mirror of https://github.com/oxen-io/lokinet
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
114 lines
3.8 KiB
Python
114 lines
3.8 KiB
Python
#!/usr/bin/env python3
|
|
|
|
import sys
|
|
import plistlib
|
|
import subprocess
|
|
import time
|
|
import os
|
|
import os.path
|
|
|
|
def bold_red(x):
|
|
return "\x1b[31;1m" + x + "\x1b[0m"
|
|
|
|
if not @notarize_py_is_sysext@:
|
|
print(bold_red("\nUnable to notarize: this lokinet is not built as a system extension\n"), file=sys.stderr)
|
|
sys.exit(1)
|
|
|
|
if not all(("@MACOS_NOTARIZE_USER@", "@MACOS_NOTARIZE_PASS@", "@MACOS_NOTARIZE_ASC@")):
|
|
print(bold_red("\nUnable to notarize: one or more required notarization variable not set; see contrib/macos/README.txt\n") +
|
|
" Called with -DMACOS_NOTARIZE_USER=@MACOS_NOTARIZE_USER@\n"
|
|
" -DMACOS_NOTARIZE_PASS=@MACOS_NOTARIZE_PASS@\n"
|
|
" -DMACOS_NOTARIZE_ASC=@MACOS_NOTARIZE_ASC@\n",
|
|
file=sys.stderr)
|
|
sys.exit(1)
|
|
|
|
os.chdir("@PROJECT_BINARY_DIR@")
|
|
app = "@lokinet_app@"
|
|
zipfile = f"Lokinet.app.notarize.zip"
|
|
print(f"Creating {zipfile} from {app}")
|
|
if os.path.exists(zipfile):
|
|
os.remove(zipfile)
|
|
subprocess.run(['ditto', '-v', '-c', '-k', '--sequesterRsrc', '--keepParent', app, zipfile])
|
|
|
|
userpass = ('--username', "@MACOS_NOTARIZE_USER@", '--password', "@MACOS_NOTARIZE_PASS@")
|
|
print("Submitting {} for notarization; this may take a minute...".format(zipfile))
|
|
|
|
started = time.time()
|
|
command = [
|
|
'xcrun', 'altool',
|
|
'--notarize-app',
|
|
'--primary-bundle-id', 'org.lokinet.@PROJECT_VERSION@',
|
|
*userpass,
|
|
'--asc-provider', "@MACOS_NOTARIZE_ASC@",
|
|
'--file', zipfile,
|
|
'--output-format', 'xml'
|
|
]
|
|
print(command)
|
|
result = subprocess.run(command, stdout=subprocess.PIPE)
|
|
|
|
data = plistlib.loads(result.stdout)
|
|
if 'success-message' not in data or 'notarization-upload' not in data or 'RequestUUID' not in data['notarization-upload']:
|
|
print("Something failed, leaving you with this nice XML to figure out:\n{}".format(data))
|
|
sys.exit(1)
|
|
|
|
uuid = data['notarization-upload']['RequestUUID']
|
|
elapsed = time.time() - started
|
|
mins, secs = int(elapsed // 60), elapsed % 60
|
|
print("Notarization submitted with request uuid = {} in {:d}m{:05.2f}s".format(uuid, mins, secs))
|
|
print(data['success-message'])
|
|
|
|
print("Begin polling for notarization result")
|
|
started_waiting = time.time()
|
|
done = False
|
|
success = False
|
|
while not done:
|
|
time.sleep(5)
|
|
result = subprocess.run([
|
|
'xcrun', 'altool',
|
|
'--notarization-info', uuid,
|
|
*userpass,
|
|
'--output-format', 'xml'
|
|
], stdout=subprocess.PIPE, stderr=subprocess.PIPE)
|
|
if result.returncode == 1 and b'Gateway Timeout' in result.stderr:
|
|
status = "Apple's servers are trash (aka Gateway Timeout)"
|
|
else:
|
|
result.check_returncode()
|
|
data = plistlib.loads(result.stdout)
|
|
if 'notarization-info' not in data or 'Status' not in data['notarization-info']:
|
|
status = 'Request failed'
|
|
else:
|
|
status = data['notarization-info']['Status Message'] if 'Status Message' in data['notarization-info'] else ''
|
|
st = data['notarization-info']['Status']
|
|
if st == 'success':
|
|
success = True
|
|
done = True
|
|
elif st == 'invalid':
|
|
done = True
|
|
elif st == 'in progress' and len(status) == 0:
|
|
status = 'Notarization in progress'
|
|
|
|
if done and 'LogFileURL' in data['notarization-info']:
|
|
status += '\n\nlog file: {}'.format(data['notarization-info']['LogFileURL'])
|
|
|
|
elapsed = time.time() - started_waiting
|
|
mins, secs = int(elapsed // 60), int(elapsed % 60)
|
|
|
|
print("\033[1K\r(+{:d}m{:02d}s) {}: {}".format(mins, secs, st, status), end='', flush=True)
|
|
|
|
print("\n")
|
|
if not success:
|
|
sys.exit(42)
|
|
|
|
if os.path.exists(zipfile):
|
|
os.remove(zipfile)
|
|
|
|
print("Stapling {}...".format(app), end='')
|
|
result = subprocess.run(['xcrun', 'stapler', 'staple', app])
|
|
|
|
result.check_returncode()
|
|
|
|
with open("macos-notarized.stamp", 'w'):
|
|
pass
|
|
|
|
print(" success.\n")
|