neobytes/contrib/gitian-descriptors
Wladimir J. van der Laan 3ae41a64dd
gitian: upgrade OpenSSL to 1.0.1h
Upgrade for https://www.openssl.org/news/secadv_20140605.txt

Just in case - there is no vulnerability that affects ecdsa signing or
verification.

The MITM attack vulnerability (CVE-2014-0224) may have some effect on
our usage of SSL/TLS.

As long as payment requests are signed (which is the common case), usage
of the payment protocol should also not be affected.

The TLS usage in RPC may be at risk for MITM attacks. If you have
`-rpcssl` enabled, be sure to update OpenSSL as soon as possible.

Rebased-By: Wladimir J. van der Laan <laanwj@gmail.com>
Rebased-From: 6e7c4d1
2014-06-06 18:59:56 +02:00
..
boost-linux.yml gitian: add libz-dev dependency package for linux boost 2014-02-22 08:18:07 +01:00
boost-win.yml gitian: Post-process .a libraries for win to be deterministic 2014-02-10 17:07:35 +01:00
deps-linux.yml gitian: upgrade OpenSSL to 1.0.1h 2014-06-06 18:59:56 +02:00
deps-win.yml gitian: upgrade OpenSSL to 1.0.1h 2014-06-06 18:59:56 +02:00
gitian-linux.yml gitian: upgrade OpenSSL to 1.0.1h 2014-06-06 18:59:56 +02:00
gitian-osx-bitcoin.yml gitian: upgrade OpenSSL to 1.0.1h 2014-06-06 18:59:56 +02:00
gitian-osx-depends.yml gitian: upgrade OpenSSL to 1.0.1h 2014-06-06 18:59:56 +02:00
gitian-osx-native.yml release: Bump the OSX SDK to 10.7 for gitian builds 2014-05-29 15:57:42 +02:00
gitian-osx-qt.yml gitian: upgrade OpenSSL to 1.0.1h 2014-06-06 18:59:56 +02:00
gitian-win.yml gitian: upgrade OpenSSL to 1.0.1h 2014-06-06 18:59:56 +02:00
protobuf-win.yml gitian: Make protobuf win32 intermediate output deterministic 2014-02-25 07:58:11 +01:00
qt-linux.yml gitian: build against Qt 4.6 2014-04-30 15:30:39 +02:00
qt-win.yml gitian: upgrade OpenSSL to 1.0.1h 2014-06-06 18:59:56 +02:00
README.md Update gitian README.md 2014-03-21 13:31:22 +01:00

Gavin's notes on getting gitian builds up and running using KVM:###

These instructions distilled from: https://help.ubuntu.com/community/KVM/Installation ... see there for complete details.

You need the right hardware: you need a 64-bit-capable CPU with hardware virtualization support (Intel VT-x or AMD-V). Not all modern CPUs support hardware virtualization.

You probably need to enable hardware virtualization in your machine's BIOS.

You need to be running a recent version of 64-bit-Ubuntu, and you need to install several prerequisites:

sudo apt-get install ruby apache2 git apt-cacher-ng python-vm-builder qemu-kvm

Sanity checks:

sudo service apt-cacher-ng status  # Should return apt-cacher-ng is running
ls -l /dev/kvm   # Should show a /dev/kvm device

Once you've got the right hardware and software:

git clone git://github.com/bitcoin/bitcoin.git
git clone git://github.com/devrandom/gitian-builder.git
mkdir gitian-builder/inputs
cd gitian-builder/inputs

# Create base images
cd gitian-builder
bin/make-base-vm --suite precise --arch i386
bin/make-base-vm --suite precise --arch amd64
cd ..

# Get inputs (see doc/release-process.md for exact inputs needed and where to get them)
...

# For further build instructions see doc/release-notes.md
...

gitian-builder now also supports building using LXC. See https://help.ubuntu.com/12.04/serverguide/lxc.html ... for how to get LXC up and running under Ubuntu.

If your main machine is a 64-bit Mac or PC with a few gigabytes of memory and at least 10 gigabytes of free disk space, you can gitian-build using LXC running inside a virtual machine.

Here's a description of Gavin's setup on OSX 10.6:

  1. Download and install VirtualBox from https://www.virtualbox.org/

  2. Download the 64-bit Ubuntu Desktop 12.04 LTS .iso CD image from http://www.ubuntu.com/

  3. Run VirtualBox and create a new virtual machine, using the Ubuntu .iso (see the VirtualBox documentation for details). Create it with at least 2 gigabytes of memory and a disk that is at least 20 gigabytes big.

  4. Inside the running Ubuntu desktop, install:

    sudo apt-get install debootstrap lxc ruby apache2 git apt-cacher-ng python-vm-builder

  5. Still inside Ubuntu, tell gitian-builder to use LXC, then follow the "Once you've got the right hardware and software" instructions above:

    export USE_LXC=1 git clone git://github.com/bitcoin/bitcoin.git ... etc