Perform macOS code-signing
This commit is contained in:
parent
3cb80b4e4a
commit
c7136b6621
1 changed files with 24 additions and 0 deletions
|
|
@ -2,6 +2,30 @@
|
|||
set -ex
|
||||
|
||||
make DESTDIR=${PWD}/${INSTALL_DIR} install
|
||||
|
||||
# Perform code-signing
|
||||
if test -z "${CODESIGN_PASSWORD}"; then
|
||||
echo "! Secrets not available, skip code-signing"
|
||||
else
|
||||
# unlock the keychain
|
||||
security unlock-keychain -p dummypasswd build.keychain
|
||||
# code-sign VST3 and dylibs
|
||||
codesign --sign "${CODESIGN_IDENTITY}" --deep --keychain build.keychain --verbose \
|
||||
"${INSTALL_DIR}"/Library/Audio/Plug-Ins/VST3/sfizz.vst3
|
||||
# code-sign AudioUnit and dylibs
|
||||
codesign --sign "${CODESIGN_IDENTITY}" --deep --keychain build.keychain --verbose \
|
||||
"${INSTALL_DIR}"/Library/Audio/Plug-Ins/Components/sfizz.component
|
||||
codesign --sign "${CODESIGN_IDENTITY}" --deep --keychain build.keychain --verbose \
|
||||
"${INSTALL_DIR}"/Library/Audio/Plug-Ins/Components/sfizz.component/Contents/Resources/plugin.vst3
|
||||
# code-sign LV2 and dylibs (note: manual, LV2 are not real bundles)
|
||||
codesign --sign "${CODESIGN_IDENTITY}" --keychain build.keychain --verbose \
|
||||
"${INSTALL_DIR}"/Library/Audio/Plug-Ins/LV2/sfizz.lv2/Contents/Binary/*.so
|
||||
if ls "${INSTALL_DIR}"/Library/Audio/Plug-Ins/LV2/sfizz.lv2/Contents/Frameworks/*.dylib &> /dev/null; then
|
||||
codesign --sign "${CODESIGN_IDENTITY}" --keychain build.keychain --verbose \
|
||||
"${INSTALL_DIR}"/Library/Audio/Plug-Ins/LV2/sfizz.lv2/Contents/Frameworks/*.dylib
|
||||
fi
|
||||
fi
|
||||
|
||||
tar -zcvf "${INSTALL_DIR}.tar.gz" ${INSTALL_DIR}
|
||||
|
||||
# Only release a tarball if there is a tag
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue