improved release scripts for osx + added scripts for signing and notarizing the app. Each step is now separated (still needs some cleanup)
Clément Fauconnier
3 years ago
parent
4b040fcf0e
commit
2e258729bb
@ -0,0 +1,104 @@ |
|||||||
|
#!/bin/bash |
||||||
|
# -------------------------------------------------------------------- |
||||||
|
# This program is free software: you can redistribute it and/or modify |
||||||
|
# it under the terms of the GNU General Public License as published by |
||||||
|
# the Free Software Foundation, either version 3 of the License, or |
||||||
|
# (at your option) any later version. |
||||||
|
# |
||||||
|
# This program is distributed in the hope that it will be useful, |
||||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||||
|
# GNU General Public License for more details. |
||||||
|
# |
||||||
|
# You should have received a copy of the GNU General Public License |
||||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||||
|
# --------------------------------------------------------------------- |
||||||
|
|
||||||
|
SCRIPT_PATH="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )" |
||||||
|
PROJECT_ROOT="$SCRIPT_PATH/../.." |
||||||
|
|
||||||
|
IDENTITY=$1 |
||||||
|
|
||||||
|
CODESIGN=/usr/bin/codesign |
||||||
|
|
||||||
|
BUILD_DIR="$PROJECT_ROOT/build/macx/release" |
||||||
|
PRODUCT_DIR="$BUILD_DIR/product" |
||||||
|
RESOURCES_DIR="$PROJECT_ROOT/resources" |
||||||
|
MACX_RESOURCES_DIR="$RESOURCES_DIR/macx" |
||||||
|
INSTALL_DIR="$PROJECT_ROOT/install/mac" |
||||||
|
|
||||||
|
APPLICATION_NAME="OpenBoard" |
||||||
|
APPLICATION_DOT_APP="$APPLICATION_NAME.app" |
||||||
|
APPLICATION_DIR="$PRODUCT_DIR/$APPLICATION_DOT_APP" |
||||||
|
APPLICATION_CONTENTS_DIR="$APPLICATION_DIR/Contents" |
||||||
|
APPLICATION_RESOURCES_DIR="$APPLICATION_CONTENTS_DIR/Resources" |
||||||
|
|
||||||
|
IMPORTER_NAME="OpenBoardImporter" |
||||||
|
IMPORTER_DOT_APP="$IMPORTER_NAME.app" |
||||||
|
IMPORTER_DIR="$APPLICATION_RESOURCES_DIR/$IMPORTER_DOT_APP" |
||||||
|
|
||||||
|
|
||||||
|
function notify { |
||||||
|
GROWLNOTIFY=`which growlnotify` |
||||||
|
if [ -x "$GROWLNOTIFY" ]; then |
||||||
|
$GROWLNOTIFY --name OpenBoard-build --iconpath /Developer/Applications/Xcode.app --message "$1" "OpenBoard" |
||||||
|
fi |
||||||
|
printf "\033[48;5;120m--->\033[0m $1\n" |
||||||
|
} |
||||||
|
|
||||||
|
function warn { |
||||||
|
printf "\033[48;5;178m--->\033[0m $1\n" |
||||||
|
} |
||||||
|
|
||||||
|
function error |
||||||
|
{ |
||||||
|
printf "\033[48;5;160;38;5;15m--->\033[0m $1\n" |
||||||
|
} |
||||||
|
|
||||||
|
function abort { |
||||||
|
error "$1" |
||||||
|
exit 1 |
||||||
|
} |
||||||
|
|
||||||
|
function checkExecutable { |
||||||
|
if [ ! -x "$1" ]; then |
||||||
|
abort "$1 not found" |
||||||
|
fi |
||||||
|
} |
||||||
|
|
||||||
|
checkExecutable $CODESIGN |
||||||
|
|
||||||
|
function signImporter |
||||||
|
{ |
||||||
|
notify "signing $IMPORTER_NAME..." |
||||||
|
if [ ! -e ${IMPORTER_DIR} ]; then |
||||||
|
abort "${IMPORTER_DIR} not found" |
||||||
|
fi |
||||||
|
|
||||||
|
cd $APPLICATION_RESOURCES_DIR |
||||||
|
|
||||||
|
$CODESIGN --force --deep -o runtime --timestamp --verbose=4 -s "$IDENTITY" --digest-algorithm=sha1,sha256 "$IMPORTER_DOT_APP" |
||||||
|
cd - |
||||||
|
} |
||||||
|
|
||||||
|
function signOpenBoard |
||||||
|
{ |
||||||
|
notify "signing $APPLICATION_NAME..." |
||||||
|
if [ ! -e ${APPLICATION_DIR} ]; then |
||||||
|
abort "${APPLICATION_DIR} not found" |
||||||
|
fi |
||||||
|
|
||||||
|
cd $PRODUCT_DIR |
||||||
|
|
||||||
|
$CODESIGN --force --deep -o runtime --timestamp --entitlements "$MACX_RESOURCES_DIR/Entitlements.plist" --verbose=4 -s "$IDENTITY" --digest-algorithm=sha1,sha256 "$APPLICATION_DOT_APP" |
||||||
|
cd - |
||||||
|
} |
||||||
|
|
||||||
|
signImporter |
||||||
|
|
||||||
|
signOpenBoard |
||||||
|
|
||||||
|
notify "$APPLICATION_NAME is now signed. You can now package OpenBoard using the script 'package.sh'" |
||||||
|
|
||||||
|
exit 0 |
||||||
|
|
||||||
@ -0,0 +1,147 @@ |
|||||||
|
#!/bin/bash |
||||||
|
# -------------------------------------------------------------------- |
||||||
|
# This program is free software: you can redistribute it and/or modify |
||||||
|
# it under the terms of the GNU General Public License as published by |
||||||
|
# the Free Software Foundation, either version 3 of the License, or |
||||||
|
# (at your option) any later version. |
||||||
|
# |
||||||
|
# This program is distributed in the hope that it will be useful, |
||||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||||
|
# GNU General Public License for more details. |
||||||
|
# |
||||||
|
# You should have received a copy of the GNU General Public License |
||||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||||
|
# --------------------------------------------------------------------- |
||||||
|
|
||||||
|
SCRIPT_PATH="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )" |
||||||
|
PROJECT_ROOT="$SCRIPT_PATH/../.." |
||||||
|
|
||||||
|
|
||||||
|
APPLICATION_NAME="OpenBoard" |
||||||
|
BASE_QT_DIR=~/Qt/5.15.2/clang_64 |
||||||
|
# Executables |
||||||
|
QMAKE=$BASE_QT_DIR/bin/qmake |
||||||
|
MACDEPLOYQT=$BASE_QT_DIR/bin/macdeployqt |
||||||
|
CODESIGN=/usr/bin/codesign |
||||||
|
DMGUTIL="$PROJECT_ROOT/release_scripts/osx/refnum/dmgutil/dmgutil.pl" |
||||||
|
DSYMUTIL=/usr/bin/dsymutil |
||||||
|
STRIP=/usr/bin/strip |
||||||
|
PLISTBUDDY=/usr/libexec/PlistBuddy |
||||||
|
ICEBERG=/usr/local/bin/freeze |
||||||
|
LRELEASE=$BASE_QT_DIR/bin/lrelease |
||||||
|
USER=$1 |
||||||
|
|
||||||
|
# Directories |
||||||
|
BUILD_DIR="$PROJECT_ROOT/build/macx/release" |
||||||
|
PRODUCT_DIR="$BUILD_DIR/product" |
||||||
|
RESOURCES_DIR="$PROJECT_ROOT/resources" |
||||||
|
MACX_RESOURCES_DIR="$RESOURCES_DIR/macx" |
||||||
|
BASE_QT_TRANSLATIONS_DIRECTORY=$BASE_QT_DIR/translations |
||||||
|
INSTALL_DIR="$PROJECT_ROOT/install/mac" |
||||||
|
|
||||||
|
function notify { |
||||||
|
GROWLNOTIFY=`which growlnotify` |
||||||
|
if [ -x "$GROWLNOTIFY" ]; then |
||||||
|
$GROWLNOTIFY --name OpenBoard-build --iconpath /Developer/Applications/Xcode.app --message "$1" "OpenBoard" |
||||||
|
fi |
||||||
|
printf "\033[48;5;120m--->\033[0m $1\n" |
||||||
|
} |
||||||
|
|
||||||
|
function warn { |
||||||
|
printf "\033[48;5;178m--->\033[0m $1\n" |
||||||
|
} |
||||||
|
|
||||||
|
function error |
||||||
|
{ |
||||||
|
printf "\033[48;5;160;38;5;15m--->\033[0m $1\n" |
||||||
|
} |
||||||
|
|
||||||
|
function abort { |
||||||
|
error "$1" |
||||||
|
exit 1 |
||||||
|
} |
||||||
|
|
||||||
|
function checkExecutable { |
||||||
|
if [ ! -x "$1" ]; then |
||||||
|
abort "$1 not found" |
||||||
|
fi |
||||||
|
} |
||||||
|
|
||||||
|
notify "================================================" |
||||||
|
notify "=============== NOTARIZATION ===================" |
||||||
|
notify "================================================" |
||||||
|
read -s -p "Password for $USER is required: " PASSWORD |
||||||
|
printf "\n" |
||||||
|
|
||||||
|
cd $INSTALL_DIR; |
||||||
|
|
||||||
|
notify "================================================" |
||||||
|
notify "Submitting $APPLICATION_NAME for notarization..." |
||||||
|
notify "================================================" |
||||||
|
|
||||||
|
NOTARIZE_APP_OUTPUT=$(2>&1 xcrun altool --notarize-app -f OpenBoard.dmg --primary-bundle-id ch.openboard.id -u "$USER" -p "$PASSWORD") |
||||||
|
SUBMISSION_ID=$(echo "$NOTARIZE_APP_OUTPUT" | grep "RequestUUID" | sed -Ee "s|.*= (.*)$|\1|") |
||||||
|
|
||||||
|
|
||||||
|
if [[ "$SUBMISSION_ID" == "" ]]; then |
||||||
|
NOTARIZE_APP_ERROR_LOG_NAME="notarization-submission-error.log" |
||||||
|
NOTARIZE_APP_ERROR_LOG_PATH="$SCRIPT_PATH/$NOTARIZE_APP_ERROR_LOG_NAME" |
||||||
|
|
||||||
|
echo "$NOTARIZE_APP_OUTPUT" > "$NOTARIZE_APP_ERROR_LOG_PATH" |
||||||
|
|
||||||
|
warn "================================================" |
||||||
|
warn "Submission of $APPLICATION_NAME failed !" |
||||||
|
warn "See $NOTARIZE_APP_ERROR_LOG_NAME for details." |
||||||
|
warn "================================================" |
||||||
|
|
||||||
|
abort "$APPLICATION_NAME notarization failed" |
||||||
|
else |
||||||
|
NOTARIZE_APP_SUCCESS_LOG_NAME="notarization-submission-success.log" |
||||||
|
NOTARIZE_APP_SUCCESS_LOG_PATH="$SCRIPT_PATH/$NOTARIZE_APP_SUCCESS_LOG_NAME" |
||||||
|
|
||||||
|
echo "$OUTPUT" > "$NOTARIZE_APP_SUCCESS_LOG_PATH" |
||||||
|
|
||||||
|
notify "================================================" |
||||||
|
notify "Submission of $APPLICATION_NAME succeed." |
||||||
|
notify "See $NOTARIZE_APP_SUCCESS_LOG_NAME for details." |
||||||
|
notify "================================================" |
||||||
|
|
||||||
|
notify "================================================" |
||||||
|
notify "Checking status of notarization (RequestUUID = $SUBMISSION_ID)" |
||||||
|
notify "================================================" |
||||||
|
|
||||||
|
while true; do |
||||||
|
NOTARIZATION_INFO_OUTPUT=$(2>&1 xcrun altool --notarization-info "$SUBMISSION_ID" -u "$USER" -p "$PASSWORD") |
||||||
|
STATUS=$(echo "$NOTARIZATION_INFO_OUTPUT" | grep "Status:" | sed -Ee "s|.*: (.*)$|\1|" ) |
||||||
|
notify "notarization status: $STATUS" |
||||||
|
if [[ "$STATUS" != "in progress" ]]; then |
||||||
|
break |
||||||
|
fi |
||||||
|
sleep 30 |
||||||
|
done |
||||||
|
|
||||||
|
if [[ $STATUS == "success" ]]; then |
||||||
|
NOTARIZATION_SUCCESS_LOG_NAME="notarization-success.log" |
||||||
|
NOTARIZATION_SUCCESS_LOG="$SCRIPT_PATH/$NOTARIZATION_SUCCESS_LOG_NAME" |
||||||
|
echo "$NOTARIZATION_INFO_OUTPUT" > "$NOTARIZATION_SUCCESS_LOG" |
||||||
|
|
||||||
|
notify "================================================" |
||||||
|
notify "$APPLICATION_NAME was notarized sucessfully. You can now distribute it." |
||||||
|
notify "See $NOTARIZATION_SUCCESS_LOG_NAME for details." |
||||||
|
notify "================================================" |
||||||
|
else |
||||||
|
NOTARIZATION_ERROR_LOG_NAME="notarization-error.log" |
||||||
|
NOTARIZATION_ERROR_LOG="$SCRIPT_PATH/$NOTARIZATION_ERROR_LOG_NAME" |
||||||
|
echo "$NOTARIZATION_INFO_OUTPUT" > "$NOTARIZATION_ERROR_LOG" |
||||||
|
|
||||||
|
warn "================================================" |
||||||
|
warn "$APPLICATION_NAME could not be notarized." |
||||||
|
warn "See $NOTARIZATION_ERROR_LOG_NAME for details." |
||||||
|
warn "================================================" |
||||||
|
|
||||||
|
abort "$APPLICATION_NAME notarization failed" |
||||||
|
fi |
||||||
|
fi |
||||||
|
exit 0 |
||||||
|
|
||||||
@ -0,0 +1,155 @@ |
|||||||
|
#!/bin/bash |
||||||
|
# -------------------------------------------------------------------- |
||||||
|
# This program is free software: you can redistribute it and/or modify |
||||||
|
# it under the terms of the GNU General Public License as published by |
||||||
|
# the Free Software Foundation, either version 3 of the License, or |
||||||
|
# (at your option) any later version. |
||||||
|
# |
||||||
|
# This program is distributed in the hope that it will be useful, |
||||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||||
|
# GNU General Public License for more details. |
||||||
|
# |
||||||
|
# You should have received a copy of the GNU General Public License |
||||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||||
|
# --------------------------------------------------------------------- |
||||||
|
|
||||||
|
SCRIPT_PATH="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )" |
||||||
|
PROJECT_ROOT="$SCRIPT_PATH/../.." |
||||||
|
|
||||||
|
|
||||||
|
APPLICATION_NAME="OpenBoard" |
||||||
|
BASE_QT_DIR=~/Qt/5.15.2/clang_64 |
||||||
|
# Executables |
||||||
|
QMAKE=$BASE_QT_DIR/bin/qmake |
||||||
|
MACDEPLOYQT=$BASE_QT_DIR/bin/macdeployqt |
||||||
|
DMGUTIL="$PROJECT_ROOT/release_scripts/osx/refnum/dmgutil/dmgutil.pl" |
||||||
|
DSYMUTIL=/usr/bin/dsymutil |
||||||
|
STRIP=/usr/bin/strip |
||||||
|
PLISTBUDDY=/usr/libexec/PlistBuddy |
||||||
|
ICEBERG=/usr/local/bin/freeze |
||||||
|
LRELEASE=$BASE_QT_DIR/bin/lrelease |
||||||
|
|
||||||
|
# Directories |
||||||
|
BUILD_DIR="$PROJECT_ROOT/build/macx/release" |
||||||
|
PRODUCT_DIR="$BUILD_DIR/product" |
||||||
|
BASE_QT_TRANSLATIONS_DIRECTORY=$BASE_QT_DIR/translations |
||||||
|
|
||||||
|
|
||||||
|
function notify { |
||||||
|
GROWLNOTIFY=`which growlnotify` |
||||||
|
if [ -x "$GROWLNOTIFY" ]; then |
||||||
|
$GROWLNOTIFY --name OpenBoard-build --iconpath /Developer/Applications/Xcode.app --message "$1" "OpenBoard" |
||||||
|
fi |
||||||
|
printf "\033[48;5;120m--->\033[0m $1\n" |
||||||
|
} |
||||||
|
|
||||||
|
function warn { |
||||||
|
printf "\033[48;5;178m--->\033[0m $1\n" |
||||||
|
} |
||||||
|
|
||||||
|
function error |
||||||
|
{ |
||||||
|
printf "\033[48;5;160;38;5;15m--->\033[0m $1\n" |
||||||
|
} |
||||||
|
|
||||||
|
function abort { |
||||||
|
error "$1" |
||||||
|
exit 1 |
||||||
|
} |
||||||
|
|
||||||
|
function checkExecutable { |
||||||
|
if [ ! -x "$1" ]; then |
||||||
|
abort "$1 not found" |
||||||
|
fi |
||||||
|
} |
||||||
|
|
||||||
|
trap "defaults write org.oe-f.OpenBoard.release Running -bool NO" EXIT |
||||||
|
|
||||||
|
notify "Running OpenBoard release script (`date`)" |
||||||
|
|
||||||
|
cd $PROJECT_ROOT |
||||||
|
|
||||||
|
script_is_running=`defaults read org.oe-f.OpenBoard.release Running 2>/dev/null` |
||||||
|
if [[ $? -eq 0 ]] && [[ "$script_is_running" = "1" ]]; then |
||||||
|
trap EXIT |
||||||
|
abort "another release script already running" |
||||||
|
fi |
||||||
|
defaults write org.oe-f.OpenBoard.release Running -bool YES |
||||||
|
|
||||||
|
# Check for executables |
||||||
|
checkExecutable "$QMAKE" |
||||||
|
checkExecutable "$MACDEPLOYQT" |
||||||
|
checkExecutable "$DMGUTIL" |
||||||
|
checkExecutable "$DSYMUTIL" |
||||||
|
checkExecutable "$STRIP" |
||||||
|
checkExecutable "$PLISTBUDDY" |
||||||
|
checkExecutable "$ICEBERG" |
||||||
|
checkExecutable "$LRELEASE" |
||||||
|
|
||||||
|
DMG="$APPLICATION_NAME.dmg" |
||||||
|
|
||||||
|
VOLUME="/Volumes/$APPLICATION_NAME" |
||||||
|
APP="$PRODUCT_DIR/$APPLICATION_NAME.app" |
||||||
|
DSYM_NAME="$APPLICATION_NAME (r$SVN_REVISION).dSYM" |
||||||
|
DSYM="$PRODUCT_DIR/$DSYM_NAME" |
||||||
|
GSYM_i386="$PRODUCT_DIR/$APPLICATION_NAME i386.sym" |
||||||
|
INFO_PLIST="$APP/Contents/Info.plist" |
||||||
|
|
||||||
|
if [ "$1" == "pkg" ]; then |
||||||
|
BASE_ICEBERG_CONFIG_FILE="$SCRIPT_PATH/$APPLICATION_NAME.packproj" |
||||||
|
#copy the standard file for working with |
||||||
|
ICEBERG_CONFIG_FILE="$APPLICATION_NAME-working.packproj" |
||||||
|
cp -r $BASE_ICEBERG_CONFIG_FILE $ICEBERG_CONFIG_FILE |
||||||
|
# set version information |
||||||
|
$PLISTBUDDY -c "Set :Hierarchy:Attributes:Settings:Description:International:IFPkgDescriptionVersion $VERSION" "$ICEBERG_CONFIG_FILE" |
||||||
|
$PLISTBUDDY -c "Set :Hierarchy:Attributes:Settings:Display\ Information:CFBundleShortVersionString $VERSION" "$ICEBERG_CONFIG_FILE" |
||||||
|
$PLISTBUDDY -c "Set :Hierarchy:Attributes:Settings:Version:IFMajorVersion `echo $VERSION | awk 'BEGIN { FS = "." }; { print $1 }'`" "$ICEBERG_CONFIG_FILE" |
||||||
|
$PLISTBUDDY -c "Set :Hierarchy:Attributes:Settings:Version:IFMinorVersion `echo $VERSION | awk 'BEGIN { FS = "." }; { print $2 }'`" "$ICEBERG_CONFIG_FILE" |
||||||
|
|
||||||
|
|
||||||
|
PRODUCT_DIR="install/mac/" |
||||||
|
|
||||||
|
if [ ! -d "${PRODUCT_DIR}" ]; then |
||||||
|
mkdir -p "${PRODUCT_DIR}" |
||||||
|
fi |
||||||
|
$ICEBERG $ICEBERG_CONFIG_FILE |
||||||
|
|
||||||
|
#clean up mess |
||||||
|
rm -rf $ICEBERG_CONFIG_FILE |
||||||
|
|
||||||
|
exit 0 |
||||||
|
fi |
||||||
|
|
||||||
|
notify "Creating dmg ..." |
||||||
|
umount "$VOLUME" 2> /dev/null |
||||||
|
$DMGUTIL --open --volume="$APPLICATION_NAME" "$DMG" |
||||||
|
|
||||||
|
#cp *.pdf "$VOLUME" |
||||||
|
cp -R "$APP" "$VOLUME" |
||||||
|
ln -s /Applications "$VOLUME" |
||||||
|
|
||||||
|
$DMGUTIL --set --iconsize=96 --toolbar=false --icon=resources/macx/OpenBoard.icns "$VOLUME" |
||||||
|
$DMGUTIL --set --x=20 --y=60 --width=580 --height=440 "$VOLUME" |
||||||
|
$DMGUTIL --set --x=180 --y=120 "$VOLUME/`basename \"$APP\"`" |
||||||
|
$DMGUTIL --set --x=400 --y=120 "$VOLUME/Applications" |
||||||
|
|
||||||
|
$DMGUTIL --close --volume="$APPLICATION_NAME" "$DMG" |
||||||
|
|
||||||
|
PRODUCT_DIR="install/mac/" |
||||||
|
|
||||||
|
if [ ! -d "${PRODUCT_DIR}" ]; then |
||||||
|
mkdir -p "${PRODUCT_DIR}" |
||||||
|
fi |
||||||
|
|
||||||
|
|
||||||
|
if [ "$1" == "1010" ]; then |
||||||
|
mv "$DMG" "${PRODUCT_DIR}/OpenBoard_for_1010.dmg" |
||||||
|
else |
||||||
|
mv "$DMG" "${PRODUCT_DIR}" |
||||||
|
fi |
||||||
|
|
||||||
|
notify "$APPLICATION_NAME is now packaged. You can submit this dmg file to notarization using notarize.sh" |
||||||
|
|
||||||
|
exit 0 |
||||||
|
|
||||||
@ -0,0 +1,14 @@ |
|||||||
|
<?xml version="1.0" encoding="UTF-8"?> |
||||||
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> |
||||||
|
<plist version="1.0"> |
||||||
|
<dict> |
||||||
|
<key>com.apple.security.automation.apple-events</key> |
||||||
|
<true/> |
||||||
|
<key>com.apple.security.cs.disable-library-validation</key> |
||||||
|
<true/> |
||||||
|
<key>com.apple.security.device.audio-input</key> |
||||||
|
<true/> |
||||||
|
<key>com.apple.security.device.camera</key> |
||||||
|
<true/> |
||||||
|
</dict> |
||||||
|
</plist> |
||||||
Loading…
Reference in new issue