AaronFiore/electrum
1
0
Fork 0
Code Activity

mac build: follow-up prev (altool -> notarytool migration)

Browse Source 
related 7ee078852a
This commit is contained in:
SomberNight
2023-12-12 00:48:46 +00:00
parent 99da6507fc
commit c98830d091
2 changed files with 21 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
contrib/osx/README.md
View File

@@ -88,14 +88,19 @@ Let brew install the Xcode CLI tools.
This creates both a folder named Electrum.app and the .dmg file. This creates both a folder named Electrum.app and the .dmg file.
If you want the binaries codesigned for MacOS and notarised by Apple's central server, ##### 2.1. For release binaries, here be dragons
If you want the binaries codesigned for macOS and notarised by Apple's central server,
provide these env vars to the `make_osx.sh` script: provide these env vars to the `make_osx.sh` script:
CODESIGN_CERT="Developer ID Application: Electrum Technologies GmbH (L6P37P7P56)" \ CODESIGN_CERT="Developer ID Application: Electrum Technologies GmbH (L6P37P7P56)" \
APPLE_TEAM_ID="L6P37P7P56" \
APPLE_ID_USER="me@email.com" \ APPLE_ID_USER="me@email.com" \
APPLE_ID_PASSWORD="1234" \ APPLE_ID_PASSWORD="1234" \
./contrib/osx/make_osx.sh ./contrib/osx/make_osx.sh
(note: `APPLE_ID_PASSWORD` is an app-specific password, *not* the account password)
## Verifying reproducibility and comparing against official binary ## Verifying reproducibility and comparing against official binary

20
contrib/osx/notarize_app.sh
View File

@@ -24,10 +24,12 @@ ditto -c -k --rsrc --keepParent "$APP_BUNDLE" "${APP_BUNDLE}.zip"
# Submit for notarization # Submit for notarization
echo "Submitting $APP_BUNDLE for notarization..." echo "Submitting $APP_BUNDLE for notarization..."
RESULT=$(xcrun notarytool submit \ RESULT=$(xcrun notarytool submit \
--team-id $APPLE_TEAM_ID \ --team-id "$APPLE_TEAM_ID" \
--apple-id $APPLE_ID_USER \ --apple-id "$APPLE_ID_USER" \
--password $APPLE_ID_PASSWORD \ --password "$APPLE_ID_PASSWORD" \
--output-format plist \
--wait \ --wait \
--timeout 10m \
"${APP_BUNDLE}.zip" "${APP_BUNDLE}.zip"
) )
@@ -37,8 +39,16 @@ if [ $? -ne 0 ]; then
exit 1 exit 1
fi fi
# success STATUS=$(echo "$RESULT" | xpath -e \
echo $RESULT "//key[normalize-space(text()) = 'status']/following-sibling::string[1]/text()" 2> /dev/null)
if [ "$STATUS" = "Accepted" ]; then
echo "Notarization of $APP_BUNDLE succeeded!"
else
echo "Notarization of $APP_BUNDLE failed:"
echo "$RESULT"
exit 1
fi
# Staple the notary ticket # Staple the notary ticket
xcrun stapler staple "$APP_BUNDLE" xcrun stapler staple "$APP_BUNDLE"