@@ -6,7 +6,7 @@ The `macdeployqtplus` script should not be run manually. Instead, after building
6
6
make deploy
7
7
```
8
8
9
- When complete, it will have produced ` Bitcoin-Core.dmg ` .
9
+ When complete, it will have produced ` Bitcoin-Core.zip ` .
10
10
11
11
## SDK Extraction
12
12
@@ -60,10 +60,10 @@ previous stage) as the first argument.
60
60
61
61
The ` sha256sum ` of the generated TAR.GZ archive should be ` df75d30ecafc429e905134333aeae56ac65fac67cb4182622398fd717df77619 ` .
62
62
63
- ## Deterministic macOS DMG Notes
63
+ ## Deterministic macOS App Notes
64
64
65
- Working macOS DMGs are created in Linux by combining a recent ` clang ` , the Apple
66
- ` binutils ` (` ld ` , ` ar ` , etc) and DMG authoring tools .
65
+ macOS Applications are created in Linux by combining a recent ` clang ` and the Apple
66
+ ` binutils ` (` ld ` , ` ar ` , etc).
67
67
68
68
Apple uses ` clang ` extensively for development and has upstreamed the necessary
69
69
functionality so that a vanilla clang can take advantage. It supports the use of ` -F ` ,
@@ -93,20 +93,15 @@ created using these tools. The build process has been designed to avoid includin
93
93
SDK's files in Guix's outputs. All interim tarballs are fully deterministic and may be freely
94
94
redistributed.
95
95
96
- [ ` xorrisofs ` ] ( https://www.gnu.org/software/xorriso/ ) is used to create the DMG.
97
-
98
- A background image is added to DMG files by inserting a ` .DS_Store ` during creation.
99
-
100
96
As of OS X 10.9 Mavericks, using an Apple-blessed key to sign binaries is a requirement in
101
97
order to satisfy the new Gatekeeper requirements. Because this private key cannot be
102
98
shared, we'll have to be a bit creative in order for the build process to remain somewhat
103
99
deterministic. Here's how it works:
104
100
105
- - Builders use Guix to create an unsigned release. This outputs an unsigned DMG which
101
+ - Builders use Guix to create an unsigned release. This outputs an unsigned ZIP which
106
102
users may choose to bless and run. It also outputs an unsigned app structure in the form
107
- of a tarball, which also contains all of the tools that have been previously (deterministically)
108
- built in order to create a final DMG.
103
+ of a tarball.
109
104
- The Apple keyholder uses this unsigned app to create a detached signature, using the
110
105
script that is also included there. Detached signatures are available from this [ repository] ( https://github.com/bitcoin-core/bitcoin-detached-sigs ) .
111
106
- Builders feed the unsigned app + detached signature back into Guix. It uses the
112
- pre-built tools to recombine the pieces into a deterministic DMG .
107
+ pre-built tools to recombine the pieces into a deterministic ZIP .
0 commit comments