contrib: update Fedora builder to use bitcoincore.org for Bitcoin 29.0
What the developer wrote
Authored by Sangbida Chaudhuri
contrib: update Fedora builder to use bitcoincore.org for Bitcoin 29.0
What changed, and why it matters
This commit simply changes the download source for Bitcoin Core inside a Fedora build container, switching from a Google Cloud Storage bucket used by the project to the official bitcoincore.org website. There is no security-relevant code change and no indication of a vulnerability.
No security action required. Review as a routine build-infrastructure maintenance change.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The Dockerfile for the Fedora builder previously downloaded the Bitcoin Core tarball from a project-controlled Google Cloud Storage URL (storage.googleapis.com/c-lightning-tests/bitcoind/…). The patch updates it to fetch the same tarball from the canonical upstream release location at bitcoincore.org/bin/bitcoin-core-${BITCOIN_VERSION}/. The filename, extraction, and installation steps are unchanged. This is a build-maintenance change.
Changed components
contrib/docker/Dockerfile.builder.fedoraInspect captured patch +1 / −1
diff --git a/contrib/docker/Dockerfile.builder.fedora b/contrib/docker/Dockerfile.builder.fedora
index f30e1a54..0ee99032 100644
--- a/contrib/docker/Dockerfile.builder.fedora
+++ b/contrib/docker/Dockerfile.builder.fedora
@@ -51,7 +51,7 @@ RUN wget https://github.com/kristapsdz/lowdown/archive/refs/tags/VERSION_1_0_2.t
rm -rf VERSION_1_0_2.tar.gz lowdown-VERSION_1_0_2
# Install Bitcoin Core
-RUN wget https://storage.googleapis.com/c-lightning-tests/bitcoind/bitcoin-${BITCOIN_VERSION}-x86_64-linux-gnu.tar.gz \
+RUN wget https://bitcoincore.org/bin/bitcoin-core-${BITCOIN_VERSION}/bitcoin-${BITCOIN_VERSION}-x86_64-linux-gnu.tar.gz \
-O bitcoin.tar.gz && \
tar -xvzf bitcoin.tar.gz && \
mv bitcoin-$BITCOIN_VERSION/bin/bitcoin* /usr/local/bin/ && \
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.