mirror of
https://code.gri.mw/GUI/grim.git
synced 2026-07-10 08:54:11 +00:00
2ro
2578a35cf7
Security (audit H-2): the legacy update check is OFF by default. It hit code.gri.mw (GRIM's gitea) directly over CLEARNET via the old HttpClient — leaking "this user runs Goblin" metadata on every wallet-list view, which defeats the nothing-clearnet mixnet model, and it pointed at the wrong project's releases anyway. Opt-in only until reworked to run over the mixnet against Goblin's own releases. Build: with the Nym SDK linked in-process there's no sidecar binary to embed or bundle. linux/build_release.sh drops the GOBLIN_NYM_UNIX_BIN embed (AppImage is one self-contained binary); scripts/android.sh stops bundling nym-socks5-client into jniLibs (the cdylib links nym-sdk directly); scripts/nym-android.sh deleted.
44 lines
1.5 KiB
Bash
Executable File
44 lines
1.5 KiB
Bash
Executable File
#!/bin/bash
|
|
#
|
|
# Build a portable, single-file Goblin AppImage.
|
|
#
|
|
# Usage: linux/build_release.sh [platform]
|
|
# platform: 'x86_64' (default) or 'arm'
|
|
#
|
|
# Goblin links the Nym SDK IN-PROCESS (src/nym/), so the AppImage is one
|
|
# self-contained binary with no sidecar to embed or ship beside it.
|
|
|
|
set -euo pipefail
|
|
|
|
platform="${1:-x86_64}"
|
|
case "${platform}" in
|
|
x86_64) arch="x86_64-unknown-linux-gnu" ;;
|
|
arm) arch="aarch64-unknown-linux-gnu" ;;
|
|
*) echo "Usage: build_release.sh [platform] (platform: 'x86_64' | 'arm')" >&2; exit 1 ;;
|
|
esac
|
|
|
|
# Repo root (this script lives in linux/).
|
|
BASEDIR=$(cd "$(dirname "$0")" && pwd)
|
|
cd "${BASEDIR}/.."
|
|
|
|
rustup target add "${arch}"
|
|
command -v cargo-zigbuild >/dev/null || cargo install cargo-zigbuild
|
|
|
|
# Portable cross-build to glibc 2.17. Two zig-specific fixes:
|
|
# - CRoaring's AVX512 path won't compile under zig's clang (evex512 error).
|
|
# - OpenSSL is vendored in Cargo.toml, so no system libssl is needed.
|
|
export CFLAGS_x86_64_unknown_linux_gnu="-DCROARING_COMPILER_SUPPORTS_AVX512=0"
|
|
export CXXFLAGS_x86_64_unknown_linux_gnu="-DCROARING_COMPILER_SUPPORTS_AVX512=0"
|
|
cargo zigbuild --release --target "${arch}.2.17"
|
|
|
|
# Assemble the AppDir: AppRun IS the goblin binary (Nym SDK linked in), plus the
|
|
# icon + desktop entry. Nothing else.
|
|
appdir="linux/Goblin.AppDir"
|
|
cp "target/${arch}/release/goblin" "${appdir}/AppRun"
|
|
chmod +x "${appdir}/AppRun"
|
|
|
|
out="target/${arch}/release/Goblin-${platform}.AppImage"
|
|
rm -f "target/${arch}/release/"*.AppImage
|
|
ARCH=x86_64 appimagetool "${appdir}" "${out}"
|
|
echo "built: ${out}"
|