1 #!/bin/sh 2 3 # Copyright (c) 2012 The Chromium Authors. All rights reserved. 4 # Use of this source code is governed by a BSD-style license that can be 5 # found in the LICENSE file. 6 7 # This script signs the Chromoting binaries, builds the Chrome Remote Desktop 8 # installer and then packages it into a .dmg. It requires that Packages be 9 # installed (for 'packagesbuild'). 10 # Packages: http://s.sudre.free.fr/Software/Packages/about.html 11 # 12 # usage: do_signing.sh output_dir input_dir [codesign_keychain codesign_id 13 # [productsign_id]] 14 # 15 # The final disk image (dmg) is placed in |output_dir|. 16 17 set -e -u 18 19 ME="$(basename "${0}")" 20 readonly ME 21 22 declare -a g_cleanup_dirs 23 24 setup() { 25 local input_dir="${1}" 26 27 # The file that contains the properties for this signing build. 28 # The file should contain only key=value pairs, one per line. 29 PROPS_FILENAME="${input_dir}/do_signing.props" 30 31 # Individually load the properties for this build. Don't 'source' the file 32 # to guard against code accidentally being added to the props file. 33 DMG_VOLUME_NAME=$(read_property "DMG_VOLUME_NAME") 34 DMG_FILE_NAME=$(read_property "DMG_FILE_NAME") 35 HOST_BUNDLE_NAME=$(read_property "HOST_BUNDLE_NAME") 36 HOST_PKG=$(read_property "HOST_PKG") 37 HOST_UNINSTALLER_NAME=$(read_property "HOST_UNINSTALLER_NAME") 38 NATIVE_MESSAGING_HOST_BUNDLE_NAME=$(read_property\ 39 "NATIVE_MESSAGING_HOST_BUNDLE_NAME") 40 PREFPANE_BUNDLE_NAME=$(read_property "PREFPANE_BUNDLE_NAME") 41 REMOTE_ASSISTANCE_HOST_BUNDLE_NAME=$(read_property\ 42 "REMOTE_ASSISTANCE_HOST_BUNDLE_NAME") 43 44 # Binaries to sign. 45 ME2ME_HOST="PrivilegedHelperTools/${HOST_BUNDLE_NAME}" 46 ME2ME_NM_HOST="PrivilegedHelperTools/${HOST_BUNDLE_NAME}/Contents/MacOS/"` 47 `"${NATIVE_MESSAGING_HOST_BUNDLE_NAME}/Contents/MacOS/"` 48 `"native_messaging_host" 49 IT2ME_NM_HOST="PrivilegedHelperTools/${HOST_BUNDLE_NAME}/Contents/MacOS/"` 50 `"${REMOTE_ASSISTANCE_HOST_BUNDLE_NAME}/Contents/MacOS/"` 51 `"remote_assistance_host" 52 UNINSTALLER="Applications/${HOST_UNINSTALLER_NAME}.app" 53 PREFPANE="PreferencePanes/${PREFPANE_BUNDLE_NAME}" 54 55 # The Chromoting Host installer is a meta-package that consists of 3 56 # components: 57 # * Chromoting Host Service package 58 # * Chromoting Host Uninstaller package 59 # * Keystone package (GoogleSoftwareUpdate - for Official builds only) 60 PKGPROJ_HOST="ChromotingHost.pkgproj" 61 PKGPROJ_HOST_SERVICE="ChromotingHostService.pkgproj" 62 PKGPROJ_HOST_UNINSTALLER="ChromotingHostUninstaller.pkgproj" 63 64 # Final (user-visible) pkg name. 65 PKG_FINAL="${HOST_PKG}.pkg" 66 67 DMG_FILE_NAME="${DMG_FILE_NAME}.dmg" 68 69 # Temp directory for Packages output. 70 PKG_DIR=build 71 g_cleanup_dirs+=("${PKG_DIR}") 72 73 # Temp directories for building the dmg. 74 DMG_TEMP_DIR="$(mktemp -d -t "${ME}"-dmg)" 75 g_cleanup_dirs+=("${DMG_TEMP_DIR}") 76 77 DMG_EMPTY_DIR="$(mktemp -d -t "${ME}"-empty)" 78 g_cleanup_dirs+=("${DMG_EMPTY_DIR}") 79 } 80 81 err() { 82 echo "[$(date +'%Y-%m-%d %H:%M:%S%z')]: ${@}" >&2 83 } 84 85 err_exit() { 86 err "${@}" 87 exit 1 88 } 89 90 # shell_safe_path ensures that |path| is safe to pass to tools as a 91 # command-line argument. If the first character in |path| is "-", "./" is 92 # prepended to it. The possibly-modified |path| is output. 93 shell_safe_path() { 94 local path="${1}" 95 if [[ "${path:0:1}" = "-" ]]; then 96 echo "./${path}" 97 else 98 echo "${path}" 99 fi 100 } 101 102 # Read a single property from the properties file. 103 read_property() { 104 local property="${1}" 105 local filename="${PROPS_FILENAME}" 106 echo `grep "\<${property}\>=" "${filename}" | tail -n 1 | cut -d "=" -f2-` 107 } 108 109 verify_clean_dir() { 110 local dir="${1}" 111 if [[ ! -d "${dir}" ]]; then 112 mkdir "${dir}" 113 fi 114 115 if [[ -e "${output_dir}/${DMG_FILE_NAME}" ]]; then 116 err "Output directory is dirty from previous build." 117 exit 1 118 fi 119 } 120 121 sign() { 122 local name="${1}" 123 local keychain="${2}" 124 local id="${3}" 125 126 if [[ ! -e "${name}" ]]; then 127 err_exit "Input file doesn't exist: ${name}" 128 fi 129 130 echo Signing "${name}" 131 codesign -vv -s "${id}" --keychain "${keychain}" "${name}" 132 codesign -v "${name}" 133 } 134 135 sign_binaries() { 136 local input_dir="${1}" 137 local keychain="${2}" 138 local id="${3}" 139 140 sign "${input_dir}/${ME2ME_NM_HOST}" "${keychain}" "${id}" 141 sign "${input_dir}/${IT2ME_NM_HOST}" "${keychain}" "${id}" 142 sign "${input_dir}/${ME2ME_HOST}" "${keychain}" "${id}" 143 sign "${input_dir}/${UNINSTALLER}" "${keychain}" "${id}" 144 sign "${input_dir}/${PREFPANE}" "${keychain}" "${id}" 145 } 146 147 sign_installer() { 148 local input_dir="${1}" 149 local keychain="${2}" 150 local id="${3}" 151 152 local package="${input_dir}/${PKG_DIR}/${PKG_FINAL}" 153 productsign --sign "${id}" --keychain "${keychain}" \ 154 "${package}" "${package}.signed" 155 mv -f "${package}.signed" "${package}" 156 } 157 158 build_package() { 159 local pkg="${1}" 160 echo "Building .pkg from ${pkg}" 161 packagesbuild -v "${pkg}" 162 } 163 164 build_packages() { 165 local input_dir="${1}" 166 build_package "${input_dir}/${PKGPROJ_HOST_SERVICE}" 167 build_package "${input_dir}/${PKGPROJ_HOST_UNINSTALLER}" 168 build_package "${input_dir}/${PKGPROJ_HOST}" 169 } 170 171 build_dmg() { 172 local input_dir="${1}" 173 local output_dir="${2}" 174 175 # Create the .dmg. 176 echo "Building .dmg..." 177 "${input_dir}/pkg-dmg" \ 178 --format UDBZ \ 179 --tempdir "${DMG_TEMP_DIR}" \ 180 --source "${DMG_EMPTY_DIR}" \ 181 --target "${output_dir}/${DMG_FILE_NAME}" \ 182 --volname "${DMG_VOLUME_NAME}" \ 183 --copy "${input_dir}/${PKG_DIR}/${PKG_FINAL}" \ 184 --copy "${input_dir}/Scripts/keystone_install.sh:/.keystone_install" 185 186 if [[ ! -f "${output_dir}/${DMG_FILE_NAME}" ]]; then 187 err_exit "Unable to create disk image: ${DMG_FILE_NAME}" 188 fi 189 } 190 191 cleanup() { 192 if [[ "${#g_cleanup_dirs[@]}" > 0 ]]; then 193 rm -rf "${g_cleanup_dirs[@]}" 194 fi 195 } 196 197 usage() { 198 echo "Usage: ${ME} output_dir input_dir [keychain codesign_id"\ 199 "[productsign_id]]" >&2 200 echo " Sign the binaries using the specified <codesign_id>, build" >&2 201 echo " the installer and then sign the installer using the given" >&2 202 echo " <productsign_id>." >&2 203 echo " If the <keychain> and signing ids are not specified then the" >&2 204 echo " installer is built without signing any binaries." >&2 205 } 206 207 main() { 208 local output_dir="$(shell_safe_path "${1}")" 209 local input_dir="$(shell_safe_path "${2}")" 210 local do_sign_binaries=0 211 local keychain="" 212 if [[ ${#} -ge 3 ]]; then 213 keychain="$(shell_safe_path "${3}")" 214 do_sign_binaries=1 215 echo "Signing binaries using ${keychain}" 216 else 217 echo "Not signing binaries (no keychain or identify specified)" 218 fi 219 local codesign_id="" 220 if [[ ${#} -ge 4 ]]; then 221 codesign_id="${4}" 222 fi 223 local productsign_id="" 224 if [[ ${#} -ge 5 ]]; then 225 productsign_id="${5}" 226 fi 227 228 if [[ "${do_sign_binaries}" == 1 && -z "${codesign_id}" ]]; then 229 err_exit "Can't sign binaries - please specify a codesign_id" 230 fi 231 232 setup "${input_dir}" 233 verify_clean_dir "${output_dir}" 234 235 if [[ "${do_sign_binaries}" == 1 ]]; then 236 sign_binaries "${input_dir}" "${keychain}" "${codesign_id}" 237 fi 238 build_packages "${input_dir}" 239 if [[ "${do_sign_binaries}" == 1 && -n "${productsign_id}" ]]; then 240 echo "Signing installer..." 241 sign_installer "${input_dir}" "${keychain}" "${productsign_id}" 242 fi 243 build_dmg "${input_dir}" "${output_dir}" 244 245 cleanup 246 } 247 248 if [[ ${#} < 2 ]]; then 249 usage 250 exit 1 251 fi 252 253 main "${@}" 254 exit ${?} 255
