Add deterministic build system

[ethanfrey]

This lets us get deterministic binaries.

cosmos/cosmos-sdk#7247 is a very nice example for the go part. We will need to ensure a deterministic build system for the rust dll as well, but piece by piece

[ethanfrey]

They just overhauled the gaia build system to a simpler version. We should use that as reference when we start on this issue.

https://github.com/cosmos/gaia/pull/523/files

[yihuang]

Is it possible to statically link the libwasmvm library? not familiar with golang's build system, but static link should make it easier to redistribute binary.
Also I'd like to make a nix expression for wasmd, static link also make it easier, no need to manipulate rpath stuff.

EDIT: I thought golang can somehow magically build rust library on the fly, it turns out the prebuilt library is included in the repository directly(https://github.com/CosmWasm/wasmvm/blob/main/api/libwasmvm.dylib) 😄

[ethanfrey]

Look at the Docker build in the repo. It does static.

With glibc systems we can only build rust dll, which dynamically link to Go. With muslc (alpine), we can make a static build of rust and thus a static build of the wasmd binary.

We only include the dlls (not static libs) in wasmvm due to size.

I spent several days trying to get static builds to work and using muslc based docker was the best I got. I would be very happy if you can figure out how to build a static lib of wasmvm on a glibc system (ubuntu, Debian, centos, etc)

[alpe]

This is a very old issue. gaia has moved away from gitian meanwhile. I found the docker approach that was used by terra very nice.
The container provides the "identical environment" to build the binary artifact.
Should be easy to add a new target to the Makefile

[pinosu]

Closing because not relevant.
See this comment