Skip to content

Bitcoin Core release attestations (Guix)

Notifications You must be signed in to change notification settings

gburkhow/guix.sigs

This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.

Folders and files

NameName
Last commit message
Last commit date

Latest commit

5e8c117 · Dec 19, 2024
Jun 19, 2024
Oct 30, 2021
Aug 14, 2021
Aug 21, 2021
Sep 10, 2021
Dec 14, 2022
Nov 8, 2022
Nov 29, 2022
Jul 6, 2022
Mar 15, 2022
Mar 17, 2022
Apr 3, 2022
Apr 13, 2022
Apr 22, 2022
Jan 9, 2023
Nov 18, 2022
Nov 30, 2022
May 31, 2023
May 25, 2023
Dec 13, 2022
Nov 25, 2022
Sep 30, 2022
Oct 24, 2022
Nov 3, 2022
Nov 19, 2022
May 30, 2023
Apr 25, 2023
May 1, 2023
May 15, 2023
Dec 11, 2023
Oct 21, 2023
May 27, 2023
Apr 30, 2023
May 19, 2023
Nov 7, 2023
Oct 21, 2023
Apr 21, 2024
Mar 8, 2024
Apr 22, 2024
Feb 2, 2024
Nov 1, 2023
Nov 13, 2023
Nov 29, 2023
Apr 5, 2024
Mar 7, 2024
Mar 21, 2024
Jul 15, 2024
Jun 18, 2024
Jun 19, 2024
Apr 22, 2024
Jul 15, 2024
Jun 7, 2024
Nov 15, 2024
Nov 1, 2024
Nov 15, 2024
Sep 1, 2024
Nov 14, 2024
Dec 10, 2024
Dec 19, 2024
Dec 10, 2024
May 3, 2024
Aug 15, 2023
Jul 22, 2021
Apr 22, 2024

Repository files navigation

This repository contains Guix attestations for releases of Bitcoin Core.

Overall process

The Guix build consists of two stages:

  • In the first stage (noncodesigned), people compile the binaries from source.
  • Then, code signatures for Windows and MacOS are generated from the binaries that were produced in the first stage, and distributed to the builders.
  • In the second stage (all), the builders attach these code signatures.

See https://github.com/bitcoin/bitcoin/blob/master/doc/release-process.md#building on how to build the release with Guix and create an attestation.

Directory structure

  • /<version>/<signer>/: Build attestations for repository tag v<version> for <signer>.
    • noncodesigned.SHA256SUMS: Hashes of binaries produced by the first stage build for this version.
    • noncodesigned.SHA256SUMS.asc: Detached PGP signature for noncodesigned.SHA256SUMS.
    • all.SHA256SUMS: Hashes of binaries produced by the second stage build. This covers all the binaries uploaded to the website, and is what to check release binaries against.
    • all.SHA256SUMS.asc: Detached PGP signature for all.SHA256SUMS.
  • /builder-keys/<signer>.gpg: PGP keys of the signers. If you're going to do builds and contribute attestations, file a PR to add your key here.
  • /contrib: Scripts used in the CI tests.

About

Bitcoin Core release attestations (Guix)

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Rust 54.9%
  • Python 45.1%