guix: documented shasum gathering command

janb84 commented at 8:41 am on September 24, 2025: contributor

When a PR requires proof of Guix builds (sha256sums), the PR author or reviewer uses a not well documented command to collect the sha256sums of build outputs or manually gathers them from files.

This pull request introduces a new section in the documentation, providing some documentation on the command’s functionality and usage.

DrahtBot added the label Build system on Sep 24, 2025

DrahtBot commented at 8:41 am on September 24, 2025: contributor

The following sections might be updated with supplementary metadata relevant to reviewers and maintainers.

Code Coverage & Benchmarks

For details see: https://corecheck.dev/bitcoin/bitcoin/pulls/33472.

Reviews

See the guideline for information on the review process.

Type	Reviewers
ACK	willcl-ark, sedited
Stale ACK	trevarj, Sjors

If your review is incorrectly listed, please copy-paste <!–meta-tag:bot-skip–> into the comment that the bot should ignore.

in contrib/guix/README.md:116 in ec045bfdcb

111+
112+To gather all shasums and output them together to console, for e.g.
113+inclusion in a Guix pull request comment, run:
114+
115+``` sh
116+guix describe

maflcko commented at 8:52 am on September 24, 2025:

the guix builds use a time machine, so the description of the host guix should be irrelevant and is confusing to put here, no?

in contrib/guix/README.md:117 in ec045bfdcb

112+To gather all shasums and output them together to console, for e.g.
113+inclusion in a Guix pull request comment, run:
114+
115+``` sh
116+guix describe
117+uname -m

maflcko commented at 8:53 am on September 24, 2025:

I think it is easier to keep this a one-line, to make copy-pasting easier?

janb84 commented at 8:59 am on September 24, 2025:

Just tried to stay as close to the found command : https://github.com/fanquake/core-review/tree/master/guix#build-output

Have changed it

hebasto commented at 5:28 pm on September 28, 2025:

Please keep uname -m, as different build platforms may produce different output, which could lead to cross-platform non-reproducibility:

0uname -m && ...

janb84 force-pushed on Sep 24, 2025

janb84 commented at 11:13 am on September 24, 2025: contributor

Addressed all the feedback (including the linter’s spelling suggestion )

trevarj commented at 11:27 am on September 24, 2025: none

ACK d29ab99

Thanks for this

janb84 commented at 12:42 pm on September 24, 2025: contributor

Guix Build Output

 0 9e3e3372c1bb063a575e9f6037c53a666537cf6d297116601e2f2de8092cfe61  guix-build-d29ab9946f3c/output/aarch64-linux-gnu/SHA256SUMS.part
 1 6b1183039d07aa9ba16b50980d10d28f3c5598ad8412bb9088d3c9e66f059f43  guix-build-d29ab9946f3c/output/aarch64-linux-gnu/bitcoin-d29ab9946f3c-aarch64-linux-gnu-debug.tar.gz
 2 d7abff7f58f2bf1813afb76226a96646b057c56f1ff8f4b5a45e309063c9c23e  guix-build-d29ab9946f3c/output/aarch64-linux-gnu/bitcoin-d29ab9946f3c-aarch64-linux-gnu.tar.gz
 3 72489f49b0136757b90ca8e939253bbbec026cebdf89fb209eb6a0b7b460b16f  guix-build-d29ab9946f3c/output/arm-linux-gnueabihf/SHA256SUMS.part
 4 86ebc8309c7673998715fceb1deba872736791ced84eb2147786bd5256a0cca6  guix-build-d29ab9946f3c/output/arm-linux-gnueabihf/bitcoin-d29ab9946f3c-arm-linux-gnueabihf-debug.tar.gz
 5 a4b99878c6079aab68a879d4096ef2f4670486baf3935746349d913bf72af1ae  guix-build-d29ab9946f3c/output/arm-linux-gnueabihf/bitcoin-d29ab9946f3c-arm-linux-gnueabihf.tar.gz
 6 10147946e79c461d3eae68da83d25470b578bce10c3483cd3a0cced01102385f  guix-build-d29ab9946f3c/output/arm64-apple-darwin/SHA256SUMS.part
 7 907476be489aa8f6708fb9575ed9a9cfbca867a813a33f997e73221f8ced02eb  guix-build-d29ab9946f3c/output/arm64-apple-darwin/bitcoin-d29ab9946f3c-arm64-apple-darwin-codesigning.tar.gz
 8 9542c68b1480d40969759fb498196a67a50628d00ec4446b1c15925240233177  guix-build-d29ab9946f3c/output/arm64-apple-darwin/bitcoin-d29ab9946f3c-arm64-apple-darwin-unsigned.tar.gz
 9 2d50cad29f82df2b86837e276322fba316589502ccf68924d834c133c900662e  guix-build-d29ab9946f3c/output/arm64-apple-darwin/bitcoin-d29ab9946f3c-arm64-apple-darwin-unsigned.zip
10 1f2043b740c0e21602603904e0ec46b42a4ff8192fc6c6a54bba70620f2cf205  guix-build-d29ab9946f3c/output/dist-archive/bitcoin-d29ab9946f3c.tar.gz
11 52055cd6c29dd0fa08adba286fc3c49812a6a0554392761a019bf39dbe87ac54  guix-build-d29ab9946f3c/output/powerpc64-linux-gnu/SHA256SUMS.part
12 f1e50fe59f14b77ac7da05e46bb732dbe62d61929a976d844c3f1f905b803962  guix-build-d29ab9946f3c/output/powerpc64-linux-gnu/bitcoin-d29ab9946f3c-powerpc64-linux-gnu-debug.tar.gz
13 c2a3039b2db624c35e6923654364d03d730f07a2541eede3f57a203fd40c3801  guix-build-d29ab9946f3c/output/powerpc64-linux-gnu/bitcoin-d29ab9946f3c-powerpc64-linux-gnu.tar.gz
14 e07bf8471542fd783a77984049836d4ca257ce603168df00a9ebf39db5a6016f  guix-build-d29ab9946f3c/output/riscv64-linux-gnu/SHA256SUMS.part
15 40ab37d32848211041bcec378a168cc8f3d56b64bdc0c94273d099b3cd64867c  guix-build-d29ab9946f3c/output/riscv64-linux-gnu/bitcoin-d29ab9946f3c-riscv64-linux-gnu-debug.tar.gz
16 1e1de5f51188ef75273b7a47b7c3903354a52c605a9c4f6e8827026e7679f9ee  guix-build-d29ab9946f3c/output/riscv64-linux-gnu/bitcoin-d29ab9946f3c-riscv64-linux-gnu.tar.gz
17 865fb137ed8525d4f2558e83e243336a3d6270cb690a336900cfbd8b5f46e03b  guix-build-d29ab9946f3c/output/x86_64-apple-darwin/SHA256SUMS.part
18 bfdc26b10616cb1f1b888d4b6de541a525cd5126b35e533a2838b8d949eac015  guix-build-d29ab9946f3c/output/x86_64-apple-darwin/bitcoin-d29ab9946f3c-x86_64-apple-darwin-codesigning.tar.gz
19 f5d1f3f69009911e90d10474ae8edd008ba5214d12e2a2b4a7f86eb27837465f  guix-build-d29ab9946f3c/output/x86_64-apple-darwin/bitcoin-d29ab9946f3c-x86_64-apple-darwin-unsigned.tar.gz
20 48e5fec84e84e72096fa2134dec763b59758ad844cdec1586e89c5bbbe9ca52a  guix-build-d29ab9946f3c/output/x86_64-apple-darwin/bitcoin-d29ab9946f3c-x86_64-apple-darwin-unsigned.zip
21 cedec07e4299c0b71d7f25961163fdc7e05ed356b1a43f1330c6ec2a534f2000  guix-build-d29ab9946f3c/output/x86_64-linux-gnu/SHA256SUMS.part
22 0380317cae8d4fe16efdb145b27977af4e83394715c16a53123005ae519812ce  guix-build-d29ab9946f3c/output/x86_64-linux-gnu/bitcoin-d29ab9946f3c-x86_64-linux-gnu-debug.tar.gz
23 44a128e55df41dea54ca5b7a280201201e5cc945e7a6da18842581b339b98003  guix-build-d29ab9946f3c/output/x86_64-linux-gnu/bitcoin-d29ab9946f3c-x86_64-linux-gnu.tar.gz
24 11093be7849182d758b93989057f7a72152d776bb3780d8201a4648e54c53f98  guix-build-d29ab9946f3c/output/x86_64-w64-mingw32/SHA256SUMS.part
25 af473e913ab5e520506483ceb58a02f3965aaca2daa56da0dca014bd19ef9c1b  guix-build-d29ab9946f3c/output/x86_64-w64-mingw32/bitcoin-d29ab9946f3c-win64-codesigning.tar.gz
26 2a04bc4aa5f1bc2ca5a86753a55d2b4fe89326d85ecd3d1ce33dc678b83386d9  guix-build-d29ab9946f3c/output/x86_64-w64-mingw32/bitcoin-d29ab9946f3c-win64-debug.zip
27 9ade14903b02b7f7a9690051c47e2247bc7f5945f10836b4ea528dd50eee7b75  guix-build-d29ab9946f3c/output/x86_64-w64-mingw32/bitcoin-d29ab9946f3c-win64-setup-unsigned.exe
28 123351386ebd20939c9ecbf77da7ee9f8a30cadaf9cd8386c65dc4cdacdb5e34  guix-build-d29ab9946f3c/output/x86_64-w64-mingw32/bitcoin-d29ab9946f3c-win64-unsigned.zip

Sjors commented at 2:13 pm on September 24, 2025: member

ACK d29ab9946f3c1916032f41e7a365dfcb26af2c46

in contrib/guix/README.md:116 in d29ab9946f

111+
112+To gather all shasums and output them together to console, for e.g.
113+inclusion in a Guix pull request comment, run:
114+
115+``` sh
116+find guix-build-$(git rev-parse --short=12 HEAD)/output/ -type f -print0 | env LC_ALL=C sort -z | xargs -r0 sha256sum

hebasto commented at 5:30 pm on September 28, 2025:

$(git rev-parse --short=12 HEAD) won’t work for tags. However, that’s not the case for pull requests.

janb84 commented at 8:54 am on September 29, 2025:

Thanks Addressed in : 0a97da9

janb84 force-pushed on Sep 29, 2025

janb84 commented at 8:53 am on September 29, 2025: contributor

Addressed in :0a97da9

added uname -m
added command for tag-based checkouts.

maflcko added the label DrahtBot Guix build requested on Jan 22, 2026

DrahtBot commented at 1:52 am on January 25, 2026: contributor

Guix builds (on x86_64) [untrusted test-only build, possibly unsafe, not for production use]

File	commit 5715748333fe41414ce72c3dcdd3420a8e6ec470(master)	commit e6ab2a7eba6ebe5907f8c19852403c4512142a8b(pull/33472/merge)
*-aarch64-linux-gnu-debug.tar.gz	`54ce0489a1fc06d2...`	`92e52eadca07e151...`
*-aarch64-linux-gnu.tar.gz	`a7ef7012b4bdac7d...`	`be14467ce71e1d8f...`
*-arm-linux-gnueabihf-debug.tar.gz	`bdc8db13259d04bf...`	`c8ead8a445862d73...`
*-arm-linux-gnueabihf.tar.gz	`916a8ce121d15f86...`	`323cbb3eb337bb74...`
*-arm64-apple-darwin-codesigning.tar.gz	`069f379454587f79...`	`5e1614bea1d020c5...`
*-arm64-apple-darwin-unsigned.tar.gz	`2c477661dbfbeaa0...`	`f483a6da26ca7096...`
*-arm64-apple-darwin-unsigned.zip	`b8c58403b7acb878...`	`dd0c084861a71d84...`
*-powerpc64-linux-gnu-debug.tar.gz	`45590da3db9ebcff...`	`4797fb609935832e...`
*-powerpc64-linux-gnu.tar.gz	`9bbb33bedc577b4b...`	`1626758a57228106...`
*-riscv64-linux-gnu-debug.tar.gz	`8c90d222d6164e38...`	`f8a59d321d66e5b5...`
*-riscv64-linux-gnu.tar.gz	`149b19da9fb8ccc4...`	`73f32e0fbd4b713a...`
*-win64-codesigning.tar.gz	`5e11124d2f754db6...`	`e593708cb0e1fb3c...`
*-win64-debug.zip	`0ea6914c60e72b8c...`	`8baa6253ba7e9b66...`
*-win64-setup-unsigned.exe	`6dc03ee1cf19978c...`	`74734d4dadf3ec8e...`
*-win64-unsigned.zip	`583af6c9f3441235...`	`04bf5942ee9c5054...`
*-x86_64-apple-darwin-codesigning.tar.gz	`d5bd800e3a574821...`	`642950718fde09d9...`
*-x86_64-apple-darwin-unsigned.tar.gz	`7a2bc11dbc341356...`	`809785df7b13f861...`
*-x86_64-apple-darwin-unsigned.zip	`bb627aab9427770b...`	`81c9ea355b9ec845...`
*-x86_64-linux-gnu-debug.tar.gz	`bb753e27858dadce...`	`5c1a79774687bf62...`
*-x86_64-linux-gnu.tar.gz	`2f5cdeae6ca0c303...`	`2ba52e8ef6cfb5a1...`
*.tar.gz	`9cb1eedef4cebcda...`	`b3b131aa96f1ad25...`
SHA256SUMS.part	`d9e1d08e399bbe86...`	`4038846bc74ecaf1...`
guix_build.log	`725c032d32a71008...`	`150b5c476b897732...`
guix_build.log.diff		`0e49f277e551c9fa...`

DrahtBot removed the label DrahtBot Guix build requested on Jan 25, 2026

Sjors commented at 1:14 pm on January 26, 2026: member

ACK 0a97da91126d32811b271eb3338aff64582e96ad

guix: documented shasum gathering command ab649ce459

in contrib/guix/README.md:123 in 0a97da9112

118+```
119+
120+For tag-based checkouts, use:
121+``` sh
122+uname -m && find guix-build-$(git describe --tags --exact-match | sed 's/^v//')/output/ -type f -print0 | env LC_ALL=C sort -z | xargs -r0 sha256sum
123+```

maflcko commented at 1:26 pm on January 26, 2026:

in theory this could use the existing script , so that there is only a single command that re-uses the exact same logic as the guix build itself:

0contrib/shell/git-utils.bash:git_head_version() {

janb84 commented at 2:44 pm on January 26, 2026:

Have taken your suggestion, this is a more elegant way to do it. No confusion for the user which command to choose. Thanks !

janb84 force-pushed on Jan 26, 2026

janb84 commented at 2:47 pm on January 26, 2026: contributor

Addressed NIT in ab649ce459450533ffdf068b00472259b72cf07a

It’s now using git-utils.bash so that both cases are now covered in one command:

in theory this could use the existing script , so that there is only a single command that re-uses the exact same logic as the guix build itself:
0contrib/shell/git-utils.bash:git_head_version() {

willcl-ark approved

willcl-ark commented at 2:35 pm on January 27, 2026: member

ACK ab649ce459450533ffdf068b00472259b72cf07a

DrahtBot requested review from Sjors on Jan 27, 2026

sedited approved

sedited commented at 1:59 pm on January 28, 2026: contributor

ACK ab649ce459450533ffdf068b00472259b72cf07a

sedited merged this on Jan 28, 2026

sedited closed this on Jan 28, 2026

guix: documented shasum gathering command #33472

Code Coverage & Benchmarks

Reviews

Guix builds (on x86_64) [untrusted test-only build, possibly unsafe, not for production use]