Use docker environment to build the actors reproducibly

.github/workflows/ci.yml

@@ -56,7 +56,7 @@ jobs:
       env:
         BUILD_FIL_NETWORK: ${{ matrix.network }}
       run: |
-        cargo run --locked -- -o output/builtin-actors.car
+        make bundle-repro
   coverage:
     runs-on: ubuntu-latest
     env:

.github/workflows/release.yml

@@ -29,7 +29,7 @@ jobs:
       env:
         BUILD_FIL_NETWORK: ${{ matrix.network }}
       run: |
-        cargo run --locked -- -o output/builtin-actors.car
+        make bundle-repro
     - name: Publishing release and uploading bundle to GitHub
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.gitignore

@@ -3,4 +3,4 @@ target
 *.wasm
 .idea/
 **/.DS_Store
-output/builtin-actors.car
+output/*

Dockerfile

@@ -0,0 +1,13 @@
+FROM rust:1.63.0-buster
+
+# Install dependencies
+RUN apt-get update && apt-get install --no-install-recommends -y build-essential clang
+
+WORKDIR /usr/src/builtin-actors
+
+COPY . .
+
+# Grab the correct toolchain
+RUN make deps-build
+
+ENTRYPOINT ["/bin/bash", "-c"]

Makefile

@@ -40,32 +40,58 @@ set-version: check-clean deps-release check
 publish:
 	cargo workspaces publish --from-git
 
+docker-builder:
+	docker build . -t builtin-actors-builder
+
 # Create a bundle in a deterministic location
 bundle: deps-build
 	cargo run -- -o output/builtin-actors.car
 
+bundle-repro: docker-builder
+	docker run -e BUILD_FIL_NETWORK --rm -v `pwd`/output:/usr/src/builtin-actors/output builtin-actors-builder "make bundle"
+
 # Create all canonical network bundles
 all-bundles: bundle-mainnet bundle-caterpillarnet bundle-butterflynet bundle-calibrationnet bundle-devnet bundle-testing bundle-testing
 
+all-bundles-repro: bundle-mainnet-repro bundle-caterpillarnet-repro bundle-butterflynet-repro bundle-calibrationnet-repro bundle-devnet-repro bundle-testing-repro
+
 bundle-mainnet: deps-build
 	BUILD_FIL_NETWORK=mainnet cargo run -- -o output/builtin-actors-mainnet.car
 
+bundle-mainnet-repro: docker-builder
+	docker run --rm -v `pwd`/output:/usr/src/builtin-actors/output builtin-actors-builder "make bundle-mainnet"
+
 bundle-caterpillarnet: deps-build
 	BUILD_FIL_NETWORK=caterpillarnet cargo run -- -o output/builtin-actors-caterpillarnet.car
 
+bundle-caterpillarnet-repro: docker-builder
+	docker run --rm -v `pwd`/output:/usr/src/builtin-actors/output builtin-actors-builder "make bundle-caterpillarnet"
+
 bundle-butterflynet: deps-build
 	BUILD_FIL_NETWORK=butterflynet cargo run -- -o output/builtin-actors-butterflynet.car
 
+bundle-butterflynet-repro: docker-builder
+	docker run --rm -v `pwd`/output:/usr/src/builtin-actors/output builtin-actors-builder "make bundle-butterflynet"
+
 bundle-calibrationnet: deps-build
 	BUILD_FIL_NETWORK=calibrationnet cargo run -- -o output/builtin-actors-calibrationnet.car
 
+bundle-calibrationnet-repro: docker-builder
+	docker run --rm -v `pwd`/output:/usr/src/builtin-actors/output builtin-actors-builder "make bundle-calibrationnet"
+
 bundle-devnet: deps-build
 	BUILD_FIL_NETWORK=devnet cargo run -- -o output/builtin-actors-devnet.car
 
+bundle-devnet-repro: docker-builder
+	docker run --rm -v `pwd`/output:/usr/src/builtin-actors/output builtin-actors-builder "make bundle-devnet"
+
 bundle-testing: deps-build
 	BUILD_FIL_NETWORK=testing cargo run -- -o output/builtin-actors-testing.car
 	BUILD_FIL_NETWORK=testing-fake-proofs cargo run -- -o output/builtin-actors-testing-fake-proofs.car
 
+bundle-testing-repro: docker-builder
+	docker run --rm -v `pwd`/output:/usr/src/builtin-actors/output builtin-actors-builder "make bundle-testing"
+
 .PHONY: all-bundles bundle-mainnet bundle-caterpillarnet bundle-butterflynet bundle-calibrationnet bundle-devnet bundle-testing
 
 # Check if the working tree is clean.