aboutsummaryrefslogtreecommitdiff
path: root/contrib/gitian-descriptors/gitian-win.yml
AgeCommit message (Collapse)Author
2016-01-27release: Add security/export checks to gitian and fix current failuresCory Fields
- fix parsing of BIND_NOW with older readelf - add _IO_stdin_used to ignored exports For details see: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=634261#109 - add check-symbols and check-security make targets These are not added to the default checks because some of them depend on release-build configs. - always link librt for glibc back-compat builds glibc absorbed clock_gettime in 2.17. librt (its previous location) is safe to link in anyway for back-compat. Fixes #7420 - add security/symbol checks to gitian Github-Pull: #7424 Rebased-From: cd27bf51e06a8d79790a631696355bd05751b0aa 475813ba5b208eb9a5d027eb628a717cc123ef4f f3d3eaf78eb51238d799d8f20a585550d1567719 a8ce872118c4807465629aecb9e4f3d72d999ccb a81c87fafce43e49cc2307947e3951b84be7ca9a
2016-01-20build: Make networking work inside LXC builder in gitian-building.mdWladimir J. van der Laan
These are changes I needed to get gitian building to work with Debian 8.2, which is the version we tell to use. - Set up NAT, so that container can access network beyond host - Remove explicit cgroup setup - these are mounted automatically now - gitian: Need `ca-certificates` and `python` for LXC builds Github-Pull: #7060 Rebased-From: 99fda26de0661afcbe43d5e862c382e3c2e3aa5e 3b468a0e609147c7d7afd8ed97bf271f2356daef
2016-01-04[gitian] Set reference date to something more recentMarcoFalke
Github-Pull: #7251 Rebased-From: fa095622c25492ddc7096c5825f327e4427e7d75
2015-11-19gitian: make windows build deterministicWladimir J. van der Laan
2015-11-16gitian: use trusty for buildingWladimir J. van der Laan
2015-10-09net: Disable upnp by defaultWladimir J. van der Laan
Common sentiment is that the miniupnpc codebase likely contains further vulnerabilities. I'd prefer to get rid of the dependency completely, but a compromise for now is to at least disable it by default.
2015-06-30gitian: make the windows signing process match OSXCory Fields
2015-06-02gitian: Bump cache dir for current masterCory Fields
Do not backport.
2015-06-02gitian: bump faketime to something more recentCory Fields
This helps in file views where binaries are sorted by time
2015-02-23build: change reduce exports/static libstdc++ options for gitian and travisCory Fields
For Gitian releases: - Windows builds remain unchanged. libstdc++ was already linked statically. - OSX builds remain unchanged. libstdc++ is tied to the SDK and not worth messing with. - Linux builds now statically link libstdc++. For Travis: - Match the previous behavior by adding --enable-reduce-exports as necessary. - Use static libstdc++ for the full Linux build.
2015-02-13gitian: don't add . to tar listCory Fields
Since permissions and timestamps are changed for the sake of determinism, . must not be added to the archive. Otherwise, tar may try to modify pwd when extracting.
2014-12-23gitian: attempt to fix tarball determinisimCory Fields
2014-11-25gitian: update descriptors to use a sane uniform outputCory Fields
2014-11-19gitian: make tarballs deterministic and nuke .la files from build outputCory Fields
2014-11-19gitian: descriptors overhaulCory Fields
Descriptors now make use of the dependencies builder, so results are cached. A very new version (>= e9741525c) of Gitian should be used in order to take advantage of caching.
2014-10-03Bugfix: Replace bashisms with standard sh in gitian descriptorsLuke Dashjr
2014-06-05gitian: upgrade OpenSSL to 1.0.1hWladimir J. van der Laan
Upgrade for https://www.openssl.org/news/secadv_20140605.txt Just in case - there is no vulnerability that affects ecdsa signing or verification. The MITM attack vulnerability (CVE-2014-0224) may have some effect on our usage of SSL/TLS. As long as payment requests are signed (which is the common case), usage of the payment protocol should also not be affected. The TLS usage in RPC may be at risk for MITM attacks. If you have `-rpcssl` enabled, be sure to update OpenSSL as soon as possible.
2014-04-09gitian: upgrade miniupnpc input to 1.9Wladimir J. van der Laan
Bumps deps-linux, deps-win dependency versions as well. qt-win does not need to be bumped, as although it depends on deps-win, Qt doesn't use miniupnp. I verified this by rebuilding the dependency and checking the the output is the same. Not having to rebuild Qt is a good thing as it is huge.
2014-04-08gitian: Version bump for Qt dependencyWladimir J. van der Laan
Bump Qt dependency version after OpenSSL update. Very important. Thanks @michagogo for noting.
2014-04-08gitian: upgrade openssl to 1.0.1g for both win and linuxWladimir J. van der Laan
OpenSSL 1.0.1g fixes CVE-2014-0160. Also bump dependency versions.
2014-02-27Re-enable UPnP by default in gitian buildsWladimir J. van der Laan
IIRC this was the case with 0.8.6, so let's keep this to avoid the risk of losing connectable nodes with 0.9 release. Also our miniupnpc library was recently updated and I've heard reports that it works better than before now.
2014-02-10gitian: sort generated source distribution archive for windowsWladimir J. van der Laan
Make the bitcoin-X.X.X.tar.gz deterministic.
2014-02-03Gitian fixes for 0.9.0rc1 buildWladimir J. van der Laan
- Add 'g++' package (virtualbox images don't have this by default) - Workaround for determinism in Qt5 resources - Pass --disable-maintainer-mode --disable-dependency-tracking to configure for libqrencode to avoid random errors about missing m4 directory - Fix typo -with-pic -> --with-pic It is not necessary to rebuild dependencies after this commit. Fixes #3610 and #3612.
2014-01-21gitian: Windows 64 bit supportWladimir J. van der Laan
- Build a 64 bit version of all dependencies - Show 32/64 bit version in "About..." for x86 - Export 64-bit .exes and installer from gitian build