GRIN/grim
1
0
Fork 1
mirror of https://code.gri.mw/GUI/grim.git synced 2026-07-12 09:48:55 +00:00
Code Issues Packages Projects Releases Wiki Activity

Build 66: disable clearnet update-check; drop sidecar build steps

Browse Source 
Security (audit H-2): the legacy update check is OFF by default. It hit
code.gri.mw (GRIM's gitea) directly over CLEARNET via the old HttpClient —
leaking "this user runs Goblin" metadata on every wallet-list view, which
defeats the nothing-clearnet mixnet model, and it pointed at the wrong
project's releases anyway. Opt-in only until reworked to run over the
mixnet against Goblin's own releases.

Build: with the Nym SDK linked in-process there's no sidecar binary to
embed or bundle. linux/build_release.sh drops the GOBLIN_NYM_UNIX_BIN
embed (AppImage is one self-contained binary); scripts/android.sh stops
bundling nym-socks5-client into jniLibs (the cdylib links nym-sdk
directly); scripts/nym-android.sh deleted.
This commit is contained in:
2ro
2026-06-14 04:07:24 -04:00
parent 63d5ca2b5f
commit 2578a35cf7
4 changed files with 13 additions and 65 deletions
Download Patch File Download Diff File Expand all files Collapse all files
linux/build_release.sh
+4 -17
View File
@@ -5,12 +5,8 @@
# Usage: linux/build_release.sh [platform]
# platform: 'x86_64' (default) or 'arm'
#
# The nym-socks5-client sidecar is EMBEDDED into the goblin binary (build.rs +
# src/nym/sidecar.rs, via GOBLIN_NYM_UNIX_BIN), so the AppImage ships as one
# self-contained file with no loose sidecar beside AppRun — matching the
# single-file Windows build. Point GOBLIN_NYM_UNIX_BIN at a glibc-2.17 sidecar
# (the portable one staged under the project root at nym-dist/) so the embedded
# copy is as portable as the host binary.
# Goblin links the Nym SDK IN-PROCESS (src/nym/), so the AppImage is one
# self-contained binary with no sidecar to embed or ship beside it.
set -euo pipefail
@@ -25,15 +21,6 @@ esac
BASEDIR=$(cd "$(dirname "$0")" && pwd)
cd "${BASEDIR}/.."
# Portable, glibc-2.17 sidecar to embed (override with GOBLIN_NYM_UNIX_BIN).
: "${GOBLIN_NYM_UNIX_BIN:=$(cd .. && pwd)/nym-dist/nym-socks5-client}"
if [[ ! -x "${GOBLIN_NYM_UNIX_BIN}" ]]; then
echo "error: sidecar to embed not found/executable: ${GOBLIN_NYM_UNIX_BIN}" >&2
echo " set GOBLIN_NYM_UNIX_BIN to a built nym-socks5-client" >&2
exit 1
fi
export GOBLIN_NYM_UNIX_BIN
rustup target add "${arch}"
command -v cargo-zigbuild >/dev/null || cargo install cargo-zigbuild
@@ -44,8 +31,8 @@ export CFLAGS_x86_64_unknown_linux_gnu="-DCROARING_COMPILER_SUPPORTS_AVX512=0"
export CXXFLAGS_x86_64_unknown_linux_gnu="-DCROARING_COMPILER_SUPPORTS_AVX512=0"
cargo zigbuild --release --target "${arch}.2.17"
# Assemble the AppDir: AppRun IS the goblin binary (sidecar baked in), plus the
# icon + desktop entry. No loose sidecar file.
# Assemble the AppDir: AppRun IS the goblin binary (Nym SDK linked in), plus the
# icon + desktop entry. Nothing else.
appdir="linux/Goblin.AppDir"
cp "target/${arch}/release/goblin" "${appdir}/AppRun"
chmod +x "${appdir}/AppRun"