Offline building should be clarified (plus clarifications for new builders re: gverify) #6422

midnightmagic commented at 4:55 PM on July 11, 2015: contributor

We should not imply they are to users who might want to torify or build offline.

Also, corrections to build process; including gverify examples for new builders.

laanwj commented at 5:06 PM on July 11, 2015: member

As I've explained on IRC yesterday, offline builds are possible without manual patching.

Download the dependency sources manually or use make download (as mentioned)
Make sure that the git repositories with bitcoin (https://github.com/bitcoin/bitcoin.git) as well as the signatures (https://github.com/bitcoin/bitcoin-detached-sigs.git, only necessary for *signer.yml) are available locally, then to gbuild pass --url bitcoin=${P1} --url signature=${P2}. P1 and P2 must be set to the local paths of said repositories.

Anything missing?

laanwj added the label Build system on Jul 11, 2015

midnightmagic force-pushed on Jul 13, 2015

midnightmagic commented at 3:24 AM on July 13, 2015: contributor

Correcting the pullreq: I think it's valuable to provide at least some direction on doing an offline build. I suppose in the end there should also be either an offline apt-cacher-ng or one that's been torified but..

midnightmagic renamed this:
~~Offline builds are not possible without manual patching (plus clarifications for new builders)~~
Offline building should be clarified (plus clarifications for new builders re: gverify)
on Jul 13, 2015

laanwj commented at 10:51 AM on July 14, 2015: member

I'd suppose when you provide apt-cacher-ng with all packages, it doesn't need to access any from the internet anymore. But I haven't checked.

I suppose it would be possible to add socks support to apt-cacher-ng but torifying is most throughly and safely done by routing all of a user's network traffic through Tor using iptables.

midnightmagic force-pushed on Jul 15, 2015

midnightmagic commented at 9:07 AM on July 15, 2015: contributor

After apt-cacher-ng is populated you must set it to be offline in its config file. Unfortunately it looks like the plain archive.ubuntu.com chokes up apt-cacher-ng as per:

https://bugs.launchpad.net/ubuntu/+source/apt-cacher/+bug/1358883

—of all the weird things, but switching it to us.archive.ubuntu.com corrects this.

Other than that, the --url bitcoin={},signature={} works well.

laanwj added the label Docs and Output on Jul 20, 2015

jgarzik commented at 7:07 PM on July 23, 2015: contributor

ACK

in doc/release-process.md:None in 6563da18ad outdated

 102 |  	mv build/out/bitcoin-*-win-unsigned.tar.gz inputs/bitcoin-win-unsigned.tar.gz
 103 |  	mv build/out/bitcoin-*.zip build/out/bitcoin-*.exe ../
 104 | +
 105 |  	./bin/gbuild --commit bitcoin=v${VERSION} ../bitcoin/contrib/gitian-descriptors/gitian-osx.yml
 106 |  	./bin/gsign --signer $SIGNER --release ${VERSION}-osx-unsigned --destination ../gitian.sigs/ ../bitcoin/contrib/gitian-descriptors/gitian-osx.yml
 107 | +	./bin/gverify -v -d ../gitian.sigs/ -r ${VERSION}-osx-unsigned /v/soft/btc/bitcoin/contrib/gitian-descriptors/gitian-osx.yml

laanwj commented at 9:15 AM on August 25, 2015:

path? /v/soft/btc/bitcoin/contrib/gitian-descriptors/gitian-osx.yml

midnightmagic force-pushed on Aug 27, 2015

midnightmagic commented at 3:35 AM on August 27, 2015: contributor

Corrected path.

jgarzik commented at 1:16 PM on September 16, 2015: contributor

needs rebase to fix conflicts; looks ready to merge.

Clarifying offline build process using gbuild --url and noting it is not

done automatically.

At some point along the line, fully offline builds were no longer happening
when strictly following the release-process.md instructions.

We should ensure that users who might want to torify or build offline need
to take extra steps to remain offline.

Also, corrections to build process: including gverify examples for new builders.

c73a8ea271

midnightmagic force-pushed on Sep 17, 2015

midnightmagic commented at 9:28 PM on September 17, 2015: contributor

Fixed a couple more spelling errors, re-read it. Should be okay as long as nothing big has changed in the build. At the very least, it has some more detail to help new users to get into gitian building, which is good I think.

laanwj merged this on Sep 18, 2015

laanwj closed this on Sep 18, 2015

laanwj referenced this in commit aadc631935 on Sep 18, 2015

laanwj referenced this in commit 8bc1b3a1f3 on Sep 18, 2015

DrahtBot locked this on Sep 8, 2021