arno/trezor-firmware
1
0
Fork 0
mirror of https://github.com/trezor/trezor-firmware.git synced 2024-11-22 15:38:11 +00:00
Code Issues Releases Wiki Activity
2ecd4eeac2
trezor-firmware/build-docker.sh

122 lines
3.6 KiB
Bash
Raw Normal View History

all: replace /bin/bash with /usr/bin/env bash
2019-09-12 13:42:04 +00:00
#!/usr/bin/env bash
build: review the build script [skip ci] 1. make it work on macOS hosts 2. add quoting to paths to prevent failures if user was foolish enough to put the repo on a path with spaces 3. use -o pipefail for robustness 4. use wget --no-config to prevent surprises from ~/.wgetrc 5. add --init to docker run for better signals 6. detect effective USER:GROUP like a grown up 7. break fs download url into multiple configurable parts 8. make the script independent on launch location 9. build: generate nix-shell scripts with HEREDOC 9.1. this is easier on eyes, one could review generated script in ./build 9.2. we don't have to escape quotes and chain commands with && 9.4. added some extra quoting for user-specified values
2020-11-11 15:53:42 +00:00
set -e -o pipefail
build: combine docker scripts for core and legacy into one
2019-09-08 15:16:53 +00:00
build: review the build script [skip ci] 1. make it work on macOS hosts 2. add quoting to paths to prevent failures if user was foolish enough to put the repo on a path with spaces 3. use -o pipefail for robustness 4. use wget --no-config to prevent surprises from ~/.wgetrc 5. add --init to docker run for better signals 6. detect effective USER:GROUP like a grown up 7. break fs download url into multiple configurable parts 8. make the script independent on launch location 9. build: generate nix-shell scripts with HEREDOC 9.1. this is easier on eyes, one could review generated script in ./build 9.2. we don't have to escape quotes and chain commands with && 9.4. added some extra quoting for user-specified values
2020-11-11 15:53:42 +00:00
cd "$(dirname "${BASH_SOURCE[0]}")"
CONTAINER_NAME=${CONTAINER_NAME:-trezor-firmware-env.nix}
ALPINE_CDN=${ALPINE_CDN:-http://dl-cdn.alpinelinux.org/alpine}
ALPINE_RELEASE=${ALPINE_RELEASE:-3.12}
ALPINE_ARCH=${ALPINE_ARCH:-x86_64}
ci: various fixes and updates - fix Nix build on macOS Big Sur (by updating to nixpkgs-unstable) - update gcc-arm-embedded from 9.x to 10.x - update nix to 2.3.10 - update Alpine Linux to 3.12.3 - allow to change arch in Docker
2020-12-27 20:28:52 +00:00
ALPINE_VERSION=${ALPINE_VERSION:-3.12.3}
build: review the build script [skip ci] 1. make it work on macOS hosts 2. add quoting to paths to prevent failures if user was foolish enough to put the repo on a path with spaces 3. use -o pipefail for robustness 4. use wget --no-config to prevent surprises from ~/.wgetrc 5. add --init to docker run for better signals 6. detect effective USER:GROUP like a grown up 7. break fs download url into multiple configurable parts 8. make the script independent on launch location 9. build: generate nix-shell scripts with HEREDOC 9.1. this is easier on eyes, one could review generated script in ./build 9.2. we don't have to escape quotes and chain commands with && 9.4. added some extra quoting for user-specified values
2020-11-11 15:53:42 +00:00
CONTAINER_FS_URL=${CONTAINER_FS_URL:-"$ALPINE_CDN/v$ALPINE_RELEASE/releases/$ALPINE_ARCH/alpine-minirootfs-$ALPINE_VERSION-$ALPINE_ARCH.tar.gz"}
build: combine docker scripts for core and legacy into one
2019-09-08 15:16:53 +00:00
TAG=${1:-master}
build: review the build script [skip ci] 1. make it work on macOS hosts 2. add quoting to paths to prevent failures if user was foolish enough to put the repo on a path with spaces 3. use -o pipefail for robustness 4. use wget --no-config to prevent surprises from ~/.wgetrc 5. add --init to docker run for better signals 6. detect effective USER:GROUP like a grown up 7. break fs download url into multiple configurable parts 8. make the script independent on launch location 9. build: generate nix-shell scripts with HEREDOC 9.1. this is easier on eyes, one could review generated script in ./build 9.2. we don't have to escape quotes and chain commands with && 9.4. added some extra quoting for user-specified values
2020-11-11 15:53:42 +00:00
REPOSITORY=${2:-/local}
build: combine docker scripts for core and legacy into one
2019-09-08 15:16:53 +00:00
PRODUCTION=${PRODUCTION:-1}
MEMORY_PROTECT=${MEMORY_PROTECT:-1}
build: review the build script [skip ci] 1. make it work on macOS hosts 2. add quoting to paths to prevent failures if user was foolish enough to put the repo on a path with spaces 3. use -o pipefail for robustness 4. use wget --no-config to prevent surprises from ~/.wgetrc 5. add --init to docker run for better signals 6. detect effective USER:GROUP like a grown up 7. break fs download url into multiple configurable parts 8. make the script independent on launch location 9. build: generate nix-shell scripts with HEREDOC 9.1. this is easier on eyes, one could review generated script in ./build 9.2. we don't have to escape quotes and chain commands with && 9.4. added some extra quoting for user-specified values
2020-11-11 15:53:42 +00:00
wget --no-config -nc -P ci/ "$CONTAINER_FS_URL"
ci: drop experimental --platform argument from docker
2021-01-22 15:55:27 +00:00
docker build --build-arg ALPINE_VERSION="$ALPINE_VERSION" --build-arg ALPINE_ARCH="$ALPINE_ARCH" -t "$CONTAINER_NAME" ci/
build: combine docker scripts for core and legacy into one
2019-09-08 15:16:53 +00:00
build: review the build script [skip ci] 1. make it work on macOS hosts 2. add quoting to paths to prevent failures if user was foolish enough to put the repo on a path with spaces 3. use -o pipefail for robustness 4. use wget --no-config to prevent surprises from ~/.wgetrc 5. add --init to docker run for better signals 6. detect effective USER:GROUP like a grown up 7. break fs download url into multiple configurable parts 8. make the script independent on launch location 9. build: generate nix-shell scripts with HEREDOC 9.1. this is easier on eyes, one could review generated script in ./build 9.2. we don't have to escape quotes and chain commands with && 9.4. added some extra quoting for user-specified values
2020-11-11 15:53:42 +00:00
# stat under macOS has slightly different cli interface
USER=$(stat -c "%u" . 2>/dev/null || stat -f "%u" .)
GROUP=$(stat -c "%g" . 2>/dev/null || stat -f "%g" .)
mkdir -p build/core build/legacy
mkdir -p build/core-bitcoinonly build/legacy-bitcoinonly
build: combine docker scripts for core and legacy into one
2019-09-08 15:16:53 +00:00
build: review the build script [skip ci] 1. make it work on macOS hosts 2. add quoting to paths to prevent failures if user was foolish enough to put the repo on a path with spaces 3. use -o pipefail for robustness 4. use wget --no-config to prevent surprises from ~/.wgetrc 5. add --init to docker run for better signals 6. detect effective USER:GROUP like a grown up 7. break fs download url into multiple configurable parts 8. make the script independent on launch location 9. build: generate nix-shell scripts with HEREDOC 9.1. this is easier on eyes, one could review generated script in ./build 9.2. we don't have to escape quotes and chain commands with && 9.4. added some extra quoting for user-specified values
2020-11-11 15:53:42 +00:00
DIR=$(pwd)
build: combine docker scripts for core and legacy into one
2019-09-08 15:16:53 +00:00
# build core
for BITCOIN_ONLY in 0 1; do
DIRSUFFIX=${BITCOIN_ONLY/1/-bitcoinonly}
DIRSUFFIX=${DIRSUFFIX/0/}
build: review the build script [skip ci] 1. make it work on macOS hosts 2. add quoting to paths to prevent failures if user was foolish enough to put the repo on a path with spaces 3. use -o pipefail for robustness 4. use wget --no-config to prevent surprises from ~/.wgetrc 5. add --init to docker run for better signals 6. detect effective USER:GROUP like a grown up 7. break fs download url into multiple configurable parts 8. make the script independent on launch location 9. build: generate nix-shell scripts with HEREDOC 9.1. this is easier on eyes, one could review generated script in ./build 9.2. we don't have to escape quotes and chain commands with && 9.4. added some extra quoting for user-specified values
2020-11-11 15:53:42 +00:00
SCRIPT_NAME=".build_core_$BITCOIN_ONLY.sh"
cat <<EOF > "build/$SCRIPT_NAME"
# DO NOT MODIFY!
# this file was generated by ${BASH_SOURCE[0]}
# variant: core build BITCOIN_ONLY=$BITCOIN_ONLY
set -e -o pipefail
cd /tmp
git clone "$REPOSITORY" trezor-firmware
cd trezor-firmware/core
ln -s /build build
git checkout "$TAG"
git submodule update --init --recursive
poetry install
poetry run make clean vendor build_firmware
poetry run ../python/tools/firmware-fingerprint.py \
-o build/firmware/firmware.bin.fingerprint \
build/firmware/firmware.bin
chown -R $USER:$GROUP /build
EOF
ci: drop experimental --platform argument from docker
2021-01-22 15:55:27 +00:00
docker run -it --rm \
build: review the build script [skip ci] 1. make it work on macOS hosts 2. add quoting to paths to prevent failures if user was foolish enough to put the repo on a path with spaces 3. use -o pipefail for robustness 4. use wget --no-config to prevent surprises from ~/.wgetrc 5. add --init to docker run for better signals 6. detect effective USER:GROUP like a grown up 7. break fs download url into multiple configurable parts 8. make the script independent on launch location 9. build: generate nix-shell scripts with HEREDOC 9.1. this is easier on eyes, one could review generated script in ./build 9.2. we don't have to escape quotes and chain commands with && 9.4. added some extra quoting for user-specified values
2020-11-11 15:53:42 +00:00
-v "$DIR:/local" \
-v "$DIR/build/core$DIRSUFFIX":/build:z \
build: combine docker scripts for core and legacy into one
2019-09-08 15:16:53 +00:00
--env BITCOIN_ONLY="$BITCOIN_ONLY" \
--env PRODUCTION="$PRODUCTION" \
build: review the build script [skip ci] 1. make it work on macOS hosts 2. add quoting to paths to prevent failures if user was foolish enough to put the repo on a path with spaces 3. use -o pipefail for robustness 4. use wget --no-config to prevent surprises from ~/.wgetrc 5. add --init to docker run for better signals 6. detect effective USER:GROUP like a grown up 7. break fs download url into multiple configurable parts 8. make the script independent on launch location 9. build: generate nix-shell scripts with HEREDOC 9.1. this is easier on eyes, one could review generated script in ./build 9.2. we don't have to escape quotes and chain commands with && 9.4. added some extra quoting for user-specified values
2020-11-11 15:53:42 +00:00
--init \
docker: rename container name to trezor-firmware-build.nix
2020-06-07 12:11:03 +00:00
"$CONTAINER_NAME" \
build: review the build script [skip ci] 1. make it work on macOS hosts 2. add quoting to paths to prevent failures if user was foolish enough to put the repo on a path with spaces 3. use -o pipefail for robustness 4. use wget --no-config to prevent surprises from ~/.wgetrc 5. add --init to docker run for better signals 6. detect effective USER:GROUP like a grown up 7. break fs download url into multiple configurable parts 8. make the script independent on launch location 9. build: generate nix-shell scripts with HEREDOC 9.1. this is easier on eyes, one could review generated script in ./build 9.2. we don't have to escape quotes and chain commands with && 9.4. added some extra quoting for user-specified values
2020-11-11 15:53:42 +00:00
/nix/var/nix/profiles/default/bin/nix-shell --run "bash /local/build/$SCRIPT_NAME"
build: combine docker scripts for core and legacy into one
2019-09-08 15:16:53 +00:00
done
# build legacy
for BITCOIN_ONLY in 0 1; do
DIRSUFFIX=${BITCOIN_ONLY/1/-bitcoinonly}
DIRSUFFIX=${DIRSUFFIX/0/}
build: review the build script [skip ci] 1. make it work on macOS hosts 2. add quoting to paths to prevent failures if user was foolish enough to put the repo on a path with spaces 3. use -o pipefail for robustness 4. use wget --no-config to prevent surprises from ~/.wgetrc 5. add --init to docker run for better signals 6. detect effective USER:GROUP like a grown up 7. break fs download url into multiple configurable parts 8. make the script independent on launch location 9. build: generate nix-shell scripts with HEREDOC 9.1. this is easier on eyes, one could review generated script in ./build 9.2. we don't have to escape quotes and chain commands with && 9.4. added some extra quoting for user-specified values
2020-11-11 15:53:42 +00:00
SCRIPT_NAME=".build_legacy_$BITCOIN_ONLY.sh"
cat <<EOF > "build/$SCRIPT_NAME"
# DO NOT MODIFY!
# this file was generated by ${BASH_SOURCE[0]}
# variant: legacy build BITCOIN_ONLY=$BITCOIN_ONLY
set -e -o pipefail
cd /tmp
git clone "$REPOSITORY" trezor-firmware
cd trezor-firmware/legacy
ln -s /build build
git checkout "$TAG"
git submodule update --init --recursive
poetry install
poetry run script/cibuild
mkdir -p build/firmware
cp firmware/trezor.bin build/firmware/firmware.bin
cp firmware/trezor.elf build/firmware/firmware.elf
poetry run ../python/tools/firmware-fingerprint.py \
-o build/firmware/firmware.bin.fingerprint \
build/firmware/firmware.bin
chown -R $USER:$GROUP /build
EOF
ci: drop experimental --platform argument from docker
2021-01-22 15:55:27 +00:00
docker run -it --rm \
build: review the build script [skip ci] 1. make it work on macOS hosts 2. add quoting to paths to prevent failures if user was foolish enough to put the repo on a path with spaces 3. use -o pipefail for robustness 4. use wget --no-config to prevent surprises from ~/.wgetrc 5. add --init to docker run for better signals 6. detect effective USER:GROUP like a grown up 7. break fs download url into multiple configurable parts 8. make the script independent on launch location 9. build: generate nix-shell scripts with HEREDOC 9.1. this is easier on eyes, one could review generated script in ./build 9.2. we don't have to escape quotes and chain commands with && 9.4. added some extra quoting for user-specified values
2020-11-11 15:53:42 +00:00
-v "$DIR:/local" \
-v "$DIR/build/legacy$DIRSUFFIX":/build:z \
build: combine docker scripts for core and legacy into one
2019-09-08 15:16:53 +00:00
--env BITCOIN_ONLY="$BITCOIN_ONLY" \
--env MEMORY_PROTECT="$MEMORY_PROTECT" \
build: review the build script [skip ci] 1. make it work on macOS hosts 2. add quoting to paths to prevent failures if user was foolish enough to put the repo on a path with spaces 3. use -o pipefail for robustness 4. use wget --no-config to prevent surprises from ~/.wgetrc 5. add --init to docker run for better signals 6. detect effective USER:GROUP like a grown up 7. break fs download url into multiple configurable parts 8. make the script independent on launch location 9. build: generate nix-shell scripts with HEREDOC 9.1. this is easier on eyes, one could review generated script in ./build 9.2. we don't have to escape quotes and chain commands with && 9.4. added some extra quoting for user-specified values
2020-11-11 15:53:42 +00:00
--init \
docker: rename container name to trezor-firmware-build.nix
2020-06-07 12:11:03 +00:00
"$CONTAINER_NAME" \
build: review the build script [skip ci] 1. make it work on macOS hosts 2. add quoting to paths to prevent failures if user was foolish enough to put the repo on a path with spaces 3. use -o pipefail for robustness 4. use wget --no-config to prevent surprises from ~/.wgetrc 5. add --init to docker run for better signals 6. detect effective USER:GROUP like a grown up 7. break fs download url into multiple configurable parts 8. make the script independent on launch location 9. build: generate nix-shell scripts with HEREDOC 9.1. this is easier on eyes, one could review generated script in ./build 9.2. we don't have to escape quotes and chain commands with && 9.4. added some extra quoting for user-specified values
2020-11-11 15:53:42 +00:00
/nix/var/nix/profiles/default/bin/nix-shell --run "bash /local/build/$SCRIPT_NAME"
build: combine docker scripts for core and legacy into one
2019-09-08 15:16:53 +00:00
done
build-docker.sh: print fw fingerprints after build (#1209)
2020-08-21 12:09:21 +00:00
# all built, show fingerprints
echo "Fingerprints:"
for VARIANT in core legacy; do
for BITCOIN_ONLY in 0 1; do
DIRSUFFIX=${BITCOIN_ONLY/1/-bitcoinonly}
DIRSUFFIX=${DIRSUFFIX/0/}
FWPATH=build/${VARIANT}${DIRSUFFIX}/firmware/firmware.bin
FINGERPRINT=$(tr -d '\n' < $FWPATH.fingerprint)
echo "$FINGERPRINT $FWPATH"
done
done
Reference in New Issue Copy Permalink