Skip to content

Rebuild libspark_frost from pinned Lightspark source - #2

Open
Jossec101 wants to merge 3 commits into
spark/operator-handlerfrom
spark/native-from-source
Open

Jossec101 wants to merge 3 commits into
spark/operator-handlerfrom
spark/native-from-source

Conversation

@Jossec101

@Jossec101 Jossec101 commented Oct 9, 2026 •

Copy link
Copy Markdown
Collaborator
  • Builds the libspark_frost native library ourselves, from Lightspark's source at a pinned commit.
  • Linux builds run on Amazon Linux 2023, so they work on AWS Lambda.
  • CI checks the build is reproducible and publishes checksums and build attestations.
  • Ships Linux x64, Linux arm64 and macOS arm64 only, dropping the binaries we can't rebuild.
  • Releases publish only from orklabs/nspark, never from a fork.

Stack created with GitHub Stacks CLI • Give Feedback 💬

- scripts/build-native.sh: reproducible build of signer/spark-frost-uniffi at
  SPARK_SHA 0b3a32a (the commit the protos come from), --locked, pinned protoc
  and Rust toolchain. Linux RIDs build in Amazon Linux 2023 (glibc <= 2.34, the
  AWS Lambda floor); checks the 34 uniffi checksum exports and the glibc floor.
- native-build.yml: runs the script on native runners, verifies the bindings
  regenerate byte-for-byte, writes SHA256SUMS.txt and build-provenance attestations.
- Ship linux-x64, linux-arm64 and osx-arm64 rebuilt from source; drop osx-x64,
  win-x64 and win-arm64, whose upstream binaries came from another Spark revision.
- release.yml only publishes from orklabs/nspark.
These changes go straight to orklabs/nspark, so release.yml needs no
guard against publishing from a fork.
This stack is consumed from the Elenpay/nspark fork, whose v* tags pin
the NodeGuard and signer submodules. Those tags must not publish to
nuget.org; only upstream releases do.
@Jossec101
Jossec101 added this pull request to stack #5 October 9, 2026 23:21
@Jossec101 Jossec101 changed the title spark/native from source Rebuild libspark_frost from pinned Lightspark source Oct 9, 2026
@Jossec101
Jossec101 marked this pull request as ready for review October 10, 2026 09:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant