GHA: osx notarization wait and parallelize

This commit is contained in:
aboyko
2023-07-19 20:54:28 -04:00
parent 644b2e24ac
commit b94c25425f
3 changed files with 61 additions and 45 deletions

16
.github/scripts/notarize-osx-distro-file.sh vendored Executable file
View File

@@ -0,0 +1,16 @@
# Takes a DMG file as parameter
set -e
$dmg_file=$1
dmg_filename="$(basename -- $dmg_file)"
dir="$(dirname "$dmg_file")"
echo "****************************************************************"
echo "*** Notarizing: ${dmg_filename}"
echo "****************************************************************"
cd $dir
xcrun notarytool submit ./${dmg_filename} --keychain-profile notarize-app-dmg-profile --wait
echo "Staple and generate checksums for ${dmg_filename}"
xcrun stapler staple $dmg_filename
shasum -a 256 $dmg_filename > ${dmg_filename}.sha256
md5 $dmg_filename > ${dmg_filename}.md5)

View File

@@ -8,7 +8,7 @@ filename="$(basename -- $file)"
dir="$(dirname "$file")"
echo "****************************************************************"
echo "*** Processing : ${file}"
echo "*** Signing and creating DMG for: ${file}"
echo "****************************************************************"
destination_folder_name=extracted_${filename}
echo "Extracting archive ${filename} to ${dir}/${destination_folder_name}"
@@ -44,11 +44,4 @@ rm -f $filename
echo "Sign ${dmg_filename}"
echo 'codesign --verbose --deep --force --timestamp --keychain "'${KEYCHAIN}'" -s "'${MACOS_CERTIFICATE_ID}'" ./$dmg_filename'
codesign --verbose --deep --force --timestamp --keychain "${KEYCHAIN}" -s "${MACOS_CERTIFICATE_ID}" ./$dmg_filename
echo "Notarizing $dmg_filename"
(xcrun notarytool submit ./${dmg_filename} --keychain-profile notarize-app-dmg-profile --wait \
&& echo "Staple and generate checksums for ${dmg_filename}" \
&& xcrun stapler staple $dmg_filename \
&& shasum -a 256 $dmg_filename > ${dmg_filename}.sha256 \
&& md5 $dmg_filename > ${dmg_filename}.md5) &
codesign --verbose --deep --force --timestamp --keychain "${KEYCHAIN}" -s "${MACOS_CERTIFICATE_ID}" ./$dmg_filename