Skip to main content
Home Concepts Developers Node Operators Resources Dev Tools
Time to read: 1 min

Gradle building

Setup instructions for gradle build in docker container​

This is a deterministic build process used to build Rootstock node JAR file. It provides a way to be reasonably sure that the JAR is built from the GitHub RSKj repository. It also makes sure that the same tested dependencies are used and statically built into the executable.

It's highly recommended to follow the steps by yourself to avoid contamination of the process.

Install Docker​

Depending on your OS, you can install Docker following the official Docker guide:

Info

See how to Setup and Run RSKj using Java.

Build Container​

Create a Dockerfile to setup the build environment.

  // FROM ubuntu:16.04
  apt-get update -y && \
    apt-get install -y git curl gnupg-curl openjdk-8-jdk && \
    rm -rf /var/lib/apt/lists/* && \
    apt-get autoremove -y && \
    apt-get clean
  gpg --keyserver https://secchannel.rsk.co/release.asc --recv-keys 1A92D8942171AFA951A857365DECF4415E3B8FA4
  gpg --finger 1A92D8942171AFA951A857365DECF4415E3B8FA4
  git clone --single-branch --depth 1 --branch ARROWHEAD-6.3.1 https://github.com/rsksmart/rskj.git /code/rskj
  git clone https://github.com/rsksmart/reproducible-builds 
  CP /Users/{$USER}/reproducible-builds/rskj/6.3.1-arrowhead/Dockerfile  /Users/{$USER}/code/rskj
  WORKDIR /code/rskj
  gpg --verify SHA256SUMS.asc
  sha256sum --check SHA256SUMS.asc
  ./configure.sh
  ./gradlew clean build -x test

Response:

You should get the following as the final response, after running the above steps:

BUILD SUCCESSFUL in 55s
14 actionable tasks: 13 executed, 1 up-to-date

If you get the error: zsh: command not found: sha256sum

Run the command brew install coreutils

If you are not familiar with Docker or the Dockerfile format: what this does is use the Ubuntu 16.04 base image and install git, curl, gnupg-curl and openjdk-8-jdk, required for building the Rootstock node.

Run build​

To create a reproducible build, run the command below in the same directory:

docker build -t rskj/6.3.1-arrowhead .
Error

if you run into any problems, ensure you're running the commands on the right folder and also ensure docker daemon is running is updated to the recent version.

This may take several minutes to complete. What is done is:

  • Place in the RSKj repository root because we need Gradle and the project.
  • Runs the secure chain verification process.
  • Compile a reproducible RSKj node.
  • ./gradlew clean build -x test builds without running tests.

Verify Build​

The last step of the build prints the sha256sum of the files, to obtain SHA-256 checksums, run the following command in the same directory as shown above:

docker run --rm rskj/6.3.1-arrowhead sh -c 'sha256sum * | grep -v javadoc.jar'

Check Results​

After running the build process, a JAR file will be created in /rskj/rskj-core/build/libs/, into the docker container.

You can check the SHA256 sum of the result file and compare it to the one published by Rootstock for that version.

27f088e5c7535974203bc77711a1e9bbaa258cd7e5d69cd368d8ca5529b38115  rskj-core-6.3.1-ARROWHEAD-all.jar
101e35cbaef4c3997432e561417f208f93e5121c52be506bcf2bf22357855bb8  rskj-core-6.3.1-ARROWHEAD-sources.jar
9e29606d4bd71dd0458ec3eaa61ab4003d6aecad4bf5a5a40cc32d8d6535de75  rskj-core-6.3.1-ARROWHEAD.jar
bb31e2e2b14f9a15f6c7ca2595a7817860334f38f5d7c6e146306275834b7564  rskj-core-6.3.1-ARROWHEAD.module
ad539153c8bb8d09307c4a77c9a8af062531241f6a5155c2cd21f0892da27b18  rskj-core-6.3.1-ARROWHEAD.pom

For SHA256 sum of older versions check the releases page.

If you check inside the JAR file, you will find that the dates of the files are the same as the version commit you are using.

More Resources

Last updated on by Owanate Amachree

Feedback