glacier-bitcoin-pinned.txt

Instructions for modifying the Glacier v0.9 doc to download Bitcoin
Core from the official release instead of the (now dead) Ubuntu PPA.

**** CAUTION ****
Do your own research. If the below instructions are malicious, your
coins could be stolen.
****

Under "Setup Protocol, Section V: Create App USBs":

Delete step 6.a.iv (which adds ppa:bitcoin/bitcoin).

In step 6.b., delete bitcoind from the end of the `sudo apt-get
install` command line.

After step 6 and before step 7, add the following to download the
official Bitcoin Core release package.

$ mkdir ~/bitcoin
$ cd ~/bitcoin
$ wget https://bitcoin.org/laanwj-releases.asc
$ wget https://bitcoin.org/bin/bitcoin-core-0.19.0.1/SHA256SUMS.asc
$ wget https://bitcoin.org/bin/bitcoin-core-0.19.0.1/bitcoin-0.19.0.1-x86_64-linux-gnu.tar.gz

Then drag the ~/bitcoin folder to the Q1 APP USB.
=========
In Glacier version 0.9, during the "Prepare Quarantined Workspaces",
on page 47, right after step 8 (which does `sudo dpkg -i *.deb`):

$ cd ~/bitcoin
$ gpg2 --import laanwj-releases.asc
$ gpg2 --verify SHA256SUMS.asc

Ensure you see: Good signature from "Wladimir J. van der Laan (Bitcoin
Core binary release signing key) <laanwj@gmail.com>"

Ignore this: WARNING: This key is not certified with a trusted
signature! There is no indication that the signature belongs to the
owner.

Ensure primary key fingerprint is: 01EA 5486 DE18 A882 D4C2  6845 90C8 019E 36C2 E964

$ sha256sum -c --ignore-missing SHA256SUMS.asc
bitcoin-0.19.0.1-x86_64-linux-gnu.tar.gz: OK
sha256sum: WARNING: 20 lines are improperly formatted

$ tar xf bitcoin-0.19.0.1-x86_64-linux-gnu.tar.gz
$ export PATH=$PATH:$HOME/bitcoin/bitcoin-0.19.0.1/bin
$ which bitcoin-cli
/home/ubuntu/bitcoin/bitcoin-0.19.0.1/bin/bitcoin-cli