mirror of
https://github.com/dashpay/dash.git
synced 2024-12-26 12:32:48 +01:00
c09f57bd78
* Add stdin, stdout, stderr to ignored export list
* Merge #13171: Change gitian-descriptors to use bionic instead
c1afe3232fa10e290fb355cf37ea4c7bc1084065 Change gitian-descriptors to use bionic instead (Chun Kuan Lee)
Pull request description:
I have tested this with Ubuntu Bionic host with lxc 3.0.0, the gitian-build for Windows and MacOSX work fine, but there is an issue about it for Linux. Failed at check-symbol:
```
test/test_bitcoin: symbol __divmoddi4 from unsupported version GCC_7.0.0
test/test_bitcoin: symbol log2f from unsupported version GLIBC_2.27
qt/bitcoin-qt: symbol __divmoddi4 from unsupported version GCC_7.0.0
qt/bitcoin-qt: symbol log2f from unsupported version GLIBC_2.27
```
I think this should be fixed in `./configure --enable-glibc-back-compat`
Should not be merged before #13177 devrandom/gitian-builder#178
Close #12511
Tree-SHA512: 257d75d5b6864e105279f7a7b992fbbd7903cdbe3300b66dacec0a783d267707d9dbbfe0e64a36983ca1eca50a2a5e1cdb222b6d3745ccc3e5fc5636c88b581f
* Use IN6ADDR_ANY_INIT instead of in6addr_any
This is the same fix as fc6a9f2ab1
Couldn't backport the original commit as we are missing some refactorings.
424 lines
11 KiB
Bash
Executable File
424 lines
11 KiB
Bash
Executable File
# Copyright (c) 2016 The Bitcoin Core developers
|
|
# Distributed under the MIT software license, see the accompanying
|
|
# file COPYING or http://www.opensource.org/licenses/mit-license.php.
|
|
|
|
# What to do
|
|
sign=false
|
|
verify=false
|
|
build=false
|
|
setupenv=false
|
|
|
|
# Systems to build
|
|
linux=true
|
|
windows=true
|
|
osx=true
|
|
|
|
# Other Basic variables
|
|
SIGNER=
|
|
VERSION=
|
|
commit=false
|
|
url=https://github.com/dashpay/dash
|
|
proc=2
|
|
mem=2000
|
|
lxc=true
|
|
docker=false
|
|
osslTarUrl=http://downloads.sourceforge.net/project/osslsigncode/osslsigncode/osslsigncode-1.7.1.tar.gz
|
|
osslPatchUrl=https://bitcoincore.org/cfields/osslsigncode-Backports-to-1.7.1.patch
|
|
scriptName=$(basename -- "$0")
|
|
signProg="gpg --detach-sign"
|
|
commitFiles=true
|
|
|
|
SDK_URL=${SDK_URL:-https://bitcoincore.org/depends-sources/sdks}
|
|
OSX_SDK=${OSX_SDK:-10.11}
|
|
|
|
# Help Message
|
|
read -d '' usage <<- EOF
|
|
Usage: $scriptName [-c|u|v|b|s|B|o|h|j|m|] signer version
|
|
|
|
Run this script from the directory containing the dash, gitian-builder, gitian.sigs, and dash-detached-sigs.
|
|
|
|
Arguments:
|
|
signer GPG signer to sign each build assert file
|
|
version Version number, commit, or branch to build. If building a commit or branch, the -c option must be specified
|
|
|
|
Options:
|
|
-c|--commit Indicate that the version argument is for a commit or branch
|
|
-u|--url Specify the URL of the repository. Default is https://github.com/dashpay/dash
|
|
-v|--verify Verify the gitian build
|
|
-b|--build Do a gitian build
|
|
-s|--sign Make signed binaries for Windows and Mac OSX
|
|
-B|--buildsign Build both signed and unsigned binaries
|
|
-o|--os Specify which Operating Systems the build is for. Default is lwx. l for linux, w for windows, x for osx
|
|
-j Number of processes to use. Default 2
|
|
-m Memory to allocate in MiB. Default 2000
|
|
--kvm Use KVM
|
|
--lxc Use LXC
|
|
--docker Use Docker
|
|
--setup Setup the gitian building environment. Uses KVM. If you want to use lxc, use the --lxc option. If you want to use Docker, use --docker. Only works on Debian-based systems (Ubuntu, Debian)
|
|
--detach-sign Create the assert file for detached signing. Will not commit anything.
|
|
--no-commit Do not commit anything to git
|
|
-h|--help Print this help message
|
|
EOF
|
|
|
|
# Get options and arguments
|
|
while :; do
|
|
case $1 in
|
|
# Verify
|
|
-v|--verify)
|
|
verify=true
|
|
;;
|
|
# Build
|
|
-b|--build)
|
|
build=true
|
|
;;
|
|
# Sign binaries
|
|
-s|--sign)
|
|
sign=true
|
|
;;
|
|
# Build then Sign
|
|
-B|--buildsign)
|
|
sign=true
|
|
build=true
|
|
;;
|
|
# PGP Signer
|
|
-S|--signer)
|
|
if [ -n "$2" ]
|
|
then
|
|
SIGNER="$2"
|
|
shift
|
|
else
|
|
echo 'Error: "--signer" requires a non-empty argument.'
|
|
exit 1
|
|
fi
|
|
;;
|
|
# Operating Systems
|
|
-o|--os)
|
|
if [ -n "$2" ]
|
|
then
|
|
linux=false
|
|
windows=false
|
|
osx=false
|
|
if [[ "$2" = *"l"* ]]
|
|
then
|
|
linux=true
|
|
fi
|
|
if [[ "$2" = *"w"* ]]
|
|
then
|
|
windows=true
|
|
fi
|
|
if [[ "$2" = *"x"* ]]
|
|
then
|
|
osx=true
|
|
fi
|
|
shift
|
|
else
|
|
echo 'Error: "--os" requires an argument containing an l (for linux), w (for windows), or x (for Mac OSX)\n'
|
|
exit 1
|
|
fi
|
|
;;
|
|
# Help message
|
|
-h|--help)
|
|
echo "$usage"
|
|
exit 0
|
|
;;
|
|
# Commit or branch
|
|
-c|--commit)
|
|
commit=true
|
|
;;
|
|
# Number of Processes
|
|
-j)
|
|
if [ -n "$2" ]
|
|
then
|
|
proc=$2
|
|
shift
|
|
else
|
|
echo 'Error: "-j" requires an argument'
|
|
exit 1
|
|
fi
|
|
;;
|
|
# Memory to allocate
|
|
-m)
|
|
if [ -n "$2" ]
|
|
then
|
|
mem=$2
|
|
shift
|
|
else
|
|
echo 'Error: "-m" requires an argument'
|
|
exit 1
|
|
fi
|
|
;;
|
|
# URL
|
|
-u)
|
|
if [ -n "$2" ]
|
|
then
|
|
url=$2
|
|
shift
|
|
else
|
|
echo 'Error: "-u" requires an argument'
|
|
exit 1
|
|
fi
|
|
;;
|
|
# kvm
|
|
--lxc)
|
|
lxc=true
|
|
docker=false
|
|
;;
|
|
# kvm
|
|
--kvm)
|
|
lxc=false
|
|
docker=false
|
|
;;
|
|
# docker
|
|
--docker)
|
|
lxc=false
|
|
docker=true
|
|
;;
|
|
# Detach sign
|
|
--detach-sign)
|
|
signProg="true"
|
|
commitFiles=false
|
|
;;
|
|
# Commit files
|
|
--no-commit)
|
|
commitFiles=false
|
|
;;
|
|
# Setup
|
|
--setup)
|
|
setup=true
|
|
;;
|
|
*) # Default case: If no more options then break out of the loop.
|
|
break
|
|
esac
|
|
shift
|
|
done
|
|
|
|
# Set up LXC
|
|
if [[ $lxc = true ]]
|
|
then
|
|
export USE_LXC=1
|
|
export LXC_BRIDGE=lxcbr0
|
|
sudo ifconfig lxcbr0 up 10.0.3.2
|
|
elif [[ $docker = true ]]
|
|
then
|
|
export USE_DOCKER=1
|
|
fi
|
|
|
|
# Check for OSX SDK
|
|
if [[ ! -e "gitian-builder/inputs/MacOSX10.11.sdk.tar.gz" && $osx == true ]]
|
|
then
|
|
echo "Cannot build for OSX, SDK does not exist. Will build for other OSes"
|
|
osx=false
|
|
fi
|
|
|
|
# Get signer
|
|
if [[ -n"$1" ]]
|
|
then
|
|
SIGNER="$1"
|
|
shift
|
|
fi
|
|
|
|
# Get version
|
|
if [[ -n "$1" ]]
|
|
then
|
|
VERSION=$1
|
|
COMMIT=$VERSION
|
|
shift
|
|
fi
|
|
|
|
# Check that a signer is specified
|
|
if [[ "$SIGNER" == "" ]]
|
|
then
|
|
echo "$scriptName: Missing signer."
|
|
echo "Try $scriptName --help for more information"
|
|
exit 1
|
|
fi
|
|
|
|
# Check that a version is specified
|
|
if [[ $VERSION == "" ]]
|
|
then
|
|
echo "$scriptName: Missing version."
|
|
echo "Try $scriptName --help for more information"
|
|
exit 1
|
|
fi
|
|
|
|
# Add a "v" if no -c
|
|
if [[ $commit = false ]]
|
|
then
|
|
COMMIT="v${VERSION}"
|
|
fi
|
|
echo ${COMMIT}
|
|
|
|
# Setup build environment
|
|
if [[ $setup = true ]]
|
|
then
|
|
sudo apt-get install ruby apache2 git apt-cacher-ng python-vm-builder qemu-kvm qemu-utils
|
|
git clone https://github.com/dashpay/gitian.sigs.git
|
|
git clone https://github.com/dashpay/dash-detached-sigs.git
|
|
git clone https://github.com/devrandom/gitian-builder.git
|
|
pushd ./gitian-builder
|
|
if [[ -n "$USE_LXC" ]]
|
|
then
|
|
sudo apt-get install lxc
|
|
bin/make-base-vm --suite bionic --arch amd64 --lxc
|
|
elif [[ -n "$USE_DOCKER" ]]
|
|
then
|
|
sudo apt-get install docker-ce
|
|
bin/make-base-vm --suite bionic --arch amd64 --docker
|
|
else
|
|
bin/make-base-vm --suite bionic --arch amd64
|
|
fi
|
|
popd
|
|
fi
|
|
|
|
# Set up build
|
|
pushd ./dash
|
|
git fetch
|
|
git checkout ${COMMIT}
|
|
popd
|
|
|
|
# Build
|
|
if [[ $build = true ]]
|
|
then
|
|
# Make output folder
|
|
mkdir -p ./dashcore-binaries/${VERSION}
|
|
|
|
# Build Dependencies
|
|
echo ""
|
|
echo "Building Dependencies"
|
|
echo ""
|
|
pushd ./gitian-builder
|
|
mkdir -p inputs
|
|
wget -N -P inputs $osslPatchUrl
|
|
wget -N -P inputs $osslTarUrl
|
|
make -C ../dash/depends download SOURCES_PATH=`pwd`/cache/common
|
|
|
|
# Linux
|
|
if [[ $linux = true ]]
|
|
then
|
|
echo ""
|
|
echo "Compiling ${VERSION} Linux"
|
|
echo ""
|
|
./bin/gbuild -j ${proc} -m ${mem} --commit dash=${COMMIT} --url dash=${url} ../dash/contrib/gitian-descriptors/gitian-linux.yml
|
|
./bin/gsign -p "$signProg" --signer "$SIGNER" --release ${VERSION}-linux --destination ../gitian.sigs/ ../dash/contrib/gitian-descriptors/gitian-linux.yml
|
|
mv build/out/dashcore-*.tar.gz build/out/src/dashcore-*.tar.gz ../dashcore-binaries/${VERSION}
|
|
fi
|
|
# Windows
|
|
if [[ $windows = true ]]
|
|
then
|
|
echo ""
|
|
echo "Compiling ${VERSION} Windows"
|
|
echo ""
|
|
./bin/gbuild -j ${proc} -m ${mem} --commit dash=${COMMIT} --url dash=${url} ../dash/contrib/gitian-descriptors/gitian-win.yml
|
|
./bin/gsign -p "$signProg" --signer "$SIGNER" --release ${VERSION}-win-unsigned --destination ../gitian.sigs/ ../dash/contrib/gitian-descriptors/gitian-win.yml
|
|
mv build/out/dashcore-*-win-unsigned.tar.gz inputs/dashcore-win-unsigned.tar.gz
|
|
mv build/out/dashcore-*.zip build/out/dashcore-*.exe ../dashcore-binaries/${VERSION}
|
|
fi
|
|
# Mac OSX
|
|
if [[ $osx = true ]]
|
|
then
|
|
echo ""
|
|
echo "Compiling ${VERSION} Mac OSX"
|
|
echo ""
|
|
|
|
if [ -n "$OSX_SDK" ]; then
|
|
if [ ! -f inputs/MacOSX${OSX_SDK}.sdk.tar.gz ]; then
|
|
curl --location --fail $SDK_URL/MacOSX${OSX_SDK}.sdk.tar.gz -o inputs/MacOSX${OSX_SDK}.sdk.tar.gz
|
|
fi
|
|
fi
|
|
|
|
./bin/gbuild -j ${proc} -m ${mem} --commit dash=${COMMIT} --url dash=${url} ../dash/contrib/gitian-descriptors/gitian-osx.yml
|
|
./bin/gsign -p "$signProg" --signer "$SIGNER" --release ${VERSION}-osx-unsigned --destination ../gitian.sigs/ ../dash/contrib/gitian-descriptors/gitian-osx.yml
|
|
mv build/out/dashcore-*-osx-unsigned.tar.gz inputs/dashcore-osx-unsigned.tar.gz
|
|
mv build/out/dashcore-*.tar.gz build/out/dashcore-*.dmg ../dashcore-binaries/${VERSION}
|
|
fi
|
|
popd
|
|
|
|
if [[ $commitFiles = true ]]
|
|
then
|
|
# Commit to gitian.sigs repo
|
|
echo ""
|
|
echo "Committing ${VERSION} Unsigned Sigs"
|
|
echo ""
|
|
pushd gitian.sigs
|
|
git add ${VERSION}-linux/"${SIGNER}"
|
|
git add ${VERSION}-win-unsigned/"${SIGNER}"
|
|
git add ${VERSION}-osx-unsigned/"${SIGNER}"
|
|
git commit -a -m "Add ${VERSION} unsigned sigs for ${SIGNER}"
|
|
popd
|
|
fi
|
|
fi
|
|
|
|
# Verify the build
|
|
if [[ $verify = true ]]
|
|
then
|
|
# Linux
|
|
pushd ./gitian-builder
|
|
echo ""
|
|
echo "Verifying v${VERSION} Linux"
|
|
echo ""
|
|
./bin/gverify -v -d ../gitian.sigs/ -r ${VERSION}-linux ../dash/contrib/gitian-descriptors/gitian-linux.yml
|
|
# Windows
|
|
echo ""
|
|
echo "Verifying v${VERSION} Windows"
|
|
echo ""
|
|
./bin/gverify -v -d ../gitian.sigs/ -r ${VERSION}-win-unsigned ../dash/contrib/gitian-descriptors/gitian-win.yml
|
|
# Mac OSX
|
|
echo ""
|
|
echo "Verifying v${VERSION} Mac OSX"
|
|
echo ""
|
|
./bin/gverify -v -d ../gitian.sigs/ -r ${VERSION}-osx-unsigned ../dash/contrib/gitian-descriptors/gitian-osx.yml
|
|
# Signed Windows
|
|
echo ""
|
|
echo "Verifying v${VERSION} Signed Windows"
|
|
echo ""
|
|
./bin/gverify -v -d ../gitian.sigs/ -r ${VERSION}-osx-signed ../dash/contrib/gitian-descriptors/gitian-osx-signer.yml
|
|
# Signed Mac OSX
|
|
echo ""
|
|
echo "Verifying v${VERSION} Signed Mac OSX"
|
|
echo ""
|
|
./bin/gverify -v -d ../gitian.sigs/ -r ${VERSION}-osx-signed ../dash/contrib/gitian-descriptors/gitian-osx-signer.yml
|
|
popd
|
|
fi
|
|
|
|
# Sign binaries
|
|
if [[ $sign = true ]]
|
|
then
|
|
|
|
pushd ./gitian-builder
|
|
# Sign Windows
|
|
if [[ $windows = true ]]
|
|
then
|
|
echo ""
|
|
echo "Signing ${VERSION} Windows"
|
|
echo ""
|
|
./bin/gbuild -i --commit signature=${COMMIT} ../dash/contrib/gitian-descriptors/gitian-win-signer.yml
|
|
./bin/gsign -p "$signProg" --signer "$SIGNER" --release ${VERSION}-win-signed --destination ../gitian.sigs/ ../dash/contrib/gitian-descriptors/gitian-win-signer.yml
|
|
mv build/out/dashcore-*win64-setup.exe ../dashcore-binaries/${VERSION}
|
|
mv build/out/dashcore-*win32-setup.exe ../dashcore-binaries/${VERSION}
|
|
fi
|
|
# Sign Mac OSX
|
|
if [[ $osx = true ]]
|
|
then
|
|
echo ""
|
|
echo "Signing ${VERSION} Mac OSX"
|
|
echo ""
|
|
./bin/gbuild -i --commit signature=${COMMIT} ../dash/contrib/gitian-descriptors/gitian-osx-signer.yml
|
|
./bin/gsign -p "$signProg" --signer "$SIGNER" --release ${VERSION}-osx-signed --destination ../gitian.sigs/ ../dash/contrib/gitian-descriptors/gitian-osx-signer.yml
|
|
mv build/out/dashcore-osx-signed.dmg ../dashcore-binaries/${VERSION}/dashcore-${VERSION}-osx.dmg
|
|
fi
|
|
popd
|
|
|
|
if [[ $commitFiles = true ]]
|
|
then
|
|
# Commit Sigs
|
|
pushd gitian.sigs
|
|
echo ""
|
|
echo "Committing ${VERSION} Signed Sigs"
|
|
echo ""
|
|
git add ${VERSION}-win-signed/"${SIGNER}"
|
|
git add ${VERSION}-osx-signed/"${SIGNER}"
|
|
git commit -a -m "Add ${VERSION} signed binary sigs for ${SIGNER}"
|
|
popd
|
|
fi
|
|
fi
|