From ca36ce2833379d32f499eb69bc5d14c030b06875 Mon Sep 17 00:00:00 2001 From: aboyko Date: Wed, 19 Jul 2023 20:56:17 -0400 Subject: [PATCH] GHA: revert osx sign/notarize bits commented out --- .../gh-hosted-eclipse-distro-build.yml | 66 +++++++++---------- 1 file changed, 33 insertions(+), 33 deletions(-) diff --git a/.github/workflows/gh-hosted-eclipse-distro-build.yml b/.github/workflows/gh-hosted-eclipse-distro-build.yml index b8202ed96..63ac79335 100644 --- a/.github/workflows/gh-hosted-eclipse-distro-build.yml +++ b/.github/workflows/gh-hosted-eclipse-distro-build.yml @@ -41,47 +41,47 @@ jobs: run: | echo "${{ secrets.GPG_PRIVATE_KEY }}" > gpg.asc echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --yes --passphrase-fd 0 --import gpg.asc -# - name: Create Keychain. Add Mac App Dev Certificate to Keychain -# env: -# BUILD_CERTIFICATE_BASE64: ${{ secrets.BUILD_CERTIFICATE_BASE64 }} -# P12_PASSWORD: ${{ secrets.P12_PASSWORD }} -# KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }} -# run: | -# CERTIFICATE_PATH=$RUNNER_TEMP/build_certificate.p12 -# KEYCHAIN=$RUNNER_TEMP/app-signing.keychain-db -# -# echo -n "$BUILD_CERTIFICATE_BASE64" | base64 --decode -o $CERTIFICATE_PATH -# -# security create-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN -# security set-keychain-settings -lut 21600 $KEYCHAIN -# security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN -# -# security import $CERTIFICATE_PATH -P "$P12_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN -# security list-keychain -d user -s $KEYCHAIN -# - name: Unlock Keychain for OSX signing -# run: | -# security unlock-keychain -p ${{ secrets.KEYCHAIN_PASSWORD }} $RUNNER_TEMP/app-signing.keychain-db -# - name: Install appdmg -# run: | -# npm install -g appdmg -# - name: Create Temp Directory Structure for Notarization Service -# run: | -# cd /tmp -# mkdir -p macos-notarization-service/pending-files + - name: Create Keychain. Add Mac App Dev Certificate to Keychain + env: + BUILD_CERTIFICATE_BASE64: ${{ secrets.BUILD_CERTIFICATE_BASE64 }} + P12_PASSWORD: ${{ secrets.P12_PASSWORD }} + KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }} + run: | + CERTIFICATE_PATH=$RUNNER_TEMP/build_certificate.p12 + KEYCHAIN=$RUNNER_TEMP/app-signing.keychain-db + + echo -n "$BUILD_CERTIFICATE_BASE64" | base64 --decode -o $CERTIFICATE_PATH + + security create-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN + security set-keychain-settings -lut 21600 $KEYCHAIN + security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN + + security import $CERTIFICATE_PATH -P "$P12_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN + security list-keychain -d user -s $KEYCHAIN + - name: Unlock Keychain for OSX signing + run: | + security unlock-keychain -p ${{ secrets.KEYCHAIN_PASSWORD }} $RUNNER_TEMP/app-signing.keychain-db + - name: Install appdmg + run: | + npm install -g appdmg + - name: Create Temp Directory Structure for Notarization Service + run: | + cd /tmp + mkdir -p macos-notarization-service/pending-files - name: Build Eclipse Distro env: tools_s3_access_key: ${{ secrets.TOOLS_S3_ACCESS_KEY }} tools_s3_secret_key: ${{ secrets.TOOLS_S3_SECRET_KEY }} gpg_passphrase: ${{ secrets.GPG_PASSPHRASE }} gpg_keyname: ${{ secrets.GPG_KEYID }} -# MACOS_CERTIFICATE_ID: ${{ secrets.MACOS_CERTIFICATE_ID }} -# MACOS_NOTARIZATION_SERVICE_URL: http://localhost:8080 -# AC_USERNAME: ${{ secrets.AC_USERNAME }} -# AC_PASSWORD: ${{ secrets.AC_PASSWORD }} -# APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }} + MACOS_CERTIFICATE_ID: ${{ secrets.MACOS_CERTIFICATE_ID }} + MACOS_NOTARIZATION_SERVICE_URL: http://localhost:8080 + AC_USERNAME: ${{ secrets.AC_USERNAME }} + AC_PASSWORD: ${{ secrets.AC_PASSWORD }} + APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }} run: | cd eclipse-distribution -# KEYCHAIN=$RUNNER_TEMP/app-signing.keychain-db + KEYCHAIN=$RUNNER_TEMP/app-signing.keychain-db ./mvnw --batch-mode -U clean deploy -P${{ inputs.eclipse_profile }} -P${{ inputs.build_type }} -Pgitactions -Pgpg.sign -Dsigning.skip=true -Dmaven.repo.local=~/.m2/repository-signed -Dhttpclient.retry-max=20 -Dmaven.test.skip=true -Declipse.p2.mirrors=false -Dtycho.localArtifacts=ignore -Ds3service.https-only=true -Dp2.replaceQualifier=true -Dorg.eclipse.ecf.provider.filetransfer.httpclient.retrieve.readTimeout=1200000 -Dorg.eclipse.equinox.p2.transport.ecf.retry=5 -Dskip.eclipserun.proxies=false -Dskip.osx.signing=true -Dskip.win.signing=true -Dskip.osx.notarizing=true -Dtycho.equinox.resolver.uses=true - name: Upload Build Artifacts for Signing env: