nix: static builds and release workflow #1133
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Adds a "redistributable" flavor of Echidna that is fully static on Linux, and mostly static on macOS.
Replaces previous Nix workflow
ncurses in Nix is built with a TERMINFO path that references `/nix`. This causes the binaries fail when ran on non-nix systems, unless TERMINFO=/usr/share/terminfo is exported. This patches the binaries to use a more sensible default TERMINFO path. See also commit f76a7f4
elopez
force-pushed
the
dev-semi-static-macos
branch
from
8e568bf to
77d75eb
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR implements (partially) static builds for Echidna using Nix, similarly to how it's implemented in hevm. The Linux build in particular uses musl, to avoid the problems that glibc has with static binaries and multithreading.
It also replaces our current Nix workflow with a new one that builds regular echidna, as well as this new redistributable/static build on the three platforms we can run Nix on Actions:
These binaries are then signed (with sigstore) and uploaded to a draft release in case the workflow was triggered by a Git tag, easing our release preparation. If the workflow was triggered by something else (branch, PR), the redistributable executables are available as a workflow artifact.
TODO (help wanted!)
Future work