This is the last PR before we reach feature-parity with the Gitian process!
Note: I tried using the Makefile
inside the distsrc to make the dmg instead of manually listing out the commands, but make
seems to want to re-make a lot of other files which broke the dmg.
The workflow looks something like this:
env [ FOO=bar... ] ./contrib/guix/guix-build
(add additional env vars as necessary)- Codesigners only:
- Copy
guix-build-<short-id>/output/x86_64-apple-darwin18/bitcoin-<short-id>-osx-unsigned.tar.gz
andguix-build-<short-id>/output/x86_64-w64-mingw32/bitcoin-<short-id>-win-unsigned.tar.gz
to signing computer - Codesign with
./detached-sig-create.sh
inside the tarball - Upload contents of
signature-{osx,win}.tar.gz
to https://github.com/bitcoin-core/bitcoin-detached-sigs (as a new tag)
- Copy
- Checkout new tag for
bitcoin-core/bitcoin-detached-sigs
with the detached signatures env [ FOO=bar... ] DETACHED_SIGS_REPO=<path/to/bitcoin-detached-sigs> ./contrib/guix/guix-codesign
(modify env vars as necessary)- Make sure
guix.sigs
is cloned and updated env GUIX_SIGS_REPO=<path/to/guix.sigs> SIGNER=0x96AB007F1A7ED999=dongcarl ./contrib/guix/guix-attest
(modify env vars as necessary)- Commit your new signatures and SHA256SUMS in
guix.sigs
- Optionally, after there are multiple signatures in
guix.sigs
:env GUIX_SIGS_REPO=<path/to/guix.sigs> ./contrib/guix/guix-verify