This is the last PR before we reach feature-parity with the Gitian process!
Note: I tried using the Makefile inside the distsrc to make the dmg instead of manually listing out the commands, but make seems to want to re-make a lot of other files which broke the dmg.
The workflow looks something like this:
env [ FOO=bar... ] ./contrib/guix/guix-build(add additional env vars as necessary)- Codesigners only:
- Copy
guix-build-<short-id>/output/x86_64-apple-darwin18/bitcoin-<short-id>-osx-unsigned.tar.gzandguix-build-<short-id>/output/x86_64-w64-mingw32/bitcoin-<short-id>-win-unsigned.tar.gzto signing computer - Codesign with
./detached-sig-create.shinside the tarball - Upload contents of
signature-{osx,win}.tar.gzto https://github.com/bitcoin-core/bitcoin-detached-sigs (as a new tag)
- Copy
- Checkout new tag for
bitcoin-core/bitcoin-detached-sigswith the detached signatures env [ FOO=bar... ] DETACHED_SIGS_REPO=<path/to/bitcoin-detached-sigs> ./contrib/guix/guix-codesign(modify env vars as necessary)- Make sure
guix.sigsis cloned and updated env GUIX_SIGS_REPO=<path/to/guix.sigs> SIGNER=0x96AB007F1A7ED999=dongcarl ./contrib/guix/guix-attest(modify env vars as necessary)- Commit your new signatures and SHA256SUMS in
guix.sigs - Optionally, after there are multiple signatures in
guix.sigs:env GUIX_SIGS_REPO=<path/to/guix.sigs> ./contrib/guix/guix-verify
