pkg/macos/build.sh - master - githubmirror/salt

pkg/macos/build.sh
272 строки10 KB
twangboy
Get versions from cicd
30 авг 2023, 22:35
30 авг 2023, 22:35152ced0
#!/bin/bash
################################################################################
#
# Title: Build Salt Package Script for macOS
# Authors: CR Oldham, Shane Lee
# Date: December 2015
#
# Description: This script downloads and installs all dependencies and build
#              tools required to create a .pkg file for installation on macOS.
#              Salt and all dependencies will be installed to a Relenv Python
#              environment in the ./build directory relevant to this script. A
#              .pkg file will then be created. The pkg will be signed and
#              notarized
#
#              If this script is run with sudo, you must pass the `-E` option
#              in order for the environment variables to be available. For
#              example:
#
#              sudo -E ./build.sh 3003
#
# Requirements:
#     - Xcode
#
#     NOTE: Previous versions of this script were able to run with just the
#           Xcode command line tools. However, now that we are notarizing these
#           packages, we require a full Xcode installation.
#
# Usage:
#     This script can be passed 3 positional arguments:
#         $1 : <version> : the version of salt to build
#                          (defaults to git-repo state)
#
#     Example:

#         # The following will build a Salt 3006.1-1 package:
#         ./build.sh 3006.1-1
#
#         # The following will build whatever version of salt is checked out:
#         ./build.sh
#
#         # The following will ensure environment variables are passed to the
#         # sudo environment:
#         sudo -E ./build.sh 3006.1-1
#
# This script calls out to the following scripts:
#
#     build_python.sh
#         Builds python using the relenv project:
#         https://github.com/saltstack/relative-environment-for-python
#
#     install_salt.sh
#         Installs Salt into the python environment
#
#     sign_binaries.sh
#         Signs all the binaries with the Developer App certificate specified in
#         the DEV_APP_CERT environment variable. It signs all binaries in the
#         ./build directory. It also signs all .dylib and .so files.
#
#     prep_salt.sh
#         Prepare the build environment for packaging. Stages config files and
#         service definitions. Removes files we don't want in the package.
#
#     package.sh
#         Builds a package file from the contents of ./build and signs it with
#         the Developer Installer certificate specified in the DEV_INSTALL_CERT
#         environment variable.
#
#     notarize.sh
#         Uploads the package to be notarized by Apple and staples the
#         notarization to the installer pkg. It uses the Apple Account name
#         specified in the APPLE_ACCT environment variable and the app-specific
#         password for that account specified in the APP_SPEC_PWD environment
#         variable.
#
# Environment Setup:
#     These scripts require certificates and environment variables be present on
#     the system. Details can be found in the individual scripts that use them.
#
#     Import Certificates:
#         Import the Salt Developer Application and Installer Signing
#         certificates using the following commands:
#
#         security import "developerID_application.p12" -k ~/Library/Keychains/login.keychain
#         security import "developerID_installer.p12" -k ~/Library/Keychains/login.keychain
#
#     Define Environment Variables:
#         Define the environment variables using the following commands (replace
#         with the actual values):
#
#         export DEV_APP_CERT="Developer ID Application: Salt Stack, Inc. (AB123ABCD1)"
#         export DEV_INSTALL_CERT="Developer ID Installer: Salt Stack, Inc. (AB123ABCD1)"
#         export APPLE_ACCT="username@domain.com"
#         export APP_SPEC_PWD="abcd-efgh-ijkl-mnop"
#
#         Don't forget to pass the `-E` option when running with Sudo so that
#         the environment variables are passed to the `package.sh`,
#         `notarize.sh`, and `sign_binaries.sh` scripts under the sudo
#         environment.
#
################################################################################

#-------------------------------------------------------------------------------
# Variables
#-------------------------------------------------------------------------------
SRC_DIR="$(git rev-parse --show-toplevel)"
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
CPU_ARCH=$(uname -m)

#-------------------------------------------------------------------------------
# Functions
#-------------------------------------------------------------------------------
# _usage
#
#   Prints out help text
_usage() {
     echo ""
     echo "Script to build a Salt package for macOS:"
     echo ""
     echo "usage: ${0}"
     echo "             [-h|--help] [-v|--version]"
     echo ""
     echo "  -h, --help             Display this message"
     echo "  -v, --version          Version of Salt to display in the package"
     echo "  -p, --python-version   Version of python to install using relenv."
     echo "                         The python version is tied to the relenv"
     echo "                         version"
     echo "  -r, --relenv-version   Version of relenv to install"
     echo ""
     echo "  Build a Salt package:"
     echo "      example: $0 3006.1-1"
}

function _parse_yaml {
   local prefix=$2
   local s='[[:space:]]*' w='[a-zA-Z0-9_]*' fs=$(echo @|tr @ '\034')
   sed -ne "s|^\($s\):|\1|" \
        -e "s|^\($s\)\($w\)$s:$s[\"']\(.*\)[\"']$s\$|\1$fs\2$fs\3|p" \
        -e "s|^\($s\)\($w\)$s:$s\(.*\)$s\$|\1$fs\2$fs\3|p"  $1 |
   awk -F$fs '{
      indent = length($1)/2;
      vname[indent] = $2;
      for (i in vname) {if (i > indent) {delete vname[i]}}
      if (length($3) > 0) {
         vn=""; for (i=0; i<indent; i++) {vn=(vn)(vname[i])("_")}
         printf("%s%s%s=\"%s\"\n", "'$prefix'",vn, $2, $3);
      }
   }'
}

#-------------------------------------------------------------------------------
# Get Parameters
#-------------------------------------------------------------------------------
while true; do
    if [[ -z "$1" ]]; then break; fi
    case "$1" in
        -h | --help )
            _usage
            exit 0
            ;;
        -v | --version )
            shift
            VERSION="$*"
            shift
            ;;
        -p | --python-version )
            shift
            PY_VERSION="$1"
            shift
            ;;
        -r | --relenv-version )
            shift
            RELENV_VERSION="$1"
            shift
            ;;
        -*)
            echo "Invalid Option: $1"
            echo ""
            _usage
            exit 1
            ;;
        * )
            VERSION="$*"
            shift
            ;;
    esac
done

if [ -z "$VERSION" ]; then
    VERSION=$(git describe)
fi
VERSION=${VERSION#"v"}

# Get defaults from workflows. This defines $python_version and $relenv_version
eval "$(_parse_yaml "$SRC_DIR/cicd/shared-gh-workflows-context.yml")"

if [ -z "$PY_VERSION" ]; then
    PY_VERSION=$python_version
fi

if [ -z "$RELENV_VERSION" ]; then
    RELENV_VERSION=$relenv_version
fi

#-------------------------------------------------------------------------------
# Quit on error
#-------------------------------------------------------------------------------
quit_on_error() {
    echo "$(basename "$0") caught error on line : $1 command was: $2"
    echo -en "\033]0;\a"
    exit 1
}
trap 'quit_on_error $LINENO $BASH_COMMAND' ERR

#-------------------------------------------------------------------------------
# Make sure this is the Salt Repository
#-------------------------------------------------------------------------------
if [[ ! -e "$SRC_DIR/.git" ]] && [[ ! -e "$SRC_DIR/scripts/salt" ]]; then
    echo "This directory doesn't appear to be a Salt git repository."
    echo "The macOS build process needs some files from a Git checkout of Salt."
    echo -en "\033]0;\a"
    exit 1
fi

#-------------------------------------------------------------------------------
# Script Start
#-------------------------------------------------------------------------------
printf "#%.0s" {1..80}; printf "\n"
echo "Build Salt Package for macOS"
echo "- Python Version: $PY_VERSION"
echo "- Relenv Version: $RELENV_VERSION"
printf "v%.0s" {1..80}; printf "\n"

#-------------------------------------------------------------------------------
# Build Python
#-------------------------------------------------------------------------------
"$SCRIPT_DIR/build_python.sh" -v $PY_VERSION -r $RELENV_VERSION

#-------------------------------------------------------------------------------
# Install Salt
#-------------------------------------------------------------------------------
"$SCRIPT_DIR/install_salt.sh"

#-------------------------------------------------------------------------------
# Sign Binaries built by Salt
#-------------------------------------------------------------------------------
"$SCRIPT_DIR/sign_binaries.sh"

#-------------------------------------------------------------------------------
# Prepare the Salt environment for packaging
#-------------------------------------------------------------------------------
"$SCRIPT_DIR/prep_salt.sh"

#-------------------------------------------------------------------------------
# Build and Sign Package
#-------------------------------------------------------------------------------
if [ "$(id -un)" != "root" ]; then
    sudo "$SCRIPT_DIR/package.sh" "$VERSION" -s
else
    "$SCRIPT_DIR/package.sh" "$VERSION" -s
fi

#-------------------------------------------------------------------------------
# Notarize Package
#-------------------------------------------------------------------------------
"$SCRIPT_DIR/notarize.sh" "salt-$VERSION-py3-$CPU_ARCH.pkg"

#-------------------------------------------------------------------------------
# Script Completed
#-------------------------------------------------------------------------------
printf "^%.0s" {1..80}; printf "\n"
echo "Build Salt Package for macOS Complete"
printf "#%.0s" {1..80}; printf "\n"