feat: Adding reproducible builds for verifiers (#44)

## What ❔

* shell script + Docker + CI - to create reproducible verifier binaries.

## Why ❔

* to make sure that we have the same hashes for verification keys.

Author: mm-zk

.dockerignore

@@ -18,7 +18,7 @@ tools/verifier/target
 !poseidon2
 !prover
 !risc_v_simulator
-!risc_v_common
+!riscv_common
 !trace_holder
 !transcript
 !verifier

.github/workflows/check-verifiers.yml

@@ -0,0 +1,32 @@
+name: Check verifiers
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+
+permissions:
+  contents: read
+  packages: read
+  actions: read
+
+jobs:
+  check_verifiers:
+    runs-on: [ matterlabs-ci-runner-highmem ]
+    steps:
+      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3
+
+      - name: Build fresh verifiers
+        run: |
+          tools/reproduce/reproduce.sh
+
+      - name: Fail if any files were modified
+        run: |
+          git status --porcelain
+          git diff --name-only
+          if [ -n "$(git diff --name-only)" ]; then
+            echo "❌ The following files were modified. Did you run tools/reproduce/reproduce.sh ?:"
+            git diff --name-only
+            exit 1
+          fi

.github/workflows/ci.yml

@@ -242,6 +242,7 @@ jobs:
         with:
           rustflags: ""
       - name: Setup
+        working-directory: tools/verifier
         run: |
           rustup set profile minimal
           rustup target add riscv32i-unknown-none-elf

tools/reproduce/Dockerfile

@@ -0,0 +1,25 @@
+# Use a specific version of Rust for reproducibility
+FROM debian:bullseye-slim as builder
+
+RUN apt-get update && apt-get install -y \
+    curl \
+    build-essential \
+    git \
+    libssl-dev \
+    pkg-config
+
+RUN curl https://sh.rustup.rs -sSf | sh -s -- -y --default-toolchain nightly-2025-05-24
+ENV PATH="/root/.cargo/bin:${PATH}"
+
+RUN rustup target add riscv32i-unknown-none-elf
+RUN cargo install cargo-binutils
+RUN rustup component add llvm-tools-preview
+
+
+
+# RUN git clone  --depth 1 -b mmzk_0608_reproduce  https://github.com/matter-labs/zksync-airbender.git
+COPY . zksync-airbender
+
+WORKDIR zksync-airbender/tools/verifier
+
+RUN ./build.sh

tools/reproduce/README.md

@@ -0,0 +1,12 @@
+# Building reproducible verifiers
+
+This docker script allows building reproducible verifiers.
+
+Simply run:
+
+```shell
+./tools/reproduce/reproduce.sh
+```
+
+
+from the main directory.

tools/reproduce/reproduce.sh

@@ -0,0 +1,34 @@
+#!/bin/bash
+
+# Make sure to run from the main zksync-airbender directory.
+
+set -e  # Exit on any error
+
+# create a fresh docker
+docker build -t airbender-verifiers  -f tools/reproduce/Dockerfile .
+
+docker create --name verifiers airbender-verifiers
+
+FILES=(
+    base_layer.bin
+    recursion_layer.bin
+    final_recursion_layer.bin
+    base_layer_with_output.bin
+    recursion_layer_with_output.bin
+    final_recursion_layer_with_output.bin
+    universal.bin
+    universal_no_delegation.bin
+    universal.reduced.vk.json
+    universal_no_delegation.final.vk.json
+    recursion_layer.reduced.vk.json
+    recursion_layer_no_delegation.final.vk.json
+    final_recursion_layer.final.vk.json
+)
+
+for FILE in "${FILES[@]}"; do
+    docker cp verifiers:/zksync-airbender/tools/verifier/$FILE tools/verifier/
+    md5sum tools/verifier/$FILE
+done
+
+
+docker rm verifiers

tools/verifier/base_layer.bin

@@ -1,15 +1,15 @@
 {
   "machine_type": "ReducedFinal",
-  "bytecode_hash_hex": "4ea94396bec858dfe173c7fd2bbfd03fd8e65aa2e850203719bb98dc8be356b5",
+  "bytecode_hash_hex": "d0cae4b579ed5fea6432c4ce45cab94e913304796c6bbcd6455d571f28f5e6b6",
   "params": [
-    852930928,
-    4147174143,
-    2061329541,
-    1677886472,
-    962794339,
-    1645607950,
-    3092729894,
-    22679922
+    4029578128,
+    1914366547,
+    2948266123,
+    4237709645,
+    2465624865,
+    4046245566,
+    3136125741,
+    2506099251
   ],
-  "params_hex": "32d6b170f730daff7add648564028408396313636215fc0eb8575026015a1172"
+  "params_hex": "f02e7b90721aea53afbaf88bfc96514d92f67321f12ccebebaed7b2d95600a33"
 }