AaronFiore/electrum
1
0
Fork 0
Code Activity

win build: add instructions to investigate reproducibility failure

Browse Source
This commit is contained in:
SomberNight
2022-03-25 21:26:10 +01:00
parent 8260a1abb7
commit 2a2ce612ec
1 changed files with 20 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
contrib/build-wine/README.md
View File

@@ -1,5 +1,4 @@
Windows binaries # Windows binaries
================
✓ _These binaries should be reproducible, meaning you should be able to generate ✓ _These binaries should be reproducible, meaning you should be able to generate
binaries that match the official releases._ binaries that match the official releases._
@@ -29,8 +28,7 @@ similar system.
Code Signing ## Code Signing
============
Electrum Windows builds are signed with a Microsoft Authenticode™ code signing Electrum Windows builds are signed with a Microsoft Authenticode™ code signing
certificate in addition to the GPG-based signatures. certificate in addition to the GPG-based signatures.
@@ -57,8 +55,7 @@ certificate/key) and one or multiple trusted verifiers:
Verify Integrity of signed binary ## Verify Integrity of signed binary
=================================
Every user can verify that the official binary was created from the source code in this Every user can verify that the official binary was created from the source code in this
repository. To do so, the Authenticode signature needs to be stripped since the signature repository. To do so, the Authenticode signature needs to be stripped since the signature
@@ -73,3 +70,20 @@ This procedure removes the differences between the signed and unsigned binary:
of 8. of 8.
The script `unsign.sh` performs these steps. The script `unsign.sh` performs these steps.
## FAQ
### How to investigate diff between binaries if reproducibility fails?
`pyi-archive_viewer` is needed, for that run `$ pip install pyinstaller`.
As a first pass overview, run:
```
pyi-archive_viewer -l electrum-*.exe1 > f1
pyi-archive_viewer -l electrum-*.exe2 > f2
diff f1 f2 > d
cat d
```
Then investigate manually:
```
$ pyi-archive_viewer electrum-*.exe1
? help
```