Quote from: n0nce on June 14, 2023, 08:00:28 PM

Since the WalletScrutiny review for Passport FE is outdated and the Passport Batch 2 build wasn't verified yet, I decided to quickly try it myself and write instructions for everyone to replicate it.

FE: https://walletscrutiny.com/hardware/passport/ "Review might be outdated"
Batch 2: https://walletscrutiny.com/hardware/foundation.passport2/ "Review is Work in Progress"

...snip...

For the passport2 firmware, I could not yet reproduce the builds. Since I wanted to contribute to WalletScrutiny's project, I did not follow Foundation Devices' instructions, but adapted the old WalletScrutiny script to work with passport2 and may have done something wrong in the process.

The firmware compiles fine, but checksum doesn't match. I'm not entirely sure whether we are meant to select development flags or not, but the hashes did not match with either option.

Maybe someone from Foundation can give me a hint where my issue is... Wink

I compared your build scripts (Justfile) and mine and they should be equivalent now.

Thanks for looking into that, awesome to see others wanting to help out and verify reproducibility themselves! We actually have a WIP MR for updating Wallet Scrutiny scripts to support both FE and B2, along with updated pages for both devices as there was a lot out of date there:

https://gitlab.com/walletscrutiny/walletScrutinyCom/-/merge_requests/454

Once that is merged the verification should be all set. Note that those use Just and Docker to ensure that they are always reproducible and have been verified by multiple team members as giving reproducible results.

As for your specific issue, I would imagine it's that you're using a different base image (22.04 vs our 20.04), which will almost always lead to different build hashes as underlying libraries etc. will be different between versions.

Could you try the latest version of the WIP script update and verify that it gives you the correct hashes? You can find it directly in the MR here:

https://gitlab.com/walletscrutiny/walletScrutinyCom/-/blob/2015b355bf9f8a37033d43e56cd99ce4a07316fe/scripts/test/hardware/passport.sh