qubes-mirage-firewall/build-with-docker.sh

#!/bin/sh
set -eu
echo Building Docker image with dependencies..
docker build -t qubes-mirage-firewall .
echo Building Firewall...
docker run --rm -i -v `pwd`:/tmp/orb-build qubes-mirage-firewall
echo "SHA2 of build:   $(sha256sum ./dist/qubes-firewall.xen)"
echo "SHA2 last known: 8ae5314edf5b863b788c4b873e27bc4b206a2ff7ef1051c4c62ae41584ed3e14"
echo "(hashes should match for released versions)"
Add option to build with Docker 2017-01-09 16:45:16 +00:00			`#!/bin/sh`
Fix opam-repository commit for reproducible builds Also, display the actual and expected SHA hashes after building. 2017-01-28 13:44:21 +00:00			`set -eu`
			`echo Building Docker image with dependencies..`
Add option to build with Docker 2017-01-09 16:45:16 +00:00			`docker build -t qubes-mirage-firewall .`
Fix opam-repository commit for reproducible builds Also, display the actual and expected SHA hashes after building. 2017-01-28 13:44:21 +00:00			`echo Building Firewall...`
Reproducible build systems: use in GitHub action the build-with-docker.sh Also upload the artifact to GitHub action, and in addition use the same setup (ubuntu 20.04 image) and build directories as done on builds.robur.coop. Also use `strip` on the resulting binary to reduce it's size (since the debug section aren't mapped into the running unikernel, there's nothing we get from them -- also they are preserved (as .debug file) and uploaded to https://builds.robur.coop if one needs them). This entails binary reproducibility between the different systems: - a developer using ./build-with-docker.sh - GitHub action (run on every PR) - builds.robur.coop with the ubuntu-20.04 worker 2022-11-13 11:22:59 +00:00			docker run --rm -i -v `pwd`:/tmp/orb-build qubes-mirage-firewall
update docker build for mirage 4.2 2022-08-09 12:16:16 +00:00			`echo "SHA2 of build: $(sha256sum ./dist/qubes-firewall.xen)"`
update sha 2023-07-05 15:14:14 +00:00			`echo "SHA2 last known: 8ae5314edf5b863b788c4b873e27bc4b206a2ff7ef1051c4c62ae41584ed3e14"`
Note that Git versions might have different hashes 2019-01-19 10:32:27 +00:00			`echo "(hashes should match for released versions)"`