From 4fed39dab46bcbfd3aa19bc8eff8505ac7bde175 Mon Sep 17 00:00:00 2001 From: Jo D Date: Fri, 29 May 2026 11:21:25 -0400 Subject: [PATCH 1/2] fix(verify): drop --mount-path, note Apple Silicon build --mount-path program pointed at the program dir, but Cargo.lock lives at the workspace root, so solana-verify failed pre-flight with "Missing Cargo.lock". Mount the repo root (as CI's build-verified does) and select the program via --library-name. Document the Rosetta / DOCKER_DEFAULT_PLATFORM=linux/amd64 requirement for local verification on Apple Silicon, where the amd64-only verify image otherwise fails compiling getrandom for the SBF target. --- justfile | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/justfile b/justfile index a29fe5d..bd3bb4b 100644 --- a/justfile +++ b/justfile @@ -122,12 +122,14 @@ check-solana-verify: # Verify mainnet deployment against repo (remote build via OtterSec) # Note: Remote verification (--remote) only works on mainnet +# Apple Silicon (local builds without --remote): enable Docker/Colima Rosetta and +# `export DOCKER_DEFAULT_PLATFORM=linux/amd64`. The pinned verify image is amd64-only, +# so the SBF build fails on getrandom under arm64 emulation without it. verify-mainnet: check-solana-verify solana-verify verify-from-repo \ https://github.com/solana-program/rewards \ --program-id REWArDioXgQJ2fZKkfu9LCLjQfRwYWVVfsvcsR5hoXi \ --library-name rewards_program \ - --mount-path program \ --remote \ -um From 69875e9afdf751e2f5c8cd2b48c7ff5795424bdd Mon Sep 17 00:00:00 2001 From: Jo D Date: Fri, 29 May 2026 14:03:29 -0400 Subject: [PATCH 2/2] build(verify): add verify-local recipe for program-only build Bare solana-verify build SBF-compiles the whole workspace; clients/tests pull getrandom 0.2.17 which has no target_os=solana backend and fails cargo build-sbf. Scope to the program lib via --library-name. --- justfile | 3 +++ 1 file changed, 3 insertions(+) diff --git a/justfile b/justfile index bd3bb4b..fccd751 100644 --- a/justfile +++ b/justfile @@ -133,6 +133,9 @@ verify-mainnet: check-solana-verify --remote \ -um +verify-local: check-solana-verify + solana-verify build --library-name rewards_program + # ****************************************************************************** # Release # ******************************************************************************