Takes care of the tedium of checking signatures & whatnot. Does not update
checksum for the tests yet ...
Usage
$ nix-shell maintainers/scripts/update.nix --argstr package electrum
Warning: dumps cruft to $PWD
tlslite has a test failure on Python 3.7 [0]. @tomato42, a commiter of
tlslite and author of tlslite-ng said, that tlslite is abandoned (last
commit 2015) and tlslite-ng should be used as a drop in replacement.
[0] https://github.com/trevp/tlslite/issues/121
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/electrum-ltc/versions.
These checks were done:
- built on NixOS
- ran ‘/nix/store/j1k6vy1aswd5nm2h1y5b5807jwv5lvz8-electrum-ltc-3.1.3.1/bin/.electrum-ltc-wrapped -h’ got 0 exit code
- ran ‘/nix/store/j1k6vy1aswd5nm2h1y5b5807jwv5lvz8-electrum-ltc-3.1.3.1/bin/.electrum-ltc-wrapped --help’ got 0 exit code
- ran ‘/nix/store/j1k6vy1aswd5nm2h1y5b5807jwv5lvz8-electrum-ltc-3.1.3.1/bin/.electrum-ltc-wrapped help’ got 0 exit code
- ran ‘/nix/store/j1k6vy1aswd5nm2h1y5b5807jwv5lvz8-electrum-ltc-3.1.3.1/bin/electrum-ltc -h’ got 0 exit code
- ran ‘/nix/store/j1k6vy1aswd5nm2h1y5b5807jwv5lvz8-electrum-ltc-3.1.3.1/bin/electrum-ltc --help’ got 0 exit code
- ran ‘/nix/store/j1k6vy1aswd5nm2h1y5b5807jwv5lvz8-electrum-ltc-3.1.3.1/bin/electrum-ltc help’ got 0 exit code
- found 3.1.3.1 with grep in /nix/store/j1k6vy1aswd5nm2h1y5b5807jwv5lvz8-electrum-ltc-3.1.3.1
- directory tree listing: https://gist.github.com/b26f1ac3c0cbfa08852ab2610031bb4c
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/electrum/versions.
These checks were done:
- built on NixOS
- ran ‘/nix/store/lwp0yd15d73bsnq54za1v9df8r8ryl9s-electrum-3.1.3/bin/.electrum-wrapped -h’ got 0 exit code
- ran ‘/nix/store/lwp0yd15d73bsnq54za1v9df8r8ryl9s-electrum-3.1.3/bin/.electrum-wrapped --help’ got 0 exit code
- ran ‘/nix/store/lwp0yd15d73bsnq54za1v9df8r8ryl9s-electrum-3.1.3/bin/.electrum-wrapped help’ got 0 exit code
- ran ‘/nix/store/lwp0yd15d73bsnq54za1v9df8r8ryl9s-electrum-3.1.3/bin/electrum -h’ got 0 exit code
- ran ‘/nix/store/lwp0yd15d73bsnq54za1v9df8r8ryl9s-electrum-3.1.3/bin/electrum --help’ got 0 exit code
- ran ‘/nix/store/lwp0yd15d73bsnq54za1v9df8r8ryl9s-electrum-3.1.3/bin/electrum help’ got 0 exit code
- found 3.1.3 with grep in /nix/store/lwp0yd15d73bsnq54za1v9df8r8ryl9s-electrum-3.1.3
- directory tree listing: https://gist.github.com/db75e500a00674c62bfac3e757b1721c
From the release notes [1]:
* Fix a vulnerability caused by Cross-Origin Resource Sharing (CORS)
in the JSONRPC interface. Previous versions of Electrum are
vulnerable to port scanning and deanonimization attacks from
malicious websites. Wallets that are not password-protected are
vulnerable to theft.
See this [2] for explanation.
[1] https://github.com/spesmilo/electrum/blob/3.0.4/RELEASE-NOTES
[2] https://github.com/spesmilo/electrum/issues/3374
Note that due to runtime impurities, non-NixOS users must prepend and export
QT_PLUGIN_PATH=${qt5.qtbase.qtPluginPrefix}
and
LD_LIBRARY_PATH=/run/opengl-driver/lib
before running electrum, lest it fail to find runtime dependencies or pick
up mismatching libraries from the host system.
Since 9c57f3b5c0 bumped the protobuf
version because the new upstream requires it, electrum now gets
protobuf3_0 *and* protobuf3_2 instead of just one version.
This leads to the following build errer:
Found duplicated packages in closure for dependency 'protobuf':
protobuf 3.0.2 (...-python2.7-protobuf-3.0.2/lib/python2.7/site-packages)
protobuf 3.2.0 (...-python2.7-protobuf-3.2.0/lib/python2.7/site-packages)
Using protobuf3_2 for keepkey and electrum fixes the build.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Cc: @np
See https://github.com/spesmilo/electrum/blob/master/RELEASE-NOTES
Also
- patch .desktop file to include full path to electrum
- add dep on pysocks
- remove dep on pyasn; per the changelog, it has not been used since v2.1
- replace dep on slowaes with pyaes
The icon resource file captures the build timestamp, introducing an
element of indeterminism. Fix by patching out the timestamp.
This allows
```sh
nix-build --check -A electrum
```
to succeed.
