From 64d3ba9e5bf91d4428fb3829eb653ea1234e5629 Mon Sep 17 00:00:00 2001
From: Greyson Parrelli <greyson@signal.org>
Date: Mon, 1 Jun 2026 16:15:55 -0400
Subject: [PATCH] Add android tools checksum to Dockerfile.

---
 reproducible-builds/Dockerfile | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/reproducible-builds/Dockerfile b/reproducible-builds/Dockerfile
index 48fb46188f..7541bf57ed 100644
--- a/reproducible-builds/Dockerfile
+++ b/reproducible-builds/Dockerfile
@@ -14,15 +14,17 @@ RUN apt install -oAcquire::https::Verify-Peer=false -y ca-certificates
 RUN apt update
 RUN apt install -y git openjdk-17-jdk unzip wget
 
-ENV ANDROID_COMMAND_LINE_TOOLS_FILENAME commandlinetools-linux-10406996_latest.zip
-ENV ANDROID_API_LEVELS                  android-36
-ENV ANDROID_BUILD_TOOLS_VERSION         36.0.0
+ENV ANDROID_COMMAND_LINE_TOOLS_FILENAME=commandlinetools-linux-10406996_latest.zip
+ENV ANDROID_COMMAND_LINE_TOOLS_SHA256=8919e8752979db73d8321e9babe2caedcc393750817c1a5f56c128ec442fb540
+ENV ANDROID_API_LEVELS=android-36
+ENV ANDROID_BUILD_TOOLS_VERSION=36.0.0
 
-ENV ANDROID_HOME /usr/local/android-sdk-linux
-ENV PATH         ${PATH}:${ANDROID_HOME}/tools:${ANDROID_HOME}/platform-tools:${ANDROID_HOME}/cmdline-tools/bin
+ENV ANDROID_HOME=/usr/local/android-sdk-linux
+ENV PATH=${PATH}:${ANDROID_HOME}/tools:${ANDROID_HOME}/platform-tools:${ANDROID_HOME}/cmdline-tools/bin
 
 RUN cd /usr/local/
 RUN wget -q "https://dl.google.com/android/repository/${ANDROID_COMMAND_LINE_TOOLS_FILENAME}"
+RUN echo "${ANDROID_COMMAND_LINE_TOOLS_SHA256}  ${ANDROID_COMMAND_LINE_TOOLS_FILENAME}" | sha256sum -c -
 RUN unzip ${ANDROID_COMMAND_LINE_TOOLS_FILENAME} -d /usr/local/android-sdk-linux
 RUN rm ${ANDROID_COMMAND_LINE_TOOLS_FILENAME}