mirror of
https://github.com/trezor/trezor-firmware.git
synced 2024-11-22 07:28:10 +00:00
101 lines
2.8 KiB
Bash
Executable File
101 lines
2.8 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -e
|
|
|
|
CONTAINER_NAME=trezor-firmware-env.nix
|
|
|
|
TAG=${1:-master}
|
|
REPOSITORY=${2:-local}
|
|
PRODUCTION=${PRODUCTION:-1}
|
|
MEMORY_PROTECT=${MEMORY_PROTECT:-1}
|
|
|
|
if [ "$REPOSITORY" = "local" ]; then
|
|
REPOSITORY=file:///local/
|
|
else
|
|
REPOSITORY=https://github.com/$REPOSITORY/trezor-firmware.git
|
|
fi
|
|
|
|
wget -nc -P ci/ http://dl-cdn.alpinelinux.org/alpine/v3.12/releases/x86_64/alpine-minirootfs-3.12.0-x86_64.tar.gz
|
|
docker build -t "$CONTAINER_NAME" ci/
|
|
|
|
USER=$(ls -lnd . | awk '{ print $3 }')
|
|
GROUP=$(ls -lnd . | awk '{ print $4 }')
|
|
|
|
mkdir -p $(pwd)/build/core $(pwd)/build/legacy
|
|
mkdir -p $(pwd)/build/core-bitcoinonly $(pwd)/build/legacy-bitcoinonly
|
|
|
|
# build core
|
|
|
|
for BITCOIN_ONLY in 0 1; do
|
|
|
|
DIRSUFFIX=${BITCOIN_ONLY/1/-bitcoinonly}
|
|
DIRSUFFIX=${DIRSUFFIX/0/}
|
|
|
|
docker run -it --rm \
|
|
-v $(pwd):/local \
|
|
-v $(pwd)/build/core"${DIRSUFFIX}":/build:z \
|
|
--env BITCOIN_ONLY="$BITCOIN_ONLY" \
|
|
--env PRODUCTION="$PRODUCTION" \
|
|
"$CONTAINER_NAME" \
|
|
/nix/var/nix/profiles/default/bin/nix-shell --run "\
|
|
cd /tmp && \
|
|
git clone $REPOSITORY trezor-firmware && \
|
|
cd trezor-firmware/core && \
|
|
ln -s /build build &&
|
|
git checkout $TAG && \
|
|
git submodule update --init --recursive && \
|
|
poetry install && \
|
|
poetry run make clean vendor build_firmware && \
|
|
poetry run ../python/tools/firmware-fingerprint.py \
|
|
-o build/firmware/firmware.bin.fingerprint \
|
|
build/firmware/firmware.bin && \
|
|
chown -R $USER:$GROUP /build"
|
|
|
|
done
|
|
|
|
# build legacy
|
|
|
|
for BITCOIN_ONLY in 0 1; do
|
|
|
|
DIRSUFFIX=${BITCOIN_ONLY/1/-bitcoinonly}
|
|
DIRSUFFIX=${DIRSUFFIX/0/}
|
|
|
|
docker run -it --rm \
|
|
-v $(pwd):/local \
|
|
-v $(pwd)/build/legacy"${DIRSUFFIX}":/build:z \
|
|
--env BITCOIN_ONLY="$BITCOIN_ONLY" \
|
|
--env MEMORY_PROTECT="$MEMORY_PROTECT" \
|
|
"$CONTAINER_NAME" \
|
|
/nix/var/nix/profiles/default/bin/nix-shell --run "\
|
|
cd /tmp && \
|
|
git clone $REPOSITORY trezor-firmware && \
|
|
cd trezor-firmware/legacy && \
|
|
ln -s /build build &&
|
|
git checkout $TAG && \
|
|
git submodule update --init --recursive && \
|
|
poetry install && \
|
|
poetry run script/cibuild && \
|
|
mkdir -p build/firmware && \
|
|
cp firmware/trezor.bin build/firmware/firmware.bin && \
|
|
cp firmware/trezor.elf build/firmware/firmware.elf && \
|
|
poetry run ../python/tools/firmware-fingerprint.py \
|
|
-o build/firmware/firmware.bin.fingerprint \
|
|
build/firmware/firmware.bin && \
|
|
chown -R $USER:$GROUP /build"
|
|
|
|
done
|
|
|
|
# all built, show fingerprints
|
|
|
|
echo "Fingerprints:"
|
|
for VARIANT in core legacy; do
|
|
for BITCOIN_ONLY in 0 1; do
|
|
|
|
DIRSUFFIX=${BITCOIN_ONLY/1/-bitcoinonly}
|
|
DIRSUFFIX=${DIRSUFFIX/0/}
|
|
|
|
FWPATH=build/${VARIANT}${DIRSUFFIX}/firmware/firmware.bin
|
|
FINGERPRINT=$(tr -d '\n' < $FWPATH.fingerprint)
|
|
echo "$FINGERPRINT $FWPATH"
|
|
done
|
|
done
|