ZeroTier Official Release Steps

This is mostly for ZeroTier internal use, but others who want to do builds might find it helpful.

Note: Many of these steps will require GPG and other signing keys that are kept in cold storage and must be mounted.

Bumping the Version and Preparing Installers

The version must be incremented in all of the following files:

/version.h
/zerotier-one.spec
/debian/changelog
/ext/installfiles/mac/ZeroTier One.pkgproj
/ext/installfiles/windows/chocolatey/zerotier-one.nuspec
/ext/installfiles/windows/ZeroTier One.aip

The final .AIP file can only be edited on Windows with Advanced Installer Enterprise. In addition to incrementing the version be sure that a new product code is generated. (The "upgrade code" GUID on the other hand must never change.)

Building for Supported Platforms

Macintosh

Mac's easy. Just type:

make official

You will need Packages and our release signing key in the keychain.

Linux

Mount the GPG key for contact@zerotier.com and then on an x86_64 box with a recent version of Docker and an Internet connection run:

make distclean
cd linux-build-farm
./build.sh

This will build i386 and x86_64 packages. Now ssh into our build Raspberry Pi and type make debian there to build the Raspbian armhf package. Copy it to debian-jessie/ inside linux-build-farm so that it will be included in the repositories we generate. Now generate the YUM and APT repos:

rm -rf ~/.aptly*
rm -rf /tmp/zt-rpm-repo
./make-apt-repos.sh
./make-rpm-repos.sh

This will require the passphrase for contact@zerotier.com.

The contents of ~/.aptly/public must be published as debian/ on download.zerotier.com. The contents of /tmp/zt-rpm-repo are published as redhat/ on same.

Windows

First load the Visual Studio solution and rebuild the UI and ZeroTier One in both x64 and i386 Release mode. Then load Advanced Installer Enterprise, check that the version is correct, and build. The build will fail if any build artifacts are missing, and Windows must have our product singing key (from DigiCert) available to sign the resulting MSI file. The MSI must then be tested on at least a few different CLEAN Windows VMs to ensure that the installer is valid and properly signed.

After the MSI is published to download.zerotier.com in the proper RELEASE/#.#.#/dist subfolder for its version the Chocolatey package must be rebuilt and published. Open a command prompt, change to ext/installfiles/windows/chocolatey, and type choco pack. Then use choco push to push it to Chocolatey (API key required).

choco pack
choco push zerotier-one.#.#.#.nupkg -s https://chocolatey.org/

Note that this does not cover rebuilding the drivers or their containing MSI projects, as this is typically not necessary and they are shipped in binary form in the repository for convenience.

iOS, Android

... no docs here yet since this is done entirely out of band with regular installs.

3.1 KiB Raw Permalink Blame History