mirror of
https://github.com/nodejs/node.git
synced 2024-11-21 10:59:27 +00:00
ce6c9b050d
PR-URL: https://github.com/nodejs/node/pull/50625 Reviewed-By: Richard Lau <rlau@redhat.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
57 lines
1.5 KiB
Bash
Executable File
57 lines
1.5 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
# Notarize a generated node-<version>.pkg file as an Apple requirement for installation on macOS Catalina and later, as validated by Gatekeeper.
|
|
# Uses notarytool and requires Xcode >= 13.0.
|
|
|
|
pkgid="$1"
|
|
|
|
if [ -z "$pkgid" ]; then
|
|
echo "Usage: $0 <pkgid>"
|
|
exit 1
|
|
fi
|
|
|
|
# shellcheck disable=SC2154
|
|
if [ -z "$NOTARIZATION_ID" ]; then
|
|
echo "No NOTARIZATION_ID environment variable. Skipping notarization."
|
|
exit 0
|
|
fi
|
|
|
|
if [ -z "$NOTARIZATION_PASSWORD" ]; then
|
|
echo "No NOTARIZATION_PASSWORD environment variable. Skipping notarization."
|
|
exit 0
|
|
fi
|
|
|
|
if [ -z "$NOTARIZATION_TEAM_ID" ]; then
|
|
echo "No NOTARIZATION_TEAM_ID environment variable. Skipping notarization."
|
|
exit 0
|
|
fi
|
|
|
|
echo "Notarization process is done with Notarytool."
|
|
|
|
if ! command -v xcrun notarytool > /dev/null
|
|
then
|
|
echo "Notarytool is not present in the system. Notarization has failed."
|
|
exit 1
|
|
fi
|
|
|
|
# Submit the package for notarization
|
|
# TODO(@ulisesGascon): refactor to use --keychain-profile
|
|
# when https://github.com/nodejs/build/issues/3385#issuecomment-1729281269 is ready
|
|
echo "Submitting node-$pkgid.pkg for notarization..."
|
|
|
|
xcrun notarytool submit \
|
|
--apple-id "$NOTARIZATION_ID" \
|
|
--password "$NOTARIZATION_PASSWORD" \
|
|
--team-id "$NOTARIZATION_TEAM_ID" \
|
|
--wait \
|
|
"node-$pkgid.pkg"
|
|
|
|
if [ $? -eq 0 ]; then
|
|
echo "Notarization node-$pkgid.pkg submitted successfully."
|
|
else
|
|
echo "Notarization node-$pkgid.pkg failed."
|
|
exit 1
|
|
fi
|
|
|
|
xcrun stapler staple "node-$pkgid.pkg"
|
|
echo "Stapler was successful." |