v1.4.17 – Aurora

[CassOnMars]

Builds produced via a MacOS based builder:

Commands to produce builds:

GOEXPERIMENT=arenas GOOS=darwin go build -ldflags "-s -w" -o node-1.4.17-darwin-arm64.bin
GOEXPERIMENT=arenas GOOS=linux GOARCH=amd64 go build -ldflags "-s -w" -o node-1.4.17-linux-amd64.bin
GOEXPERIMENT=arenas GOOS=linux GOARCH=arm64 go build -ldflags "-s -w" -o node-1.4.17-linux-arm64.bin

Commands to produce digests:

openssl sha3-256 -out node-1.4.17-darwin-arm64.dgst node-1.4.17-darwin-arm64.bin   
openssl sha3-256 -out node-1.4.17-linux-amd64.dgst node-1.4.17-linux-amd64.bin
openssl sha3-256 -out node-1.4.17-linux-arm64.dgst node-1.4.17-linux-arm64.bin

Signatories, verify above, then produce signatures:

openssl pkeyutl -sign -inkey <path-to-key> -rawin -in node-1.4.17-darwin-arm64.dgst -out node-1.4.17-darwin-arm64.dgst.sig.<key-id>
openssl pkeyutl -sign -inkey <path-to-key> -rawin -in node-1.4.17-linux-amd64.dgst -out node-1.4.17-linux-amd64.dgst.sig.<key-id>
openssl pkeyutl -sign -inkey <path-to-key> -rawin -in node-1.4.17-linux-arm64.dgst -out node-1.4.17-linux-arm64.dgst.sig.<key-id>

Add to PR via pull request against v1.4.17.

[CassOnMars]

Noting for posterity, action items:

• build needs to move to go 1.22 for full deterministic build outputs
• we need a signer key upload process that doesn't use github, most signers do not have github accounts