1
0
forked from mirrors/0ad

Sign and notarize macOS bundles

This commit is contained in:
Itms
2024-12-31 13:26:55 +01:00
parent 604d4ce29c
commit 2482ecf9fe
4 changed files with 77 additions and 6 deletions
+33 -2
View File
@@ -69,7 +69,22 @@ pipeline {
stage("Create Native macOS Bundle") {
steps {
sh "/opt/wfg/venv/bin/python3 source/tools/dist/build-osx-bundle.py --min_osx=${env.MIN_OSX_VERSION} ${params.BUNDLE_VERSION}"
withCredentials([
string(credentialsId: 'apple-keychain', variable: 'KEYCHAIN_PW'),
string(credentialsId: 'apple-signing', variable: 'SIGNKEY_SHA'),
usernamePassword(credentialsId: 'apple-notarization', passwordVariable: 'NOTARIZATION_PW', usernameVariable: 'NOTARIZATION_USER')])
{
sh '''
security unlock-keychain -p ${KEYCHAIN_PW} login.keychain
/opt/wfg/venv/bin/python3 source/tools/dist/build-osx-bundle.py \
--min_osx=${MIN_OSX_VERSION} \
-s ${SIGNKEY_SHA} \
--notarytool_user=${NOTARIZATION_USER} \
--notarytool_team=P7YF26GARW \
--notarytool_password=${NOTARIZATION_PW} \
${BUNDLE_VERSION}
'''
}
}
}
@@ -90,7 +105,23 @@ pipeline {
stage("Create Intel macOS Bundle") {
steps {
sh "/opt/wfg/venv/bin/python3 source/tools/dist/build-osx-bundle.py --architecture=x86_64 --min_osx=${env.MIN_OSX_VERSION} ${params.BUNDLE_VERSION}"
withCredentials([
string(credentialsId: 'apple-keychain', variable: 'KEYCHAIN_PW'),
string(credentialsId: 'apple-signing', variable: 'SIGNKEY_SHA'),
usernamePassword(credentialsId: 'apple-notarization', passwordVariable: 'NOTARIZATION_PW', usernameVariable: 'NOTARIZATION_USER')])
{
sh '''
security unlock-keychain -p ${KEYCHAIN_PW} login.keychain
/opt/wfg/venv/bin/python3 source/tools/dist/build-osx-bundle.py \
--architecture=x86_64 \
--min_osx=${MIN_OSX_VERSION} \
-s ${SIGNKEY_SHA} \
--notarytool_user=${NOTARIZATION_USER} \
--notarytool_team=P7YF26GARW \
--notarytool_password=${NOTARIZATION_PW} \
${BUNDLE_VERSION}
'''
}
}
}