6 commits

Author	SHA1	Message	Date
Carl Dong	678348db51	guix: Patch binutils to add security-related disable flags ... We use these flags in our test-security-check make target, but they are only available because debian patches them in. We can patch them in for our Guix builds so that we can check the sanity of our security/symbol checking suite before running them.	2021-07-07 19:31:37 +08:00
fanquake	15fc9a0299	guix: add additional documentation to patches	2021-07-06 20:50:47 +08:00
Carl Dong	16b0a936e1	guix: Rebase toolchain on glibc 2.24 (2.27 for riscv64) ... Support for riscv64 in glibc landed in 2.27 so it's unavoidable that we use 2.27. Running a Bitcoin build with toolchains based on 2.24 for platforms other than riscv64 seem to produce binaries which do not have 2.17 symbols. So use 2.24 since it's more recent and maintained by Debian Stretch.	2021-07-01 16:17:03 -04:00
Carl Dong	ee883201cf	guix: repro: Sort find output in libtool for gcc-8 ... Otherwise the resulting .a static libraries (e.g. libstdc++.a) will not be reproducible and end up making the Bitcoin binaries non-reproducible as well. See: https://reproducible-builds.org/docs/archives/#gnu-libtool	2021-05-19 15:29:10 -04:00
Carl Dong	bac2690e6f	guix: Package codesigning tools	2021-05-13 15:41:56 -04:00
Carl Dong	a91c46c57d	guix: Make nsis reproducible by respecting SOURCE-DATE-EPOCH ... When building nsis, if VERSION is not specified, it defaults to cvs_version which is non-deterministic as it includes the current date. This patches nsis to default to SOURCE_DATE_EPOCH if it exists so that nsis is reproducible. Upstream change: https://github.com/kichik/nsis/pull/13	2021-01-17 18:43:58 -05:00