Quote from: n0nce on June 16, 2023, 04:43:27 PM

Quote from: foundationdvcs on June 16, 2023, 03:03:09 PM

Quote from: n0nce on June 15, 2023, 08:16:53 PM

Quote from: foundationdvcs on June 15, 2023, 01:34:21 PM

Could you try the latest version of the WIP script update and verify that it gives you the correct hashes? You can find it directly in the MR here:

https://gitlab.com/sethforprivacy/walletScrutinyCom/-/blob/master/scripts/test/hardware/passport.sh

This script is cheating, though! Grin

Compared to the old WalletScrutiny script, it doesn't contain the actual build commands itself, but just downloads your Justfile script and runs that instead. I'd really like to be able to reproduce it with my own script, instead.

Yes, but the Justfiles are all open-source and verifiable themselves, they just greatly simplify things and remove the need to make changes to the WalletScrutiny script if the build environment or steps change.

That's true; and I have also read / 'verified' them myself, nothing 'fishy' going on, so I'm not mistrusting the Justfiles. Just trying to do it in a different way..

Quote from: foundationdvcs on June 16, 2023, 03:03:09 PM

Is there a reason you aren't directly copying the Dockerfile and the `docker run` command and using them directly to build the image and then build the firmware?

That's something to try, yes. The difference is simply due to me starting with the original podman-based script.

Quote from: foundationdvcs on June 16, 2023, 03:03:09 PM

You would also need to replicate the build steps *exactly* from the relevant Justfile.

Doing that would ensure that you're using the exact same environment. If you don't want to copy the files themselves, I would use them as a direct reference, as if there is even the smallest difference in the image you build under podman you can expect the hashes to not match.

That should already be the case, no? Steps themselves, as well as the order of execution, should be identical.

I have pushed a new WalletScrutiny script that removes all reliance on Just and still produces reproducible binaries with matching hashes:

https://gitlab.com/sethforprivacy/walletScrutinyCom/-/blob/master/scripts/test/hardware/passport.sh

Please let me know if you have any questions around that, but it should give you everything you need (along with the Dockerfile it builds).