Skip to content

Commit d080c27

Browse files
committed
guix, doc: Add a note that codesigners need to rebuild after tagging
One of the issues observed during the 22.0rc1 release process was that a codesigner's attestation mismatched non-codesigner attestations because the guix-codesign step was performed prior to tagging the version in bitcoin-detached-sigs.
1 parent 4a46638 commit d080c27

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

doc/release-process.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -160,6 +160,9 @@ Codesigner only: Sign the windows binaries:
160160
Enter the passphrase for the key when prompted
161161
signature-win.tar.gz will be created
162162

163+
Code-signer only: It is advised to test that the code signature attaches properly prior to tagging by performing the `guix-codesign` step.
164+
However if this is done, once the release has been tagged in the bitcoin-detached-sigs repo, the `guix-codesign` step must be performed again in order for the guix attestation to be valid when compared against the attestations of non-codesigner builds.
165+
163166
Codesigner only: Commit the detached codesign payloads:
164167

165168
```sh

0 commit comments

Comments
 (0)