Electrum 4.1.5 reproducible build

electrum-linux-4.1.5-repro.md

General instructions

Verifying 4.1.5 reproducible build by following the steps on

• https://github.com/spesmilo/electrum/tree/master/contrib/build-linux/sdist

Setup

• Digital Ocean Debian 10 x64

Repro steps

Install Docker

#https://docs.docker.com/engine/install/debian/

apt update && apt install -y \
    apt-transport-https \
    ca-certificates \
    curl \
    gnupg \
    lsb-release

curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg

echo \
  "deb [arch=amd64 signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/debian \
  $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null

apt update && apt install -y docker-ce docker-ce-cli containerd.io

docker --version

Clone repo and build 4.1.5

git clone https://github.com/spesmilo/electrum
pushd electrum
git checkout 4.1.5

pushd contrib/build-linux/sdist
ELECBUILD_COMMIT=HEAD ELECBUILD_NOCACHE=1 ./build.sh

popd
popd

Verify tarball from https://electrum.org/#download

wget https://download.electrum.org/4.1.5/Electrum-4.1.5.tar.gz
wget https://download.electrum.org/4.1.5/Electrum-4.1.5.tar.gz.ThomasV.asc
wget https://raw.githubusercontent.com/spesmilo/electrum-signatures/master/4.1.5/Electrum-4.1.5.tar.gz/Electrum-4.1.5.tar.gz.Emzy.asc

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 6694D8DE7BE8EE5631BED9502BD5824B7F9470E6
wget https://raw.githubusercontent.com/spesmilo/electrum/master/pubkeys/Emzy.asc
gpg --import Emzy.asc

gpg --verify Electrum-4.1.5.tar.gz.ThomasV.asc Electrum-4.1.5.tar.gz
gpg --verify Electrum-4.1.5.tar.gz.Emzy.asc Electrum-4.1.5.tar.gz
gpg --verify Electrum-4.1.5.tar.gz.ThomasV.asc electrum/dist/Electrum-4.1.5.tar.gz 
gpg --verify Electrum-4.1.5.tar.gz.Emzy.asc electrum/dist/Electrum-4.1.5.tar.gz 

shasum -a 256 Electrum-4.1.5.tar.gz electrum/dist/Electrum-4.1.5.tar.gz