00:05:00 https://paste.ubuntu.com/p/c5KXzmSn6d/ 00:05:55 pls no 00:07:14 I get 3f2ea03affdc75ccccbee148d03af9ad92da4af012c91a84a447863aa48f5b36 here. 00:08:58 ok got the same message 00:09:59 db55aa2ac8c7b8d8f9e471c09b0d3b7214360e24e94558f120124a1b3d84b336 osslsigncode-1.7.1.tar.gz 00:12:21 bitcoin uses osslsigncode 2.0 https://github.com/bitcoin/bitcoin/blob/master/contrib/gitian-build.py 00:13:24 It's a different SHA256 hash on every run here. 00:13:32 why is tor gateway +q here? 00:14:49 It's not a tar.gz archive, it's a web page. 00:15:10 I'm currently testing with the 2.0 version 00:15:42 elFado: spam, though should get removed again 00:16:21 somethingUniqueR: kastelo was a scam afaik 00:17:08 why do we even use osslsigncode, we don't sign our .exe 00:18:12 guess we can just delete that from gitian-build.py 00:22:56 iDunk: I'm building now with line 97-100 removed 00:23:16 would it be fine if everyone does that for this release or should we tag v0.17.2.1? 00:38:00 removing line 97-100 does not change the resulting hashes so should be fine without retagging 00:38:45 built 0.17.2.0 on fedora with cmake -DMANUAL_SUBMODULES=1; make 00:38:58 regular make fails with Submodule 'external/miniupnp' is not up-to-date. 00:38:59 FYI 00:39:13 git submodule sync 00:39:17 git submodule update 00:44:05 ok those two seem to do the track after git checkout release-v0.17 00:44:10 trick 00:58:26 github lists boost dependency as 1.58 - has that changed? now i see: 00:58:43 monero/tests/unit_tests/node_server.cpp:355:21: error: max_listen_connections is not a member of boost::asio::socket_base 00:58:49 i have boost 1.60 00:59:59 (i didn't see that error when i did cmake -DMANUAL_SUBMODULES=1 01:01:22 that is in unit tests 01:01:35 which afaik do not get build if you execute cmake manually 01:02:03 ah ok 01:05:17 guess that is something we should fix 01:05:24 so that minimum dependency is 1.58 again 01:17:11 i also tried to build with a private openssl 1.1.1k library and got a lot 01:17:24 of boost related ssl issues 01:17:36 tomorrow i'll try with a newer boost 01:17:40 thanks 02:04:37 https://paste.ubuntu.com/p/k3NnVqtSHP/ 02:09:58 iDunk: https://paste.debian.net/hidden/502c34a4/ 02:10:02 two don't match so far :/ 02:10:35 did you do apt-get update and apt-get upgrade? we had issues with a gcc update once 02:12:51 That host is always up to date. 02:23:54 android hashes match again 02:48:12 FUK has bееn intеnsеly hostilе to Monеro for ovеr 4 yеars. Making minеrs for Monеro, making a pool for Monеro, making codе that Monеro copiеd, not using bugs to stеal millions from еxchangеs. Wow. Such grеat hostility. 04:49:51 selsta, may you point me to some info how to make such a reproducible build? I already was able to create a couple of "depends" 04:51:13 or iDunk 04:52:01 ./contrib/gitian/gitian-build.py ? 06:41:09 buenas tardes a todos 06:52:23 hola 09:53:23 mj-xmr: there's a README.md with instructions in contrib/gitian 10:03:45 Thanks 12:09:40 just a heads up re: boost. I see on Actions, that "Perfect-daemon" is building a fix for the Boost 1.58 12:23:22 hmm it is already PRed I think 12:26:56 Should I reproduce 0.17.2.0 or wait? 12:27:02 Want to be sure before I kick it off. 12:34:40 sethsimmons: I guess a third result would be helpful 12:35:00 I don't have my env anymore so will take some time 12:35:02 But I can 12:35:24 2 of my hashes don't match 12:35:27 and I don't know how to proceed lol 12:35:43 I will prepare it for the next time. 12:40:35 sethsimmons: you have to change the gitian-build.py like this: https://github.com/monero-project/monero/pull/7652/files 12:40:40 before building 12:45:58 Ok will take a stab at that shortly 13:10:22 Running now with those lines removed 13:11:07 mostly interested in linux hashes 13:15:04 Running now too 13:15:21 I had to reinstall everything from scratch, it's been a while since 0.17.1.9 :D 13:58:43 my hashes: https://paste.debian.net/1192772/ 14:07:33 yours match iDunk 14:07:45 * selsta waits for more hashes 14:16:47 so whats the deal? is the thing all comboobled or can i just follow the same instructions as before? 14:17:09 * sethsimmons < https://matrix.org/_matrix/media/r0/download/matrix.org/cUInGDHaFMOeaYXrkJtzcCii/message.txt > 14:17:16 Linux hashes ^ 14:17:36 sethsimmons: yours match mine again 14:17:46 scoobybejesus: iDunk: did you have the old cache? 14:17:48 Yeah don't match scoobys 14:17:52 weird 14:18:03 Mine was completely from scratch, had never built on this host before 14:18:04 both sethsimmons and me did it from scratch 14:18:12 i did not do from scratch 14:18:33 seems like "something" changed that causes inconsistencies if not done from scratch 14:18:34 I had the old cache. 14:20:45 I did this but edited the gitian-build.py: https://www.reddit.com/r/Monero/comments/heng91/cli_v01601_nitrogen_nebula_has_been_tagged_you/fvsbcuc/?utm_source=reddit&utm_medium=web2x&context=3 14:26:44 Silly question: do I need to follow this step: git clone git⊙gc:monero-project/gitian.sigs.git 14:26:46 ? 14:27:03 Only to push sigs in a PR 14:27:12 Not to generate the hashes and compare FWIW 14:27:20 thx 14:27:28 but pushing sigs via PR is important for those who can (I need to) 14:31:24 We are not at the point where I can deploy a docker container, git clone, build and get a hash? 14:31:36 Thats what this does 14:31:46 It's a script to automate that for you 14:31:55 ooooh 14:32:33 The steps here create the user needed, install dependencies, run the build script, and outputs all hashes 14:32:42 I'm building on one slow machine, but I will plug a faster one soon. 14:32:44 Just edit user and version to match 14:42:03 hm so still have to run gitian-build.py outside docker. I was kind of hoping it would be even more containerized so everything happened inside docker :) 14:43:45 For a community that prides itself on manipulating people, you can't manage a single guy that spends most of his time in his underpants :D 14:47:39 OK, building on my best horse as well. 14:48:00 I'm still building somehow 14:48:06 Previous builds took less time 14:51:05 All of the building does, but still have to setup the build env for Docker 14:51:24 But yes, would be nice to have a pre-built container image that can be run to build the latest tag 14:54:46 * sethsimmons < https://matrix.org/_matrix/media/r0/download/matrix.org/IINKreGJmWYkUFZNKZkxgcaT/message.txt > 14:54:57 * sethsimmons < https://matrix.org/_matrix/media/r0/download/matrix.org/sSiEzZnCEtSwObjDgSpETqjU/message.txt > 15:03:09 my hashes: https://paste.debian.net/hidden/3a64f669/ 15:03:17 I don't remember how to build MacOS binaries 15:04:15 https://www.irccloud.com/pastebin/d8AK4JFI/ 15:04:20 sech1: ^ 15:06:45 My linux hashes didn't match with scoobybejesus - did you edit gitian-build.py as was recommended? 15:07:30 i commented out ilnes 97-100, yeah 15:08:17 me too 15:08:35 it seems to be an issue with the cache, maybe some compiler got updated or so 15:08:46 But I screwed up and restarted the build several times before it ran smoothly 15:10:09 mine: https://paste.debian.net/hidden/7dbf7c52/ 15:12:21 selsta your hashes match with mine. I'll start the build again to build MacOS binary 15:18:40 https://hub.docker.com/layers/sethsimmons/simple-monerod/v0.17.2.0/images/sha256-db1486b946f664c9c0e04a2feb5ee74add8bdfbe6f85df647f111f5a152d06d1?context=repo 15:18:52 Docker image pushed if anyone wants to test/get ahead of the game running it. 15:19:40 Still building reproducible hashes. 15:24:59 I guess downloading some docker image to do the process for you also isn't ideal if you can't verify what the docker image does :D 15:25:08 (not familiar with docker so I can be wrong here) 15:25:09 heh 15:25:27 well ideally there is a github page with a Dockerfile that is used in the creation of said image 15:25:41 so you can inspect the Dockerfile, and use it to build your own image 15:26:24 Running v0.17.2.0 on my server already 15:27:55 are there release notes or something to see the main changes? or only commits at this point? 15:28:25 https://github.com/monero-project/monero/compare/v0.17.1.9...v0.17.2.0 15:28:46 ``` 15:28:56 * sethsimmons < https://matrix.org/_matrix/media/r0/download/matrix.org/ueKOtRgluKNtMtfrNWXDdusL/message.txt > 15:29:33 Inge-: mostly stability fixes 15:29:54 and some longer-term hardening against node attacks I presume 15:30:20 not yet in this release 15:30:45 k 15:31:03 I see quite a few P2P fixes from anon CCS 15:31:09 in v0.17.2.0 15:31:40 mostly seg fault / deadlock / race condition fixes 15:34:02 Oh, and my little bugfix PR (7615) is there too 15:34:36 GUI has more interesting changes this time 15:35:03 .merge+ 7652 7653 7654 7655 15:35:03 Added 15:39:03 have been running the anon CCS fixes for a while on multiple nodes and everything seems quite stable :) 15:39:15 though v0.17.1.9 also had 70 days update for me 15:39:16 selsta: with or without banlist? 15:39:34 do you mean 70 days uptime? 15:39:38 yes 15:39:39 typo 15:39:50 or thought about the right word and wrote the wrong one lol 15:39:54 yes, I've been running 0.17.1.9 non-stop pretty much since it was released 15:40:22 Inge-: most with, 1 without 15:51:02 Final hashes: https://paste.debian.net/1192802/ 15:55:51 Inge-: release notes https://paste.debian.net/hidden/80c091c8/ 15:56:31 "- Only print blocked nodes once with --enable-dns-blocklist (#7295)" 15:56:36 Thank God, my poor logs XD 16:00:43 im gettin this: /home/xmrchain/monero/tests/unit_tests/node_server.cpp: In lambda function: 16:00:43 acceptor.listen(boost::asio::socket_base::max_listen_connections, ec); 16:00:56 when trying to compile 17.2 16:01:13 gingeropolous: https://github.com/monero-project/monero/pull/7654/files 16:01:15 or update boost 16:01:22 but that's just test, you can ignore it 16:01:30 daemon should built fine 16:01:35 build* 16:01:41 k. danke 16:04:05 Hashes late into the show: https://paste.debian.net/1192805/ 16:04:26 selsta "7 people who worked ..." and the list has 9 people 16:04:51 ty 16:08:12 xmrchain is on 17.2 16:09:56 hashes from me, this time with MacOS binaries: https://paste.debian.net/hidden/6d92502e/ 16:10:11 sech1: please post to gitian.sigs repo 16:10:19 if you have gpg installed :D 16:10:34 I don't... 17:33:37 Does anyone here know of a secure implementation of Ring Signatures. Specifically traceable Ring Signatures? 17:37:24 Monero's implementation is meant to be secure. At least for Monero's usage. 17:57:32 i know you guys are busy atm but maybe someone has help: https://github.com/monero-project/monero-gui/issues/2806#issuecomment-816019049 17:57:32 > Can an @monero-project maintainer comment on why there is a requirement for a git clone in order to run make release as noted in the README.md file?? 18:00:04 That's how it determines the version string. I don't think there's another reason. 18:28:00 kinghat[m], I'd propose to clone from a local repository. 18:28:42 So clone from outside their build system, pass the cloned local copy to the BS, and from within clone the passed one. 18:29:16 You're not the issue starter, are you? 18:31:21 no sorry, am just following along as I think monero should be packaged in flatpak for Linux. 18:32:51 I think best would be to add a NO_GIT_VERSION cmake option. 18:33:19 Set that and it uses... "unknown" as a version string. 18:33:34 I replied him. No problem. 18:37:34 thanks selsta 18:44:13 thanks for the replies all