Skip to content

Instantly share code, notes, and snippets.

@hebasto

hebasto/guix-sigs.md

Last active September 28, 2025 12:12
Show Gist options
  • Save hebasto/7293726cbfcd0b58e1cfd5418316cee3 to your computer and use it in GitHub Desktop.
Save hebasto/7293726cbfcd0b58e1cfd5418316cee3 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. hebasto revised this gist Sep 28, 2025. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -26,7 +26,7 @@ popd

    ### Preparing repository

    If building for a tag:
    If building for a [tag](https://github.com/bitcoin/bitcoin/tags):

    ```
    VERSION=27.0rc2
  2. hebasto revised this gist Mar 13, 2025. 1 changed file with 2 additions and 2 deletions.
    4 changes: 2 additions & 2 deletions guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -4,8 +4,8 @@

    ```
    export SIGNER="hebasto"
    export GUIX_SIGS_REPO="/home/hebasto/guix.sigs"
    export DETACHED_SIGS_REPO="/home/hebasto/bitcoin-detached-sigs"
    export GUIX_SIGS_REPO="/home/hebasto/dev/guix.sigs"
    export DETACHED_SIGS_REPO="/home/hebasto/dev/bitcoin-detached-sigs"
    ```

    ### Prerequisites
  3. hebasto revised this gist Mar 28, 2024. 1 changed file with 2 additions and 2 deletions.
    4 changes: 2 additions & 2 deletions guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -21,15 +21,15 @@ git config remote.pushDefault hebasto
    popd
    ```

    3. The [`Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers`](https://github.com/bitcoin/bitcoin/tree/master/contrib/macdeploy#sdk-extraction) subdirectory must resides in the `depends/SDKs`directory.
    3. The [`Xcode-15.0-15A240d-extracted-SDK-with-libcxx-headers`](https://github.com/bitcoin/bitcoin/tree/master/contrib/macdeploy#sdk-extraction) subdirectory must resides in the `depends/SDKs`directory.


    ### Preparing repository

    If building for a tag:

    ```
    VERSION=23.0rc2
    VERSION=27.0rc2
    git fetch
    git checkout v$VERSION
    ```
  4. hebasto revised this gist Sep 20, 2022. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -15,7 +15,7 @@ export DETACHED_SIGS_REPO="/home/hebasto/bitcoin-detached-sigs"
    2. Fork the [`bitcoin-core/guix.sigs`](https://github.com/bitcoin-core/guix.sigs) repository on GitHub (*if not forked yet*):

    ```
    pushd /home/hebasto/guix.sigs
    pushd $GUIX_SIGS_REPO
    git remote add hebasto [email protected]:hebasto/guix.sigs.git
    git config remote.pushDefault hebasto
    popd
  5. hebasto revised this gist Mar 10, 2022. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -29,7 +29,7 @@ popd
    If building for a tag:

    ```
    VERSION=23.0rc1
    VERSION=23.0rc2
    git fetch
    git checkout v$VERSION
    ```
  6. hebasto revised this gist Mar 8, 2022. 1 changed file with 2 additions and 2 deletions.
    4 changes: 2 additions & 2 deletions guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -21,15 +21,15 @@ git config remote.pushDefault hebasto
    popd
    ```

    3. The [`Xcode-12.1-12A7403-extracted-SDK-with-libcxx-headers`](https://github.com/bitcoin/bitcoin/tree/master/contrib/macdeploy#sdk-extraction) subdirectory must resides in the `depends/SDKs`directory.
    3. The [`Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers`](https://github.com/bitcoin/bitcoin/tree/master/contrib/macdeploy#sdk-extraction) subdirectory must resides in the `depends/SDKs`directory.


    ### Preparing repository

    If building for a tag:

    ```
    VERSION=22.0rc3
    VERSION=23.0rc1
    git fetch
    git checkout v$VERSION
    ```
  7. hebasto revised this gist Sep 3, 2021. 1 changed file with 2 additions and 2 deletions.
    4 changes: 2 additions & 2 deletions guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -12,7 +12,7 @@ export DETACHED_SIGS_REPO="/home/hebasto/bitcoin-detached-sigs"

    1. Make sure your public key is available on https://keys.openpgp.org/.

    1. Fork the [`bitcoin-core/guix.sigs`](https://github.com/bitcoin-core/guix.sigs) repository on GitHub (*if not forked yet*).
    2. Fork the [`bitcoin-core/guix.sigs`](https://github.com/bitcoin-core/guix.sigs) repository on GitHub (*if not forked yet*):

    ```
    pushd /home/hebasto/guix.sigs
    @@ -21,7 +21,7 @@ git config remote.pushDefault hebasto
    popd
    ```

    1. The [`Xcode-12.1-12A7403-extracted-SDK-with-libcxx-headers`](https://github.com/bitcoin/bitcoin/tree/master/contrib/macdeploy#sdk-extraction) subdirectory must resides in the `depends/SDKs`directory.
    3. The [`Xcode-12.1-12A7403-extracted-SDK-with-libcxx-headers`](https://github.com/bitcoin/bitcoin/tree/master/contrib/macdeploy#sdk-extraction) subdirectory must resides in the `depends/SDKs`directory.


    ### Preparing repository
  8. hebasto revised this gist Sep 3, 2021. 1 changed file with 5 additions and 2 deletions.
    7 changes: 5 additions & 2 deletions guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -10,9 +10,9 @@ export DETACHED_SIGS_REPO="/home/hebasto/bitcoin-detached-sigs"

    ### Prerequisites

    The [`Xcode-12.1-12A7403-extracted-SDK-with-libcxx-headers`](https://github.com/bitcoin/bitcoin/tree/master/contrib/macdeploy#sdk-extraction) subdirectory must resides in the `depends/SDKs`directory.
    1. Make sure your public key is available on https://keys.openpgp.org/.

    Fork the [`bitcoin-core/guix.sigs`](https://github.com/bitcoin-core/guix.sigs) repository on GitHub (*if not forked yet*).
    1. Fork the [`bitcoin-core/guix.sigs`](https://github.com/bitcoin-core/guix.sigs) repository on GitHub (*if not forked yet*).

    ```
    pushd /home/hebasto/guix.sigs
    @@ -21,6 +21,9 @@ git config remote.pushDefault hebasto
    popd
    ```

    1. The [`Xcode-12.1-12A7403-extracted-SDK-with-libcxx-headers`](https://github.com/bitcoin/bitcoin/tree/master/contrib/macdeploy#sdk-extraction) subdirectory must resides in the `depends/SDKs`directory.


    ### Preparing repository

    If building for a tag:
  9. hebasto revised this gist Aug 26, 2021. 1 changed file with 2 additions and 1 deletion.
    3 changes: 2 additions & 1 deletion guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -26,7 +26,8 @@ popd
    If building for a tag:

    ```
    VERSION=22.0rc2
    VERSION=22.0rc3
    git fetch
    git checkout v$VERSION
    ```

  10. hebasto revised this gist Aug 4, 2021. 1 changed file with 2 additions and 2 deletions.
    4 changes: 2 additions & 2 deletions guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -43,7 +43,7 @@ git checkout v$VERSION
    pushd $GUIX_SIGS_REPO
    git switch main
    git pull
    git branch ${VERSION}-non-codesigned
    git checkout -b ${VERSION}-non-codesigned
    git add $VERSION
    git commit -m "Add attestations by $SIGNER for $VERSION non-codesigned"
    git push
    @@ -69,7 +69,7 @@ popd
    pushd $GUIX_SIGS_REPO
    git switch main
    git pull
    git branch ${VERSION}-codesigned
    git checkout -b ${VERSION}-codesigned
    git add $VERSION
    git commit -m "Add attestations by $SIGNER for $VERSION codesigned"
    git push
  11. hebasto revised this gist Aug 4, 2021. 1 changed file with 1 addition and 0 deletions.
    1 change: 1 addition & 0 deletions guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -82,6 +82,7 @@ Submit a PR to the [`bitcoin-core/guix.sigs`](https://github.com/bitcoin-core/gu

    ```
    pushd $GUIX_SIGS_REPO
    git switch main
    git pull
    popd
    ./contrib/guix/guix-verify
  12. hebasto revised this gist Aug 4, 2021. 1 changed file with 2 additions and 2 deletions.
    4 changes: 2 additions & 2 deletions guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -43,7 +43,7 @@ git checkout v$VERSION
    pushd $GUIX_SIGS_REPO
    git switch main
    git pull
    git checkout -b ${VERSION}-non-codesigned
    git branch ${VERSION}-non-codesigned
    git add $VERSION
    git commit -m "Add attestations by $SIGNER for $VERSION non-codesigned"
    git push
    @@ -69,7 +69,7 @@ popd
    pushd $GUIX_SIGS_REPO
    git switch main
    git pull
    git checkout -b ${VERSION}-codesigned
    git branch ${VERSION}-codesigned
    git add $VERSION
    git commit -m "Add attestations by $SIGNER for $VERSION codesigned"
    git push
  13. hebasto revised this gist Aug 4, 2021. 1 changed file with 0 additions and 2 deletions.
    2 changes: 0 additions & 2 deletions guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -47,7 +47,6 @@ git checkout -b ${VERSION}-non-codesigned
    git add $VERSION
    git commit -m "Add attestations by $SIGNER for $VERSION non-codesigned"
    git push
    git switch main
    popd
    ```

    @@ -74,7 +73,6 @@ git checkout -b ${VERSION}-codesigned
    git add $VERSION
    git commit -m "Add attestations by $SIGNER for $VERSION codesigned"
    git push
    git switch main
    popd
    ```

  14. hebasto revised this gist Aug 4, 2021. 1 changed file with 4 additions and 0 deletions.
    4 changes: 4 additions & 0 deletions guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -41,6 +41,8 @@ git checkout v$VERSION
    ```
    ./contrib/guix/guix-attest
    pushd $GUIX_SIGS_REPO
    git switch main
    git pull
    git checkout -b ${VERSION}-non-codesigned
    git add $VERSION
    git commit -m "Add attestations by $SIGNER for $VERSION non-codesigned"
    @@ -66,6 +68,8 @@ popd
    ```
    ./contrib/guix/guix-attest
    pushd $GUIX_SIGS_REPO
    git switch main
    git pull
    git checkout -b ${VERSION}-codesigned
    git add $VERSION
    git commit -m "Add attestations by $SIGNER for $VERSION codesigned"
  15. hebasto revised this gist Aug 4, 2021. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -26,7 +26,7 @@ popd
    If building for a tag:

    ```
    VERSION=22.0rc1
    VERSION=22.0rc2
    git checkout v$VERSION
    ```

  16. hebasto revised this gist Jul 22, 2021. 1 changed file with 5 additions and 5 deletions.
    10 changes: 5 additions & 5 deletions guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -33,13 +33,13 @@ git checkout v$VERSION
    ### Building

    ```
    contrib/guix/guix-build
    ./contrib/guix/guix-build
    ```

    ### Attesting non-codesigned binaries

    ```
    contrib/guix/guix-attest
    ./contrib/guix/guix-attest
    pushd $GUIX_SIGS_REPO
    git checkout -b ${VERSION}-non-codesigned
    git add $VERSION
    @@ -58,13 +58,13 @@ pushd $DETACHED_SIGS_REPO
    git fetch
    git checkout v$VERSION
    popd
    contrib/guix/guix-codesign
    ./contrib/guix/guix-codesign
    ```

    ### Attesting codesigned binaries

    ```
    contrib/guix/guix-attest
    ./contrib/guix/guix-attest
    pushd $GUIX_SIGS_REPO
    git checkout -b ${VERSION}-codesigned
    git add $VERSION
    @@ -82,5 +82,5 @@ Submit a PR to the [`bitcoin-core/guix.sigs`](https://github.com/bitcoin-core/gu
    pushd $GUIX_SIGS_REPO
    git pull
    popd
    contrib/guix/guix-verify
    ./contrib/guix/guix-verify
    ```
  17. hebasto revised this gist Jul 22, 2021. 1 changed file with 1 addition and 7 deletions.
    8 changes: 1 addition & 7 deletions guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -30,12 +30,6 @@ VERSION=22.0rc1
    git checkout v$VERSION
    ```

    If building for a non-tagged commit:

    ```
    VERSION=$(git rev-parse --short=12 HEAD)
    ```

    ### Building

    ```
    @@ -62,7 +56,7 @@ Submit a PR to the [`bitcoin-core/guix.sigs`](https://github.com/bitcoin-core/gu
    ```
    pushd $DETACHED_SIGS_REPO
    git fetch
    git checkout $VERSION
    git checkout v$VERSION
    popd
    contrib/guix/guix-codesign
    ```
  18. hebasto revised this gist Jul 20, 2021. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -10,7 +10,7 @@ export DETACHED_SIGS_REPO="/home/hebasto/bitcoin-detached-sigs"

    ### Prerequisites

    The `Xcode-12.1-12A7403-extracted-SDK-with-libcxx-headers` subdirectory must resides in the `depends/SDKs`directory.
    The [`Xcode-12.1-12A7403-extracted-SDK-with-libcxx-headers`](https://github.com/bitcoin/bitcoin/tree/master/contrib/macdeploy#sdk-extraction) subdirectory must resides in the `depends/SDKs`directory.

    Fork the [`bitcoin-core/guix.sigs`](https://github.com/bitcoin-core/guix.sigs) repository on GitHub (*if not forked yet*).

  19. hebasto revised this gist Jul 20, 2021. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -85,7 +85,7 @@ Submit a PR to the [`bitcoin-core/guix.sigs`](https://github.com/bitcoin-core/gu
    ### Verifying

    ```
    pushd $DETACHED_SIGS_REPO
    pushd $GUIX_SIGS_REPO
    git pull
    popd
    contrib/guix/guix-verify
  20. hebasto revised this gist Jul 20, 2021. 1 changed file with 3 additions and 0 deletions.
    3 changes: 3 additions & 0 deletions guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -85,5 +85,8 @@ Submit a PR to the [`bitcoin-core/guix.sigs`](https://github.com/bitcoin-core/gu
    ### Verifying

    ```
    pushd $DETACHED_SIGS_REPO
    git pull
    popd
    contrib/guix/guix-verify
    ```
  21. hebasto revised this gist Jul 20, 2021. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -74,7 +74,7 @@ contrib/guix/guix-attest
    pushd $GUIX_SIGS_REPO
    git checkout -b ${VERSION}-codesigned
    git add $VERSION
    git commit -m "Add hebasto Guix attestations for $VERSION codesigned"
    git commit -m "Add attestations by $SIGNER for $VERSION codesigned"
    git push
    git switch main
    popd
  22. hebasto revised this gist Jul 20, 2021. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -49,7 +49,7 @@ contrib/guix/guix-attest
    pushd $GUIX_SIGS_REPO
    git checkout -b ${VERSION}-non-codesigned
    git add $VERSION
    git commit -m "Add attestations by ${SIGNER} for ${VERSION} non-codesigned"
    git commit -m "Add attestations by $SIGNER for $VERSION non-codesigned"
    git push
    git switch main
    popd
  23. hebasto revised this gist Jul 20, 2021. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -3,7 +3,7 @@
    ### Common environment variables

    ```
    export SIGNER="0x410108112E7EA81F=hebasto"
    export SIGNER="hebasto"
    export GUIX_SIGS_REPO="/home/hebasto/guix.sigs"
    export DETACHED_SIGS_REPO="/home/hebasto/bitcoin-detached-sigs"
    ```
  24. hebasto revised this gist Jul 20, 2021. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -49,7 +49,7 @@ contrib/guix/guix-attest
    pushd $GUIX_SIGS_REPO
    git checkout -b ${VERSION}-non-codesigned
    git add $VERSION
    git commit -m "Add hebasto Guix attestations for $VERSION non-codesigned"
    git commit -m "Add attestations by ${SIGNER} for ${VERSION} non-codesigned"
    git push
    git switch main
    popd
  25. hebasto revised this gist Jul 20, 2021. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -26,7 +26,7 @@ popd
    If building for a tag:

    ```
    VERSION=21.99-guixtest1
    VERSION=22.0rc1
    git checkout v$VERSION
    ```

  26. hebasto revised this gist May 29, 2021. 1 changed file with 2 additions and 1 deletion.
    3 changes: 2 additions & 1 deletion guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -61,7 +61,8 @@ Submit a PR to the [`bitcoin-core/guix.sigs`](https://github.com/bitcoin-core/gu

    ```
    pushd $DETACHED_SIGS_REPO
    git switch guix-testing
    git fetch
    git checkout $VERSION
    popd
    contrib/guix/guix-codesign
    ```
  27. hebasto revised this gist May 26, 2021. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -84,5 +84,5 @@ Submit a PR to the [`bitcoin-core/guix.sigs`](https://github.com/bitcoin-core/gu
    ### Verifying

    ```
    env GUIX_SIGS_REPO=/home/hebasto/guix.sigs contrib/guix/guix-verify
    contrib/guix/guix-verify
    ```
  28. hebasto revised this gist May 26, 2021. 1 changed file with 29 additions and 3 deletions.
    32 changes: 29 additions & 3 deletions guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -3,7 +3,9 @@
    ### Common environment variables

    ```
    export FINGERPRINT="0x410108112E7EA81F=hebasto"
    export SIGNER="0x410108112E7EA81F=hebasto"
    export GUIX_SIGS_REPO="/home/hebasto/guix.sigs"
    export DETACHED_SIGS_REPO="/home/hebasto/bitcoin-detached-sigs"
    ```

    ### Prerequisites
    @@ -43,8 +45,8 @@ contrib/guix/guix-build
    ### Attesting non-codesigned binaries

    ```
    env GUIX_SIGS_REPO=/home/hebasto/guix.sigs SIGNER=$FINGERPRINT contrib/guix/guix-attest
    pushd /home/hebasto/guix.sigs
    contrib/guix/guix-attest
    pushd $GUIX_SIGS_REPO
    git checkout -b ${VERSION}-non-codesigned
    git add $VERSION
    git commit -m "Add hebasto Guix attestations for $VERSION non-codesigned"
    @@ -55,6 +57,30 @@ popd

    Submit a PR to the [`bitcoin-core/guix.sigs`](https://github.com/bitcoin-core/guix.sigs) repository on GitHub.

    ### Signing binaries

    ```
    pushd $DETACHED_SIGS_REPO
    git switch guix-testing
    popd
    contrib/guix/guix-codesign
    ```

    ### Attesting codesigned binaries

    ```
    contrib/guix/guix-attest
    pushd $GUIX_SIGS_REPO
    git checkout -b ${VERSION}-codesigned
    git add $VERSION
    git commit -m "Add hebasto Guix attestations for $VERSION codesigned"
    git push
    git switch main
    popd
    ```

    Submit a PR to the [`bitcoin-core/guix.sigs`](https://github.com/bitcoin-core/guix.sigs) repository on GitHub.

    ### Verifying

    ```
  29. hebasto revised this gist May 26, 2021. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -49,7 +49,7 @@ git checkout -b ${VERSION}-non-codesigned
    git add $VERSION
    git commit -m "Add hebasto Guix attestations for $VERSION non-codesigned"
    git push
    git switch master
    git switch main
    popd
    ```

  30. hebasto revised this gist May 26, 2021. 1 changed file with 15 additions and 1 deletion.
    16 changes: 15 additions & 1 deletion guix-sigs.md
    View file
    Original file line number Diff line number Diff line change
    @@ -19,6 +19,21 @@ git config remote.pushDefault hebasto
    popd
    ```

    ### Preparing repository

    If building for a tag:

    ```
    VERSION=21.99-guixtest1
    git checkout v$VERSION
    ```

    If building for a non-tagged commit:

    ```
    VERSION=$(git rev-parse --short=12 HEAD)
    ```

    ### Building

    ```
    @@ -28,7 +43,6 @@ contrib/guix/guix-build
    ### Attesting non-codesigned binaries

    ```
    VERSION=21.99-guixtest1 # or VERSION=$(git rev-parse --short=12 HEAD)
    env GUIX_SIGS_REPO=/home/hebasto/guix.sigs SIGNER=$FINGERPRINT contrib/guix/guix-attest
    pushd /home/hebasto/guix.sigs
    git checkout -b ${VERSION}-non-codesigned