From 752e3a55eeb4e6f2329eb323d7621c2c5ce5e695 Mon Sep 17 00:00:00 2001 From: Kim Neunert Date: Tue, 14 Sep 2021 16:12:17 +0200 Subject: [PATCH] Bugfix: fixes #1357 as pip3 installation of tar.gz-package was broken (#1374) * adding po-files to tar.gz-package * explanation for tar.gz-based pip installation --- MANIFEST.in | 1 + README.md | 15 +++++++++++++++ 2 files changed, 16 insertions(+) diff --git a/MANIFEST.in b/MANIFEST.in index 0531cc4b6..6c6156ea4 100644 --- a/MANIFEST.in +++ b/MANIFEST.in @@ -1,4 +1,5 @@ recursive-include src/cryptoadvance/specter/templates * recursive-include src/cryptoadvance/specter/static * recursive-include src/cryptoadvance/specter/translations/*/LC_MESSAGES *.mo +recursive-include src/cryptoadvance/specter/translations/*/LC_MESSAGES *.po include requirements.txt diff --git a/README.md b/README.md index 4ac96d9ef..b1b3bdf0a 100755 --- a/README.md +++ b/README.md @@ -89,6 +89,21 @@ pip3 install cryptoadvance.specter --upgrade After that, Specter will be available at [http://127.0.0.1:25441/](http://127.0.0.1:25441/). +The above installation-method is quite easy but you have to trust pypi. If you want to verify the software completely yourself while still installing via pip3, you can do something like this: +``` +wget https://github.com/cryptoadvance/specter-desktop/releases/download/v1.4.6/cryptoadvance.specter-1.4.6.tar.gz +wget https://github.com/cryptoadvance/specter-desktop/releases/download/v1.4.6/SHA256SUMS-pip.txt +sha256sum --check SHA256SUMS-pip.txt +# Do your usual GPG-check here +# Now, let's extract the requirements-file and install all requirements with require-hashes +tar -xvzf cryptoadvance.specter-1.4.6.tar.gz cryptoadvance.specter-1.4.6/requirements.txt +pip3 install -r cryptoadvance.specter-1.4.6/requirements.txt --require-hashes --upgrade +# The package cryptoadvance.specter itself cannot be included into requirements.txt +# But we have checked the checksum before so it's safe to install without checking it's hash +pip3 install cryptoadvance.specter-1.4.6.tar.gz +``` + + You can also run it using Tor, provide SSL certificates to run over https. Https is especially important because browsers don't allow the website to access the camera without secure connection, and we need camera access to scan QR codes. An example how to run Specter server with SSL certificates (`--key`, `--cert`) over Tor (make sure to walk through the [Tor-document](docs/tor.md) ):