[Cryptech Core] packaging and release engineering

Paul Selkirk paul at psgd.org
Thu Jun 25 19:50:13 UTC 2015


I've been working on building a distribution package for the Prague
release, containing
- an FPGA bitstream with the cores needed to run the demo software
- precompiled demo software

The current state of play is in user/paul/releng.

This is my first foray into building a .deb file, and there are many
ways to do it, at different levels of abstraction. Furthermore, the
bitstream is built with native Linux tools, but the software needs to be
cross-compiled. Rather than trying to find the ideal, I started simple,
with a script calling debuild calling the cross-compiler directly. This
is maybe a little too simple, because the resulting .deb has a
dependency on libc6 >= 2.21, but the version on the Novena is 2.13-38.
But the test software (hash_tester, trng_tester, aes_tester,
modexp_tester) runs on the Novena.

Of course, the software that we want to show and distribute at Prague is
a DNSSEC signer, which depends on Rob and Joachim. But I wanted to
figure out the release process before the last minute.

The other missing pieces are
- setting up reprepro on bikeshed(?)
- doing the official package build there
- signing the package
But that's just sysadmin details. :)

				paul



More information about the Core mailing list