应用开发者愉快。我要感谢 Calyx Institute 赞助我每个月 42 小时的时间来使我们的构建基础设施顺利运行。此外，我将致力于改进签名过程的自动化。我们的签名过程目前是 100% 离线的。虽然这对安全性很好，但它确实减慢了发布过程。借助现代硬件安全模块和服务器设置，可以在不 100% 离线的情况下获得良好的安全性。然后，签名自动化为并行化整个过程提供了可能性，包括运行多个应用构建，以及并行运行构建、索引生成和签名的主要步骤。随着每一项完成，这项工作将逐步部署。所以请耐心等待，你会发现发布的速度越来越快！
	Maven Central is not as free as it looks	Maven Central 并没有它看起来的那么自由
	F-Droid is always commited to distribute FOSS Android apps. Building free software from source for Android comes with a different set of challenges from GNU/Linux distros like Debian. Android apps are cross-compiled: they are not built on the same OS as they run. On top of that, Android provides only a barebones set of libraries built-in. Like the Java ecosystem, apps are expected to fetch library binaries from Maven repos and build them into the app. To ensure that the app is only built with FOSS deps, we develop a scanning system in _fdroidserver_ to restrict the dependency source and find problematic dependencies.	F-Droid 始终致力于分发自由开源 Android 应用程序。从源代码为 Android 构建自由软件面临与 Debian 等 GNU/Linux 发行版不同的一系列挑战。 Android 应用是交叉编译的：它们与运行的操作系统不同。最重要的是，Android 只提供了一组内置的准系统库。与 Java 生态系统一样，应用通常从 Maven 存储库中获取库二进制文件并使用它们构建应用。为了确保应用只使用自由开源依赖构建，我们在 _fdroidserver_ 中开发了一个扫描系统来限制依赖源并找出有问题的依赖项。
	F-Droid forbids unknown Maven repos and trusts only some well-known Maven repos [since 2015](https://gitlab.com/fdroid/fdroidserver/-/commit/21117b77d228458b4d3b003c4af19a2ac236b784). From then on, [some](https://gitlab.com/fdroid/fdroidserver/-/commit/d17da074e92e59bd543c362aff1bde3f087a0220) [more](https://gitlab.com/fdroid/fdroidserver/-/commit/a92f9a3a4c26e6b0b66f711891d342813d58cf48) [repos](https://gitlab.com/fdroid/fdroidserver/-/commit/1ff4f63de348ccca80dc3e773fcd2da58ffd07b2) [are](https://gitlab.com/fdroid/fdroidserver/-/commit/c87cdb91db3e731384d67045563d056b03858728) [added](https://gitlab.com/fdroid/fdroidserver/-/commit/c056b95fd5db81484d9e2b21d71975b12ffa9ac3) [to](https://gitlab.com/fdroid/fdroidserver/-/merge_requests/102) the list. Currently there are 8 Maven repos we trust:	[自 2015 年起](https://gitlab.com/fdroid/fdroidserver/-/commit/21117b77d228458b4d3b003c4af19a2ac236b784)，F-Droid 禁止使用未知的 Maven 存储库并仅信任一些知名的 Maven 存储库。之后，[更多](https://gitlab.com/fdroid/fdroidserver/-/commit/d17da074e92e59bd543c362aff1bde3f087a0220)[存储库](https://gitlab.com/fdroid/fdroidserver/-/commit/a92f9a3a4c26e6b0b66f7118941d342813d85)[被](https://gitlab.com/fdroid/fdroidserver/-/commit/1ff4f63de348ccca80dc3e773fcd2da58ffd07b2)[添加](https://gitlab.com/fdroid/fdroidserver/-/commit/c87cdb91db3e731384d67045563d056b03858728)[到](https:// gitlab.com/fdroid/fdroidserver/-/commit/c056b95fd5db81484d9e2b21d71975b12ffa9ac3)[了](https://gitlab.com/fdroid/fdroidserver/-/merge_requests/102)列表中。目前有 8 个我们信任的 Maven 存储库：
	Maven Central	Maven Central
	Google Maven Repo	谷歌 Maven 存储库
	JCenter	JCenter
	OSS Sonatype	OSS Sonatype
	OSS JFrog	OSS JFrog
	JitPack.io	JitPack.io

Loading…

yangyangdaji

Translation changed

English

Chinese (Simplified) 7 characters edited Current translation Translated

a year ago

yangyangdaji

Translation added

English

Chinese (Simplified) 8 characters edited Translated

a year ago

None

String updated in the repository

English

Chinese (Simplified) 0 characters edited Empty

a year ago

Browse all string changes

Things to check

Unchanged translation

Source and translation are identical

Reset

Glossary

English	Chinese (Simplified)
No related strings found in the glossary.

String information

Source string description

type: Bullet: ' * '

Flags

md-text, safe-html

Source string location

_posts/2022-07-22-maven-central.md

String age

a year ago

Last updated

11 months ago

Source string age

a year ago

Translation file

po/_posts.zh_Hans.po, string 3217