diff options
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/MONZERO_PUBLIC_REPOSITORIES.md | 74 |
1 files changed, 74 insertions, 0 deletions
diff --git a/docs/MONZERO_PUBLIC_REPOSITORIES.md b/docs/MONZERO_PUBLIC_REPOSITORIES.md new file mode 100644 index 000000000..4cc2a5f76 --- /dev/null +++ b/docs/MONZERO_PUBLIC_REPOSITORIES.md @@ -0,0 +1,74 @@ +# Monzero public repository setup + +Three Monzero-owned repositories are required before public reproducible builds: + +| Repository | Purpose | Initial local source | +| --- | --- | --- | +| `monzero-core` | Node, wallet CLI, consensus code and release tooling | `/home/pinhead/Projects/Monero-Fork-backups/git-remotes/monzero-core.git` | +| `monzero-gui` | Desktop GUI | `/home/pinhead/Projects/Monzero-Fork-backups/git-remotes/monzero-gui.git` | +| `monzero-gitian-sigs` | Independent reproducible-build assertions and builder public keys | `/home/pinhead/Projects/Monzero-Fork-backups/git-remotes/monzero-gitian-sigs.git` | + +Do not publish these under an individual contributor's account if a Monzero +organization is intended. Create the organization first, enable multifactor +authentication for owners, and retain at least two organization owners. + +## Repository controls + +Protect `main` in all three repositories: + +- disallow force pushes and branch deletion; +- require pull requests and at least one independent approval; +- require passing test/build checks; +- require conversation resolution; +- restrict direct pushes to release administrators; +- enable secret scanning and dependency alerts where the host supports them. + +Core release tags should be annotated and signed. Do not allow an automated +workflow to possess a human builder's private Gitian signing key. + +## Publishing the prepared repositories + +After creating empty public repositories, replace the example URLs and push: + +```bash +git remote set-url origin https://HOST/MONZERO_ORG/monzero-core.git +git push origin fork/main:main +git push origin monzero-phase0-assets-prototype-20260815 + +git -C monzero-gui remote set-url origin https://HOST/MONZERO_ORG/monzero-gui.git +git -C monzero-gui push origin main +git -C monzero-gui push origin monzero-gui-phase0-20260815-r1 + +git -C /home/pinhead/Projects/monzero-gitian-sigs remote set-url origin \ + https://HOST/MONZERO_ORG/monzero-gitian-sigs.git +git -C /home/pinhead/Projects/monzero-gitian-sigs push origin main +``` + +Before changing the local `origin` URLs, retain the local bare remotes as a +separate `backup` remote. Never change or push to the repositories named +`upstream`; they are retained solely for attribution and controlled upstream +comparison. + +Update `monzero-gui/.gitmodules` to the final public core URL (or a correct +relative sibling URL), commit that change, and verify a clean recursive clone. + +## Signing bootstrap + +Each independent builder creates their own signing key on a trusted machine, +publishes only the public key in `monzero-gitian-sigs/gitian-pubkeys/`, and has +its complete fingerprint verified out of band by another maintainer. At least +two independently administered builders must reproduce Linux and Windows +artifacts before those artifacts are marked verified. + +The Gitian command requires an explicit source repository: + +```bash +MONZERO_GITIAN_SIGS_URL=https://HOST/MONZERO_ORG/monzero-gitian-sigs.git \ + contrib/gitian/gitian-build.py --setup --docker \ + --url https://HOST/MONZERO_ORG/monzero-core.git BUILDER RELEASE +``` + +Asset/NFT consensus functionality remains inactive throughout repository and +release setup. Its activation requires the separate review and public-testnet +gates in `MONZERO_PHASE0_STABILIZATION.md`. + |