Inside Bitcoin

1#!/usr/bin/env bash
2# Copyright (c) The Bitcoin Core developers
3# Distributed under the MIT software license, see the accompanying
4# file COPYING or https://opensource.org/license/mit.
5export LC_ALL=C.UTF-8
6set -o errexit -o pipefail
7
8(
9    cd "$DISTSRC"
10
11    # Perform basic security checks on installed executables.
12    echo "Checking binary security on installed executables..."
13    python3 "${DISTSRC}/contrib/guix/security-check.py" "${INSTALLPATH}/bin/"* "${INSTALLPATH}/libexec/"*
14    # Check that executables only contain allowed version symbols.
15    echo "Running symbol and dynamic library checks on installed executables..."
16    python3 "${DISTSRC}/contrib/guix/symbol-check.py" "${INSTALLPATH}/bin/"* "${INSTALLPATH}/libexec/"*
17
18    (
19        cd installed
20
21        case "$HOST" in
22            *darwin*) ;;
23            *)
24                # Split binaries from their debug symbols
25                {
26                    find "${DISTNAME}/bin" "${DISTNAME}/libexec" -type f -executable -print0
27                } | xargs -0 -P"$JOBS" -I{} "${DISTSRC}/build/split-debug.sh" {} {} {}.dbg
28                ;;
29        esac
30
31        case "$HOST" in
32            *mingw*)
33                cp "${DISTSRC}/doc/README_windows.txt" "${DISTNAME}/readme.txt"
34                ;;
35            *linux*)
36                cp "${DISTSRC}/README.md" "${DISTNAME}/"
37                cp "${DISTSRC}/doc/INSTALL_linux.md" "${DISTNAME}/INSTALL.md"
38                ;;
39        esac
40
41        # copy over the example bitcoin.conf file. if contrib/devtools/gen-bitcoin-conf.sh
42        # has not been run before building, this file will be a stub
43        cp "${DISTSRC}/share/examples/bitcoin.conf" "${DISTNAME}/"
44
45        cp -r "${DISTSRC}/share/rpcauth" "${DISTNAME}/share/"
46
47        # Deterministically produce {non-,}debug binary tarballs ready
48        # for release
49        case "$HOST" in
50            *mingw*)
51                find "${DISTNAME}" -not -name "*.dbg" -print0 \
52                    | xargs -0r touch --no-dereference --date="@${SOURCE_DATE_EPOCH}"
53                find "${DISTNAME}" -not -name "*.dbg" \
54                    | sort \
55                    | zip -X@ "${OUTDIR}/${DISTNAME}-${HOST//x86_64-w64-mingw32/win64}-unsigned.zip" \
56                    || ( rm -f "${OUTDIR}/${DISTNAME}-${HOST//x86_64-w64-mingw32/win64}-unsigned.zip" && exit 1 )
57                find "${DISTNAME}" -name "*.dbg" -print0 \
58                    | xargs -0r touch --no-dereference --date="@${SOURCE_DATE_EPOCH}"
59                find "${DISTNAME}" -name "*.dbg" \
60                    | sort \
61                    | zip -X@ "${OUTDIR}/${DISTNAME}-${HOST//x86_64-w64-mingw32/win64}-debug.zip" \
62                    || ( rm -f "${OUTDIR}/${DISTNAME}-${HOST//x86_64-w64-mingw32/win64}-debug.zip" && exit 1 )
63                ;;
64            *linux*)
65                find "${DISTNAME}" -not -name "*.dbg" -print0 \
66                    | sort --zero-terminated \
67                    | tar --create --no-recursion --mode='u+rw,go+r-w,a+X' --null --files-from=- \
68                    | gzip -9n > "${OUTDIR}/${DISTNAME}-${HOST}.tar.gz" \
69                    || ( rm -f "${OUTDIR}/${DISTNAME}-${HOST}.tar.gz" && exit 1 )
70                find "${DISTNAME}" -name "*.dbg" -print0 \
71                    | sort --zero-terminated \
72                    | tar --create --no-recursion --mode='u+rw,go+r-w,a+X' --null --files-from=- \
73                    | gzip -9n > "${OUTDIR}/${DISTNAME}-${HOST}-debug.tar.gz" \
74                    || ( rm -f "${OUTDIR}/${DISTNAME}-${HOST}-debug.tar.gz" && exit 1 )
75                ;;
76            *darwin*)
77                find "${DISTNAME}" -print0 \
78                    | sort --zero-terminated \
79                    | tar --create --no-recursion --mode='u+rw,go+r-w,a+X' --null --files-from=- \
80                    | gzip -9n > "${OUTDIR}/${DISTNAME}-${HOST}-unsigned.tar.gz" \
81                    || ( rm -f "${OUTDIR}/${DISTNAME}-${HOST}-unsigned.tar.gz" && exit 1 )
82                ;;
83        esac
84    )  # $DISTSRC/installed
85
86    # Finally make tarballs for codesigning
87    case "$HOST" in
88        *mingw*)
89            # Make the installer
90            cmake -D BIN_DIR="${INSTALLPATH}/bin" -D LIBEXEC_DIR="${INSTALLPATH}/libexec" -P build/GenerateWindowsInstaller.cmake
91            mv build/bitcoin-win64-setup.exe "${OUTDIR}/${DISTNAME}-win64-setup-unsigned.exe"
92
93            cp -rf --target-directory=. contrib/windeploy
94            (
95                cd ./windeploy
96                mkdir -p unsigned
97                cp --target-directory=unsigned/ "${OUTDIR}/${DISTNAME}-win64-setup-unsigned.exe"
98                cp -r --target-directory=unsigned/ "${INSTALLPATH}"
99                find unsigned/ -name "*.dbg" -print0 \
100                    | xargs -0r rm
101                find . -print0 \
102                    | sort --zero-terminated \
103                    | tar --create --no-recursion --mode='u+rw,go+r-w,a+X' --null --files-from=- \
104                    | gzip -9n > "${OUTDIR}/${DISTNAME}-win64-codesigning.tar.gz" \
105                    || ( rm -f "${OUTDIR}/${DISTNAME}-win64-codesigning.tar.gz" && exit 1 )
106            )
107            ;;
108        *darwin*)
109            cmake --build build --target deploy
110            mv build/dist/bitcoin-macos-app.zip "${OUTDIR}/${DISTNAME}-${HOST}-unsigned.zip"
111            mkdir -p "unsigned-app-${HOST}"
112            cp  --target-directory="unsigned-app-${HOST}" \
113                contrib/macdeploy/detached-sig-create.sh
114            mv --target-directory="unsigned-app-${HOST}" build/dist
115            cp -r --target-directory="unsigned-app-${HOST}" "${INSTALLPATH}"
116            (
117                cd "unsigned-app-${HOST}"
118                find . -print0 \
119                    | sort --zero-terminated \
120                    | tar --create --no-recursion --mode='u+rw,go+r-w,a+X' --null --files-from=- \
121                    | gzip -9n > "${OUTDIR}/${DISTNAME}-${HOST}-codesigning.tar.gz" \
122                    || ( rm -f "${OUTDIR}/${DISTNAME}-${HOST}-codesigning.tar.gz" && exit 1 )
123            )
124            ;;
125    esac
126
127) # $DISTSRC
128
129rm -rf "$ACTUAL_OUTDIR"
130mv --no-target-directory "$OUTDIR" "$ACTUAL_OUTDIR" \
131    || ( rm -rf "$ACTUAL_OUTDIR" && exit 1 )
132
133(
134    tmp="$(mktemp)"
135    cd /outdir-base
136    {
137        echo "$GIT_ARCHIVE"
138        find "$ACTUAL_OUTDIR" -type f
139    } | xargs realpath --relative-base="$PWD" \
140        | xargs sha256sum \
141        | sort -k2 \
142        > "$tmp";
143    mv "$tmp" "$ACTUAL_OUTDIR"/SHA256SUMS.part
144)
145