Build fingerprint - Githubissues

harmony-one / chrome-extension-wallet

Harmony Chrome Extension Wallet

https://chrome.google.com/webstore/detail/harmony-one-wallet/fnnegphlobjdpkhecapkijjdkgcjhkib

61 stars 36 forks source link

Build fingerprint #120

Open hashmesan opened 2 years ago

hashmesan commented 2 years ago

Building with Docker

Using docker to build with clean setup, specific node version, and locked package.json dependencies.

Build: docker build -t chrome-build .
Run Container: docker create --name onewallet chrome-build
Copy build to host: docker cp onewallet:/usr/src/app/chrome-extension-wallet/onewallet.zip .
Copy checksum: docker cp onewallet:/usr/src/app/chrome-extension-wallet/dist/checksums.md5 .
Verify signatures: unzip onewallet.zip -d onewallet, Verify local or an external checksum: md5sum -c checksums.md5

My fingerprint with docker build.

67b3b1d2eb66f1699b9bfadbc98d1cc4  dist/background.js
96ccc0ee8ac8ae4df716f50f9db3ec8a  dist/content-script.js
f92c0d2e5fbdebc6f2d69820fd195ae5  dist/inject-script.js
e8ac688287a2a6cd8141e98f9f46ef90  dist/popup.js
604c6d74953a59aedc1af4c4f0b94e16  dist/popup.html

polymorpher commented 2 years ago

be84ba155a5c0c32e72664158d720acf  onewallet/background.js
96ccc0ee8ac8ae4df716f50f9db3ec8a  onewallet/content-script.js
4701c88491b57a425cf641b5ae6e91a8  onewallet/inject-script.js
b7ccf650dc33635e3c7a02874e14f40b  onewallet/popup.js
604c6d74953a59aedc1af4c4f0b94e16  onewallet/popup.html

⌁57% [****:~/****/chrome-extension-wallet] [base] quoc* ± md5sum -c checksums.md5
onewallet/background.js: OK
onewallet/content-script.js: OK
onewallet/inject-script.js: OK
onewallet/popup.js: OK
onewallet/popup.html: OK
⌁56% [****:~/****/chrome-extension-wallet] [base] quoc* ±

polymorpher commented 2 years ago

Seems good to go

hashmesan commented 2 years ago

I built again with PR by adding your dockerfile under WORKDIR RUN git fetch origin pull/120/head. The signatures now match

be84ba155a5c0c32e72664158d720acf  dist/background.js
96ccc0ee8ac8ae4df716f50f9db3ec8a  dist/content-script.js
4701c88491b57a425cf641b5ae6e91a8  dist/inject-script.js
b7ccf650dc33635e3c7a02874e14f40b  dist/popup.js
604c6d74953a59aedc1af4c4f0b94e16  dist/popup.html

polymorpher commented 2 years ago

Publishing and verification steps (after build):

(1) download the build and verification files (onewallet.zip, and checksums.md5) in a folder (2) unzip onewallet.zip to onewallet folder (just double click the zip file) (3) open terminal, go to the folder in (1), and run md5sum -c checksums.md5 (4) verify that you see this as the output

onewallet/background.js: OK
onewallet/content-script.js: OK
onewallet/inject-script.js: OK
onewallet/popup.js: OK
onewallet/popup.html: OK

(5) verify that the content of checksums.md5 is the following (open it using text editor like Sublime or Mac’s default one)

be84ba155a5c0c32e72664158d720acf  onewallet/background.js
96ccc0ee8ac8ae4df716f50f9db3ec8a  onewallet/content-script.js
4701c88491b57a425cf641b5ae6e91a8  onewallet/inject-script.js
7402fd97dd5a0c9b50ecbdb8f861d349  onewallet/popup.js
604c6d74953a59aedc1af4c4f0b94e16  onewallet/popup.html

polymorpher commented 2 years ago

We should also include https://github.com/harmony-one/chrome-extension-wallet/pull/121 in the next version