aboutsummaryrefslogtreecommitdiff
path: root/contrib/gitian-descriptors
AgeCommit message (Collapse)Author
2015-12-03Now that 0.12 has been branched, master is 0.12.99Wladimir J. van der Laan
... in preparation for 0.13
2015-11-30contrib: Del. gitian downloader config and update gitian READMEMarcoFalke
2015-11-19gitian: make windows build deterministicWladimir J. van der Laan
2015-11-16gitian: use trusty for buildingWladimir J. van der Laan
2015-10-09net: Disable upnp by defaultWladimir J. van der Laan
Common sentiment is that the miniupnpc codebase likely contains further vulnerabilities. I'd prefer to get rid of the dependency completely, but a compromise for now is to at least disable it by default.
2015-06-30gitian: make the windows signing process match OSXCory Fields
2015-06-18gitian: add a gitian-win-signer descriptorCory Fields
This is exactly like the current OSX signing process. osslsigncode has been patched to detach and re-attach Windows signatures. The changes can be seen here: https://github.com/theuni/osslsigncode/commits/attach-signature There's a pull-request open upstream for the changes: https://sourceforge.net/p/osslsigncode/osslsigncode/merge-requests/3/ This work has been back-ported to the stable 1.7.1 release of osslsigncode, so that a smaller patch can be reviewed.
2015-06-10gitian: Use the new bitcoin-detached-sigs git repo for OSX signaturesCory Fields
Rather than fetching a signature.tar.gz from somewhere on the net, instruct Gitian to use a signature from a tag in the bitcoin-detached-sigs repository which corresponds to the tag of the release being built. This changes detached-sig-apply.sh to take a dirname rather than a tarball as an argument, though detached-sig-create.sh still outputs a tarball for convenience.
2015-06-02gitian: Bump cache dir for current masterCory Fields
Do not backport.
2015-06-02gitian: bump faketime to something more recentCory Fields
This helps in file views where binaries are sorted by time
2015-05-19[Mac only] rename Bitcoin-Qt.app to "Bitcoin Core.app"Jonas Schnelli
2015-02-23gitian: fix x86_64 build with static libstdc++Cory Fields
2015-02-23build: change reduce exports/static libstdc++ options for gitian and travisCory Fields
For Gitian releases: - Windows builds remain unchanged. libstdc++ was already linked statically. - OSX builds remain unchanged. libstdc++ is tied to the SDK and not worth messing with. - Linux builds now statically link libstdc++. For Travis: - Match the previous behavior by adding --enable-reduce-exports as necessary. - Use static libstdc++ for the full Linux build.
2015-02-13gitian: don't add . to tar listCory Fields
Since permissions and timestamps are changed for the sake of determinism, . must not be added to the archive. Otherwise, tar may try to modify pwd when extracting.
2015-01-20osx: bump build sdk to 10.9Cory Fields
2015-01-02build: osx builders no longer need 32bit compiler supportCory Fields
2014-12-30dmg: fix deterministic dmg creation and docsCory Fields
2014-12-23gitian: attempt to fix tarball determinisimCory Fields
2014-11-26build: add a deterministic dmg signerCory Fields
2014-11-25gitian: update descriptors to use a sane uniform outputCory Fields
2014-11-19gitian: make tarballs deterministic and nuke .la files from build outputCory Fields
2014-11-19gitian: quick docs updateCory Fields
2014-11-19gitian: descriptors overhaulCory Fields
Descriptors now make use of the dependencies builder, so results are cached. A very new version (>= e9741525c) of Gitian should be used in order to take advantage of caching.
2014-10-03Bugfix: Replace bashisms with standard sh in gitian descriptorsLuke Dashjr
2014-07-22gitian: remove unneeded option after last commitCory Fields
2014-07-01secp256k1: add libtool as a dependencyCory Fields
2014-06-05gitian: upgrade OpenSSL to 1.0.1hWladimir J. van der Laan
Upgrade for https://www.openssl.org/news/secadv_20140605.txt Just in case - there is no vulnerability that affects ecdsa signing or verification. The MITM attack vulnerability (CVE-2014-0224) may have some effect on our usage of SSL/TLS. As long as payment requests are signed (which is the common case), usage of the payment protocol should also not be affected. The TLS usage in RPC may be at risk for MITM attacks. If you have `-rpcssl` enabled, be sure to update OpenSSL as soon as possible.
2014-06-02gitian: make linux qt intermediate deterministicWladimir J. van der Laan
A qt installation date snuck into the host utils (lrelease etc) This doesn't affect the end product, so no dependency version bump. It also doesn't explain why gavin's and mine build is different
2014-05-24release: Bump the OSX SDK to 10.7 for gitian buildsCory Fields
This fixes the display on Retina Macbooks. It also moves us away from depending on the ancient XCode3 sdk.
2014-05-21gitian: Add OSX build descriptorsCory Fields
Github-Pull: #4185 Rebased-By: Wladimir J. van der Laan Rebased-From: bb5da27, 2288206, 7fe8fe6, f76db78, ebcf375, fa1ed7c, 397e9b8
2014-05-02gitian: use right qt tools in linux buildWladimir J. van der Laan
If the `libqt4-dev` package is installed it picks the moc executable from the system instead of our custom-built one. This results in compatibility errors. This commit convinces configure to pick the right one.
2014-04-30gitian: don't export any symbols from executableWladimir J. van der Laan
This avoids conflicts between the libraries statically linked into bitcoin and any libraries we may link dynamically (such as Qt and OpenSSL, see issue #4094). It also avoids start-up overhead to not export any unnecessary symbols. To do this, build a linker script that marks all symbols as local.
2014-04-30gitian: build against Qt 4.6Wladimir J. van der Laan
Should make it possible to run the resulting GUI executable on Linux distributions that use Qt 4.6, such as Debian Wheezy and Tails. Builds a mini-SDK for building against Qt 4.6. This includes the headers as well as host utilities such as `lrelease`, `qrc` and `moc`. This speeds up the gitian build a bit - libqt4-dev pulled in a lot of packages, and is no longer needed as this provides a replacement of our own. Note: This does not replace the Qt build with at static library. After this commit we still build dynamically against the system Qt library. The only difference is that compatibility with an older version is maintained. This loses minor GUI functionality (such as setPlaceholderText) but still allows integration into the window management of the host OS, unlike when statically linking.
2014-04-10gitian-linux: --enable-glibc-back-compatWarren Togami
2014-04-09gitian: upgrade miniupnpc input to 1.9Wladimir J. van der Laan
Bumps deps-linux, deps-win dependency versions as well. qt-win does not need to be bumped, as although it depends on deps-win, Qt doesn't use miniupnp. I verified this by rebuilding the dependency and checking the the output is the same. Not having to rebuild Qt is a good thing as it is huge.
2014-04-08gitian: Version bump for Qt dependencyWladimir J. van der Laan
Bump Qt dependency version after OpenSSL update. Very important. Thanks @michagogo for noting.
2014-04-08Merge pull request #4023Wladimir J. van der Laan
4a811b0 gitian: upgrade openssl to 1.0.1g for both win and linux (Wladimir J. van der Laan)
2014-04-08gitian: upgrade openssl to 1.0.1g for both win and linuxWladimir J. van der Laan
OpenSSL 1.0.1g fixes CVE-2014-0160. Also bump dependency versions.
2014-03-26gitian: add statically built variant of bitcoind/bitcoin-cliWladimir J. van der Laan
2014-03-21Update gitian README.mdWladimir J. van der Laan
2014-02-27Re-enable UPnP by default in gitian buildsWladimir J. van der Laan
IIRC this was the case with 0.8.6, so let's keep this to avoid the risk of losing connectable nodes with 0.9 release. Also our miniupnpc library was recently updated and I've heard reports that it works better than before now.
2014-02-25gitian: Make protobuf win32 intermediate output deterministicWladimir J. van der Laan
While building protobuf in different environments we noticed that the host tool protoc was slightly different between builds (a symbol table sorting issue). Add a deterministic seed as well as disable zlib support. Exected output is now: e2e403e1a08869c7eed4d4293bce13d51ec6a63592918b90ae215a0eceb44cb4 protobuf-win32-2.5.0-gitian-r4.zip a0999037e8b0ef9ade13efd88fee261ba401f5ca910068b7e0cd3262ba667db0 protobuf-win64-2.5.0-gitian-r4.zip No effect on final executables so no version bump.
2014-02-22gitian: add libz-dev dependency package for linux boostWladimir J. van der Laan
Boost iostreams was picking up libz-dev in VirtualBox, as the recommended way to build is now to make a VM with all dependency packages installed. This caused a divergence between KVM/LXC build and VirtualBox build results. Fix this in the simplest possible way: add the libz-dev package.
2014-02-10Merge pull request #3622Wladimir J. van der Laan
c13a13e gitian: add -D flag to ar for deterministic output for linux deps (Wladimir J. van der Laan) 1552145 gitian: Sort generated source distribution archive (Wladimir J. van der Laan) aabcd11 gitian: Make linux boost dependency completely deterministic (Wladimir J. van der Laan) aa93485 gitian: Make linux build of OpenSSL deterministic (Wladimir J. van der Laan)
2014-02-10gitian: sort generated source distribution archive for windowsWladimir J. van der Laan
Make the bitcoin-X.X.X.tar.gz deterministic.
2014-02-10gitian: Post-process .a libraries for win to be deterministicWladimir J. van der Laan
2014-02-10gitian: add -D flag to ar for deterministic output for linux depsWladimir J. van der Laan
ar -D: Operate in deterministic mode. When adding files and the archive index use zero for UIDs, GIDs, timestamps, and use consistent file modes for all files. When this option is used, if ar is used with identical options and identical input files, multiple runs will create identical output files regardless of the input files' owners, groups, file modes, or modification times.
2014-02-10gitian: Sort generated source distribution archiveWladimir J. van der Laan
Sort the filenames in the resulting tar, normalize the time/date and user/group information.
2014-02-08gitian: Make windows dependencies outputs fully deterministicWladimir J. van der Laan
Sort .zip order, and other determinism changes to make sure builds are repeatable for windows deps.
2014-02-06gitian: Make linux boost dependency completely deterministicWladimir J. van der Laan
It appears that the output was different every time. This doesn't affect the final bitcoind/bitcoin-qt, but is confusing nevertheless. Fix it by using FAKETIME and zipping files in deterministic order.