]>
Commit | Line | Data |
---|---|---|
1a97b22b CF |
1 | Deterministic OSX Dmg Notes. |
2 | ||
3 | Working OSX DMG's are created in Linux by combining a recent clang, | |
4 | the Apple's binutils (ld, ar, etc), and DMG authoring tools. | |
5 | ||
6 | Apple uses clang extensively for development and has upstreamed the necessary | |
7 | functionality so that a vanilla clang can take advantage. It supports the use | |
8 | of -F, -target, -mmacosx-version-min, and --sysroot, which are all necessary | |
9 | when building for OSX. A pre-compiled version of 3.2 is used because it was not | |
10 | available in the Precise repositories at the time this work was started. In the | |
11 | future, it can be switched to use system packages instead. | |
12 | ||
13 | Apple's version of binutils (called cctools) contains lots of functionality | |
14 | missing in the FSF's binutils. In addition to extra linker options for | |
15 | frameworks and sysroots, several other tools are needed as well such as | |
16 | install_name_tool, lipo, and nmedit. These do not build under linux, so they | |
17 | have been patched to do so. The work here was used as a starting point: | |
18 | https://github.com/mingwandroid/toolchain4 | |
19 | ||
20 | In order to build a working toolchain, the following source packages are needed | |
21 | from Apple: cctools, dyld, and ld64. | |
22 | ||
23 | Beware. This part is ugly. Very very very ugly. In the future, this should be | |
24 | broken out into a new repository and cleaned up. Additionally, the binaries | |
25 | only work when built as x86 and not x86_64. This is an especially nasty | |
26 | limitation because it must be linked with the toolchain's libLTO.so, meaning | |
27 | that the entire toolchain must be x86. Gitian x86_64 should not be used until | |
28 | this has been fixed, because it would mean that several native dependencies | |
29 | (openssl, libuuid, etc) would need to be built as x86 first. | |
30 | ||
31 | These tools inject timestamps by default, which produce non-deterministic | |
32 | binaries. The ZERO_AR_DATE environment variable is used to disable that. | |
33 | ||
34 | This version of cctools has been patched to use the current version of clang's | |
35 | headers and and its libLTO.so rather than those from llvmgcc, as it was | |
36 | originally done in toolchain4. | |
37 | ||
38 | To complicate things further, all builds must target an Apple SDK. These SDKs | |
39 | are free to download, but not redistributable. | |
2869b134 CF |
40 | To obtain it, register for a developer account, then download xcode4630916281a.dmg: |
41 | https://developer.apple.com/downloads/download.action?path=Developer_Tools/xcode_4.6.3/xcode4630916281a.dmg | |
42 | This file is several gigabytes in size, but only a single directory inside is | |
43 | needed: Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.7.sdk | |
44 | ||
45 | Unfortunately, the usual linux tools (7zip, hpmount, loopback mount) are incapable of opening this file. | |
46 | To create a tarball suitable for gitian input, mount the dmg in OSX, then create it with: | |
47 | $ tar -C /Volumes/Xcode/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/ -czf MacOSX10.7.sdk.tar.gz MacOSX10.7.sdk | |
48 | ||
1a97b22b CF |
49 | |
50 | The gitian descriptors build 2 sets of files: Linux tools, then Apple binaries | |
51 | which are created using these tools. The build process has been designed to | |
52 | avoid including the SDK's files in Gitian's outputs. All interim tarballs are | |
53 | fully deterministic and may be freely redistributed. | |
54 | ||
55 | genisoimage is used to create the initial DMG. It is not deterministic as-is, | |
56 | so it has been patched. A system genisoimage will work fine, but it will not | |
57 | be deterministic because the file-order will change between invocations. | |
58 | The patch can be seen here: | |
59 | https://raw.githubusercontent.com/theuni/osx-cross-depends/master/patches/cdrtools/genisoimage.diff | |
60 | No effort was made to fix this cleanly, so it likely leaks memory badly. But | |
61 | it's only used for a single invocation, so that's no real concern. | |
62 | ||
63 | genisoimage cannot compress DMGs, so afterwards, the 'dmg' tool from the | |
64 | libdmg-hfsplus project is used to compress it. There are several bugs in this | |
65 | tool and its maintainer has seemingly abandoned the project. It has been forked | |
66 | and is available (with fixes) here: https://github.com/theuni/libdmg-hfsplus . | |
67 | ||
68 | The 'dmg' tool has the ability to create DMG's from scratch as well, but this | |
69 | functionality is broken. Only the compression feature is currently used. | |
70 | Ideally, the creation could be fixed and genisoimage would no longer be necessary. | |
71 | ||
72 | Background images and other features can be added to DMG files by inserting a | |
73 | .DS_Store before creation. The easiest way to create this file is to build a | |
74 | DMG without one, move it to a device running OSX, customize the layout, then | |
75 | grab the .DS_Store file for later use. That is the approach taken here. |