Perform macOS code-signing

This commit is contained in:
Jean Pierre Cimalando 2020-11-14 16:56:21 +01:00
parent 3cb80b4e4a
commit c7136b6621

View file

@ -2,6 +2,30 @@
set -ex set -ex
make DESTDIR=${PWD}/${INSTALL_DIR} install make DESTDIR=${PWD}/${INSTALL_DIR} install
# Perform code-signing
if test -z "${CODESIGN_PASSWORD}"; then
echo "! Secrets not available, skip code-signing"
else
# unlock the keychain
security unlock-keychain -p dummypasswd build.keychain
# code-sign VST3 and dylibs
codesign --sign "${CODESIGN_IDENTITY}" --deep --keychain build.keychain --verbose \
"${INSTALL_DIR}"/Library/Audio/Plug-Ins/VST3/sfizz.vst3
# code-sign AudioUnit and dylibs
codesign --sign "${CODESIGN_IDENTITY}" --deep --keychain build.keychain --verbose \
"${INSTALL_DIR}"/Library/Audio/Plug-Ins/Components/sfizz.component
codesign --sign "${CODESIGN_IDENTITY}" --deep --keychain build.keychain --verbose \
"${INSTALL_DIR}"/Library/Audio/Plug-Ins/Components/sfizz.component/Contents/Resources/plugin.vst3
# code-sign LV2 and dylibs (note: manual, LV2 are not real bundles)
codesign --sign "${CODESIGN_IDENTITY}" --keychain build.keychain --verbose \
"${INSTALL_DIR}"/Library/Audio/Plug-Ins/LV2/sfizz.lv2/Contents/Binary/*.so
if ls "${INSTALL_DIR}"/Library/Audio/Plug-Ins/LV2/sfizz.lv2/Contents/Frameworks/*.dylib &> /dev/null; then
codesign --sign "${CODESIGN_IDENTITY}" --keychain build.keychain --verbose \
"${INSTALL_DIR}"/Library/Audio/Plug-Ins/LV2/sfizz.lv2/Contents/Frameworks/*.dylib
fi
fi
tar -zcvf "${INSTALL_DIR}.tar.gz" ${INSTALL_DIR} tar -zcvf "${INSTALL_DIR}.tar.gz" ${INSTALL_DIR}
# Only release a tarball if there is a tag # Only release a tarball if there is a tag