mirror of
https://github.com/mirage/qubes-mirage-firewall.git
synced 2024-10-01 05:05:39 +00:00
ba6629f4ca
Also upload the artifact to GitHub action, and in addition use the same setup (ubuntu 20.04 image) and build directories as done on builds.robur.coop. Also use `strip` on the resulting binary to reduce it's size (since the debug section aren't mapped into the running unikernel, there's nothing we get from them -- also they are preserved (as .debug file) and uploaded to https://builds.robur.coop if one needs them). This entails binary reproducibility between the different systems: - a developer using ./build-with-docker.sh - GitHub action (run on every PR) - builds.robur.coop with the ubuntu-20.04 worker
10 lines
399 B
Bash
Executable File
10 lines
399 B
Bash
Executable File
#!/bin/sh
|
|
set -eu
|
|
echo Building Docker image with dependencies..
|
|
docker build -t qubes-mirage-firewall .
|
|
echo Building Firewall...
|
|
docker run --rm -i -v `pwd`:/tmp/orb-build qubes-mirage-firewall
|
|
echo "SHA2 of build: $(sha256sum ./dist/qubes-firewall.xen)"
|
|
echo "SHA2 last known: 3f71a1b672a15d145c7d40405dd75f06a2b148d2cfa106dc136e3da38552de41"
|
|
echo "(hashes should match for released versions)"
|