improved release scripts for osx + added scripts for signing and notarizing the app. Each step is now separated (still needs some cleanup)
Clément Fauconnier
3 years ago
parent
4b040fcf0e
commit
2e258729bb
@ -0,0 +1,104 @@ |
||||
#!/bin/bash |
||||
# -------------------------------------------------------------------- |
||||
# This program is free software: you can redistribute it and/or modify |
||||
# it under the terms of the GNU General Public License as published by |
||||
# the Free Software Foundation, either version 3 of the License, or |
||||
# (at your option) any later version. |
||||
# |
||||
# This program is distributed in the hope that it will be useful, |
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
# GNU General Public License for more details. |
||||
# |
||||
# You should have received a copy of the GNU General Public License |
||||
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
# --------------------------------------------------------------------- |
||||
|
||||
SCRIPT_PATH="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )" |
||||
PROJECT_ROOT="$SCRIPT_PATH/../.." |
||||
|
||||
IDENTITY=$1 |
||||
|
||||
CODESIGN=/usr/bin/codesign |
||||
|
||||
BUILD_DIR="$PROJECT_ROOT/build/macx/release" |
||||
PRODUCT_DIR="$BUILD_DIR/product" |
||||
RESOURCES_DIR="$PROJECT_ROOT/resources" |
||||
MACX_RESOURCES_DIR="$RESOURCES_DIR/macx" |
||||
INSTALL_DIR="$PROJECT_ROOT/install/mac" |
||||
|
||||
APPLICATION_NAME="OpenBoard" |
||||
APPLICATION_DOT_APP="$APPLICATION_NAME.app" |
||||
APPLICATION_DIR="$PRODUCT_DIR/$APPLICATION_DOT_APP" |
||||
APPLICATION_CONTENTS_DIR="$APPLICATION_DIR/Contents" |
||||
APPLICATION_RESOURCES_DIR="$APPLICATION_CONTENTS_DIR/Resources" |
||||
|
||||
IMPORTER_NAME="OpenBoardImporter" |
||||
IMPORTER_DOT_APP="$IMPORTER_NAME.app" |
||||
IMPORTER_DIR="$APPLICATION_RESOURCES_DIR/$IMPORTER_DOT_APP" |
||||
|
||||
|
||||
function notify { |
||||
GROWLNOTIFY=`which growlnotify` |
||||
if [ -x "$GROWLNOTIFY" ]; then |
||||
$GROWLNOTIFY --name OpenBoard-build --iconpath /Developer/Applications/Xcode.app --message "$1" "OpenBoard" |
||||
fi |
||||
printf "\033[48;5;120m--->\033[0m $1\n" |
||||
} |
||||
|
||||
function warn { |
||||
printf "\033[48;5;178m--->\033[0m $1\n" |
||||
} |
||||
|
||||
function error |
||||
{ |
||||
printf "\033[48;5;160;38;5;15m--->\033[0m $1\n" |
||||
} |
||||
|
||||
function abort { |
||||
error "$1" |
||||
exit 1 |
||||
} |
||||
|
||||
function checkExecutable { |
||||
if [ ! -x "$1" ]; then |
||||
abort "$1 not found" |
||||
fi |
||||
} |
||||
|
||||
checkExecutable $CODESIGN |
||||
|
||||
function signImporter |
||||
{ |
||||
notify "signing $IMPORTER_NAME..." |
||||
if [ ! -e ${IMPORTER_DIR} ]; then |
||||
abort "${IMPORTER_DIR} not found" |
||||
fi |
||||
|
||||
cd $APPLICATION_RESOURCES_DIR |
||||
|
||||
$CODESIGN --force --deep -o runtime --timestamp --verbose=4 -s "$IDENTITY" --digest-algorithm=sha1,sha256 "$IMPORTER_DOT_APP" |
||||
cd - |
||||
} |
||||
|
||||
function signOpenBoard |
||||
{ |
||||
notify "signing $APPLICATION_NAME..." |
||||
if [ ! -e ${APPLICATION_DIR} ]; then |
||||
abort "${APPLICATION_DIR} not found" |
||||
fi |
||||
|
||||
cd $PRODUCT_DIR |
||||
|
||||
$CODESIGN --force --deep -o runtime --timestamp --entitlements "$MACX_RESOURCES_DIR/Entitlements.plist" --verbose=4 -s "$IDENTITY" --digest-algorithm=sha1,sha256 "$APPLICATION_DOT_APP" |
||||
cd - |
||||
} |
||||
|
||||
signImporter |
||||
|
||||
signOpenBoard |
||||
|
||||
notify "$APPLICATION_NAME is now signed. You can now package OpenBoard using the script 'package.sh'" |
||||
|
||||
exit 0 |
||||
|
||||
@ -0,0 +1,147 @@ |
||||
#!/bin/bash |
||||
# -------------------------------------------------------------------- |
||||
# This program is free software: you can redistribute it and/or modify |
||||
# it under the terms of the GNU General Public License as published by |
||||
# the Free Software Foundation, either version 3 of the License, or |
||||
# (at your option) any later version. |
||||
# |
||||
# This program is distributed in the hope that it will be useful, |
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
# GNU General Public License for more details. |
||||
# |
||||
# You should have received a copy of the GNU General Public License |
||||
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
# --------------------------------------------------------------------- |
||||
|
||||
SCRIPT_PATH="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )" |
||||
PROJECT_ROOT="$SCRIPT_PATH/../.." |
||||
|
||||
|
||||
APPLICATION_NAME="OpenBoard" |
||||
BASE_QT_DIR=~/Qt/5.15.2/clang_64 |
||||
# Executables |
||||
QMAKE=$BASE_QT_DIR/bin/qmake |
||||
MACDEPLOYQT=$BASE_QT_DIR/bin/macdeployqt |
||||
CODESIGN=/usr/bin/codesign |
||||
DMGUTIL="$PROJECT_ROOT/release_scripts/osx/refnum/dmgutil/dmgutil.pl" |
||||
DSYMUTIL=/usr/bin/dsymutil |
||||
STRIP=/usr/bin/strip |
||||
PLISTBUDDY=/usr/libexec/PlistBuddy |
||||
ICEBERG=/usr/local/bin/freeze |
||||
LRELEASE=$BASE_QT_DIR/bin/lrelease |
||||
USER=$1 |
||||
|
||||
# Directories |
||||
BUILD_DIR="$PROJECT_ROOT/build/macx/release" |
||||
PRODUCT_DIR="$BUILD_DIR/product" |
||||
RESOURCES_DIR="$PROJECT_ROOT/resources" |
||||
MACX_RESOURCES_DIR="$RESOURCES_DIR/macx" |
||||
BASE_QT_TRANSLATIONS_DIRECTORY=$BASE_QT_DIR/translations |
||||
INSTALL_DIR="$PROJECT_ROOT/install/mac" |
||||
|
||||
function notify { |
||||
GROWLNOTIFY=`which growlnotify` |
||||
if [ -x "$GROWLNOTIFY" ]; then |
||||
$GROWLNOTIFY --name OpenBoard-build --iconpath /Developer/Applications/Xcode.app --message "$1" "OpenBoard" |
||||
fi |
||||
printf "\033[48;5;120m--->\033[0m $1\n" |
||||
} |
||||
|
||||
function warn { |
||||
printf "\033[48;5;178m--->\033[0m $1\n" |
||||
} |
||||
|
||||
function error |
||||
{ |
||||
printf "\033[48;5;160;38;5;15m--->\033[0m $1\n" |
||||
} |
||||
|
||||
function abort { |
||||
error "$1" |
||||
exit 1 |
||||
} |
||||
|
||||
function checkExecutable { |
||||
if [ ! -x "$1" ]; then |
||||
abort "$1 not found" |
||||
fi |
||||
} |
||||
|
||||
notify "================================================" |
||||
notify "=============== NOTARIZATION ===================" |
||||
notify "================================================" |
||||
read -s -p "Password for $USER is required: " PASSWORD |
||||
printf "\n" |
||||
|
||||
cd $INSTALL_DIR; |
||||
|
||||
notify "================================================" |
||||
notify "Submitting $APPLICATION_NAME for notarization..." |
||||
notify "================================================" |
||||
|
||||
NOTARIZE_APP_OUTPUT=$(2>&1 xcrun altool --notarize-app -f OpenBoard.dmg --primary-bundle-id ch.openboard.id -u "$USER" -p "$PASSWORD") |
||||
SUBMISSION_ID=$(echo "$NOTARIZE_APP_OUTPUT" | grep "RequestUUID" | sed -Ee "s|.*= (.*)$|\1|") |
||||
|
||||
|
||||
if [[ "$SUBMISSION_ID" == "" ]]; then |
||||
NOTARIZE_APP_ERROR_LOG_NAME="notarization-submission-error.log" |
||||
NOTARIZE_APP_ERROR_LOG_PATH="$SCRIPT_PATH/$NOTARIZE_APP_ERROR_LOG_NAME" |
||||
|
||||
echo "$NOTARIZE_APP_OUTPUT" > "$NOTARIZE_APP_ERROR_LOG_PATH" |
||||
|
||||
warn "================================================" |
||||
warn "Submission of $APPLICATION_NAME failed !" |
||||
warn "See $NOTARIZE_APP_ERROR_LOG_NAME for details." |
||||
warn "================================================" |
||||
|
||||
abort "$APPLICATION_NAME notarization failed" |
||||
else |
||||
NOTARIZE_APP_SUCCESS_LOG_NAME="notarization-submission-success.log" |
||||
NOTARIZE_APP_SUCCESS_LOG_PATH="$SCRIPT_PATH/$NOTARIZE_APP_SUCCESS_LOG_NAME" |
||||
|
||||
echo "$OUTPUT" > "$NOTARIZE_APP_SUCCESS_LOG_PATH" |
||||
|
||||
notify "================================================" |
||||
notify "Submission of $APPLICATION_NAME succeed." |
||||
notify "See $NOTARIZE_APP_SUCCESS_LOG_NAME for details." |
||||
notify "================================================" |
||||
|
||||
notify "================================================" |
||||
notify "Checking status of notarization (RequestUUID = $SUBMISSION_ID)" |
||||
notify "================================================" |
||||
|
||||
while true; do |
||||
NOTARIZATION_INFO_OUTPUT=$(2>&1 xcrun altool --notarization-info "$SUBMISSION_ID" -u "$USER" -p "$PASSWORD") |
||||
STATUS=$(echo "$NOTARIZATION_INFO_OUTPUT" | grep "Status:" | sed -Ee "s|.*: (.*)$|\1|" ) |
||||
notify "notarization status: $STATUS" |
||||
if [[ "$STATUS" != "in progress" ]]; then |
||||
break |
||||
fi |
||||
sleep 30 |
||||
done |
||||
|
||||
if [[ $STATUS == "success" ]]; then |
||||
NOTARIZATION_SUCCESS_LOG_NAME="notarization-success.log" |
||||
NOTARIZATION_SUCCESS_LOG="$SCRIPT_PATH/$NOTARIZATION_SUCCESS_LOG_NAME" |
||||
echo "$NOTARIZATION_INFO_OUTPUT" > "$NOTARIZATION_SUCCESS_LOG" |
||||
|
||||
notify "================================================" |
||||
notify "$APPLICATION_NAME was notarized sucessfully. You can now distribute it." |
||||
notify "See $NOTARIZATION_SUCCESS_LOG_NAME for details." |
||||
notify "================================================" |
||||
else |
||||
NOTARIZATION_ERROR_LOG_NAME="notarization-error.log" |
||||
NOTARIZATION_ERROR_LOG="$SCRIPT_PATH/$NOTARIZATION_ERROR_LOG_NAME" |
||||
echo "$NOTARIZATION_INFO_OUTPUT" > "$NOTARIZATION_ERROR_LOG" |
||||
|
||||
warn "================================================" |
||||
warn "$APPLICATION_NAME could not be notarized." |
||||
warn "See $NOTARIZATION_ERROR_LOG_NAME for details." |
||||
warn "================================================" |
||||
|
||||
abort "$APPLICATION_NAME notarization failed" |
||||
fi |
||||
fi |
||||
exit 0 |
||||
|
||||
@ -0,0 +1,155 @@ |
||||
#!/bin/bash |
||||
# -------------------------------------------------------------------- |
||||
# This program is free software: you can redistribute it and/or modify |
||||
# it under the terms of the GNU General Public License as published by |
||||
# the Free Software Foundation, either version 3 of the License, or |
||||
# (at your option) any later version. |
||||
# |
||||
# This program is distributed in the hope that it will be useful, |
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
# GNU General Public License for more details. |
||||
# |
||||
# You should have received a copy of the GNU General Public License |
||||
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
||||
# --------------------------------------------------------------------- |
||||
|
||||
SCRIPT_PATH="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )" |
||||
PROJECT_ROOT="$SCRIPT_PATH/../.." |
||||
|
||||
|
||||
APPLICATION_NAME="OpenBoard" |
||||
BASE_QT_DIR=~/Qt/5.15.2/clang_64 |
||||
# Executables |
||||
QMAKE=$BASE_QT_DIR/bin/qmake |
||||
MACDEPLOYQT=$BASE_QT_DIR/bin/macdeployqt |
||||
DMGUTIL="$PROJECT_ROOT/release_scripts/osx/refnum/dmgutil/dmgutil.pl" |
||||
DSYMUTIL=/usr/bin/dsymutil |
||||
STRIP=/usr/bin/strip |
||||
PLISTBUDDY=/usr/libexec/PlistBuddy |
||||
ICEBERG=/usr/local/bin/freeze |
||||
LRELEASE=$BASE_QT_DIR/bin/lrelease |
||||
|
||||
# Directories |
||||
BUILD_DIR="$PROJECT_ROOT/build/macx/release" |
||||
PRODUCT_DIR="$BUILD_DIR/product" |
||||
BASE_QT_TRANSLATIONS_DIRECTORY=$BASE_QT_DIR/translations |
||||
|
||||
|
||||
function notify { |
||||
GROWLNOTIFY=`which growlnotify` |
||||
if [ -x "$GROWLNOTIFY" ]; then |
||||
$GROWLNOTIFY --name OpenBoard-build --iconpath /Developer/Applications/Xcode.app --message "$1" "OpenBoard" |
||||
fi |
||||
printf "\033[48;5;120m--->\033[0m $1\n" |
||||
} |
||||
|
||||
function warn { |
||||
printf "\033[48;5;178m--->\033[0m $1\n" |
||||
} |
||||
|
||||
function error |
||||
{ |
||||
printf "\033[48;5;160;38;5;15m--->\033[0m $1\n" |
||||
} |
||||
|
||||
function abort { |
||||
error "$1" |
||||
exit 1 |
||||
} |
||||
|
||||
function checkExecutable { |
||||
if [ ! -x "$1" ]; then |
||||
abort "$1 not found" |
||||
fi |
||||
} |
||||
|
||||
trap "defaults write org.oe-f.OpenBoard.release Running -bool NO" EXIT |
||||
|
||||
notify "Running OpenBoard release script (`date`)" |
||||
|
||||
cd $PROJECT_ROOT |
||||
|
||||
script_is_running=`defaults read org.oe-f.OpenBoard.release Running 2>/dev/null` |
||||
if [[ $? -eq 0 ]] && [[ "$script_is_running" = "1" ]]; then |
||||
trap EXIT |
||||
abort "another release script already running" |
||||
fi |
||||
defaults write org.oe-f.OpenBoard.release Running -bool YES |
||||
|
||||
# Check for executables |
||||
checkExecutable "$QMAKE" |
||||
checkExecutable "$MACDEPLOYQT" |
||||
checkExecutable "$DMGUTIL" |
||||
checkExecutable "$DSYMUTIL" |
||||
checkExecutable "$STRIP" |
||||
checkExecutable "$PLISTBUDDY" |
||||
checkExecutable "$ICEBERG" |
||||
checkExecutable "$LRELEASE" |
||||
|
||||
DMG="$APPLICATION_NAME.dmg" |
||||
|
||||
VOLUME="/Volumes/$APPLICATION_NAME" |
||||
APP="$PRODUCT_DIR/$APPLICATION_NAME.app" |
||||
DSYM_NAME="$APPLICATION_NAME (r$SVN_REVISION).dSYM" |
||||
DSYM="$PRODUCT_DIR/$DSYM_NAME" |
||||
GSYM_i386="$PRODUCT_DIR/$APPLICATION_NAME i386.sym" |
||||
INFO_PLIST="$APP/Contents/Info.plist" |
||||
|
||||
if [ "$1" == "pkg" ]; then |
||||
BASE_ICEBERG_CONFIG_FILE="$SCRIPT_PATH/$APPLICATION_NAME.packproj" |
||||
#copy the standard file for working with |
||||
ICEBERG_CONFIG_FILE="$APPLICATION_NAME-working.packproj" |
||||
cp -r $BASE_ICEBERG_CONFIG_FILE $ICEBERG_CONFIG_FILE |
||||
# set version information |
||||
$PLISTBUDDY -c "Set :Hierarchy:Attributes:Settings:Description:International:IFPkgDescriptionVersion $VERSION" "$ICEBERG_CONFIG_FILE" |
||||
$PLISTBUDDY -c "Set :Hierarchy:Attributes:Settings:Display\ Information:CFBundleShortVersionString $VERSION" "$ICEBERG_CONFIG_FILE" |
||||
$PLISTBUDDY -c "Set :Hierarchy:Attributes:Settings:Version:IFMajorVersion `echo $VERSION | awk 'BEGIN { FS = "." }; { print $1 }'`" "$ICEBERG_CONFIG_FILE" |
||||
$PLISTBUDDY -c "Set :Hierarchy:Attributes:Settings:Version:IFMinorVersion `echo $VERSION | awk 'BEGIN { FS = "." }; { print $2 }'`" "$ICEBERG_CONFIG_FILE" |
||||
|
||||
|
||||
PRODUCT_DIR="install/mac/" |
||||
|
||||
if [ ! -d "${PRODUCT_DIR}" ]; then |
||||
mkdir -p "${PRODUCT_DIR}" |
||||
fi |
||||
$ICEBERG $ICEBERG_CONFIG_FILE |
||||
|
||||
#clean up mess |
||||
rm -rf $ICEBERG_CONFIG_FILE |
||||
|
||||
exit 0 |
||||
fi |
||||
|
||||
notify "Creating dmg ..." |
||||
umount "$VOLUME" 2> /dev/null |
||||
$DMGUTIL --open --volume="$APPLICATION_NAME" "$DMG" |
||||
|
||||
#cp *.pdf "$VOLUME" |
||||
cp -R "$APP" "$VOLUME" |
||||
ln -s /Applications "$VOLUME" |
||||
|
||||
$DMGUTIL --set --iconsize=96 --toolbar=false --icon=resources/macx/OpenBoard.icns "$VOLUME" |
||||
$DMGUTIL --set --x=20 --y=60 --width=580 --height=440 "$VOLUME" |
||||
$DMGUTIL --set --x=180 --y=120 "$VOLUME/`basename \"$APP\"`" |
||||
$DMGUTIL --set --x=400 --y=120 "$VOLUME/Applications" |
||||
|
||||
$DMGUTIL --close --volume="$APPLICATION_NAME" "$DMG" |
||||
|
||||
PRODUCT_DIR="install/mac/" |
||||
|
||||
if [ ! -d "${PRODUCT_DIR}" ]; then |
||||
mkdir -p "${PRODUCT_DIR}" |
||||
fi |
||||
|
||||
|
||||
if [ "$1" == "1010" ]; then |
||||
mv "$DMG" "${PRODUCT_DIR}/OpenBoard_for_1010.dmg" |
||||
else |
||||
mv "$DMG" "${PRODUCT_DIR}" |
||||
fi |
||||
|
||||
notify "$APPLICATION_NAME is now packaged. You can submit this dmg file to notarization using notarize.sh" |
||||
|
||||
exit 0 |
||||
|
||||
@ -0,0 +1,14 @@ |
||||
<?xml version="1.0" encoding="UTF-8"?> |
||||
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> |
||||
<plist version="1.0"> |
||||
<dict> |
||||
<key>com.apple.security.automation.apple-events</key> |
||||
<true/> |
||||
<key>com.apple.security.cs.disable-library-validation</key> |
||||
<true/> |
||||
<key>com.apple.security.device.audio-input</key> |
||||
<true/> |
||||
<key>com.apple.security.device.camera</key> |
||||
<true/> |
||||
</dict> |
||||
</plist> |
||||
Loading…
Reference in new issue