diff --git a/docs/server.html b/docs/server.html index 2f054efb50..6726874191 100644 --- a/docs/server.html +++ b/docs/server.html @@ -881,7 +881,7 @@ window.addEventListener('scroll',changeHeaderBg);
You can locally reproduce server binaries, following these instructions.
-You must have:
+If you are a security expert or researcher, you can help SimpleX network and users community by signing the release checksums – we will publish your signature. Please reach out to us!
+To reproduce the build you must have:
x86-64 architectureExecute the script with the required tag:
-./reproduce-builds.sh 'v6.3.0'
+./reproduce-builds.sh 'v6.3.1'
+The script executes these steps (please review the script to confirm):
+
+- builds all server binaries for the release in docker container.
+- downloads binaries from the same GitHub release and compares them with the built binaries.
+- if they all match, generates _sha256sums file with their checksums.
+
This will take a while.
After compilation, you should see the following folders:
-ls out*
+After compilation, you should see the folder named as the tag (e.g., v6.3.1) with two subfolders:
+ls v6.3.1
-out-20.04:
-ntf-server smp-server xftp xftp-server
-
-out-20.04-github:
-ntf-server smp-server xftp xftp-server
-
-out-22.04:
-ntf-server smp-server xftp xftp-server
-
-out-22.04-github:
-ntf-server smp-server xftp xftp-server
-
-out-24.04:
-ntf-server smp-server xftp xftp-server
-
-out-24.04-github:
-ntf-server smp-server xftp xftp-server
-
-Compare the hashes from github release with locally build binaries:
-sha256sum out*-github/*
-
-sha256sum out*[0-9]/*
-
-You can safely delete cloned repository:
-cd ../ && rm -rf simplexmq
+from-source prebuilt _sha256sums
+The file _sha256sums contains the hashes of all builds - you can compare it with the same file in GitHub release.