Skip to content

Instantly share code, notes, and snippets.

@MagerValp

MagerValp/notarize_pkg.sh

Last active March 5, 2023 02:04
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save MagerValp/5c1e022e820e82bace5487ceba4b1bda to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save MagerValp/5c1e022e820e82bace5487ceba4b1bda to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. MagerValp revised this gist Nov 1, 2019. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion notarize_pkg.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -14,7 +14,7 @@ if ! source notarization_config.sh; then
    fi


    declare -ri EX_OK=0 ; declare -ri EX_USAGE=64 ; declare -ri EX_DATAERR=65 ; declare -ri EX_NOINPUT=66
    declare -ri EX_OK=0 ; declare -ri EX_USAGE=64 ; declare -ri EX_DATAERR=65 ; declare -ri EX_NOINPUT=66
    declare -ri EX_NOUSER=67 ; declare -ri EX_NOHOST=68 ; declare -ri EX_UNAVAILABLE=69 ; declare -ri EX_SOFTWARE=70
    declare -ri EX_OSERR=71 ; declare -ri EX_OSFILE=72 ; declare -ri EX_CANTCREAT=73 ; declare -ri EX_IOERR=74
    declare -ri EX_TEMPFAIL=75 ; declare -ri EX_PROTOCOL=76 ; declare -ri EX_NOPERM=77 ; declare -ri EX_CONFIG=78
  2. MagerValp revised this gist Nov 1, 2019. 1 changed file with 4 additions and 7 deletions.
    11 changes: 4 additions & 7 deletions notarize_pkg.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -14,13 +14,10 @@ if ! source notarization_config.sh; then
    fi


    declare -ri EX_OK=0
    let status=64
    for code in EX_USAGE EX_DATAERR EX_NOINPUT EX_NOUSER EX_NOHOST \
    EX_UNAVAILABLE EX_SOFTWARE EX_OSERR EX_OSFILE EX_CANTCREAT \
    EX_IOERR EX_TEMPFAIL EX_PROTOCOL EX_NOPERM EX_CONFIG; do
    declare -ri $code=$((status++))
    done
    declare -ri EX_OK=0 ; declare -ri EX_USAGE=64 ; declare -ri EX_DATAERR=65 ; declare -ri EX_NOINPUT=66
    declare -ri EX_NOUSER=67 ; declare -ri EX_NOHOST=68 ; declare -ri EX_UNAVAILABLE=69 ; declare -ri EX_SOFTWARE=70
    declare -ri EX_OSERR=71 ; declare -ri EX_OSFILE=72 ; declare -ri EX_CANTCREAT=73 ; declare -ri EX_IOERR=74
    declare -ri EX_TEMPFAIL=75 ; declare -ri EX_PROTOCOL=76 ; declare -ri EX_NOPERM=77 ; declare -ri EX_CONFIG=78


    die() {
  3. MagerValp created this gist Oct 31, 2019.
    83 changes: 83 additions & 0 deletions notarize_pkg.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,83 @@
    #!/bin/bash


    set -o errexit
    set -o pipefail


    if ! source notarization_config.sh; then
    # Configure here and add the password for your Apple ID to the keychain:
    # security add-generic-password -a "_NOTARIZATION_APPLE_ID_" -w "_APP_SPECIFIC_PASSWORD_" -s "NOTARIZATION_PASSWORD"
    USERNAME="_NOTARIZATION_APPLE_ID_"
    PASSWORD="@keychain:NOTARIZATION_PASSWORD"
    ASC_PROVIDER="_DEVELOPER_TEAM_PROVIDER_ID_"
    fi


    declare -ri EX_OK=0
    let status=64
    for code in EX_USAGE EX_DATAERR EX_NOINPUT EX_NOUSER EX_NOHOST \
    EX_UNAVAILABLE EX_SOFTWARE EX_OSERR EX_OSFILE EX_CANTCREAT \
    EX_IOERR EX_TEMPFAIL EX_PROTOCOL EX_NOPERM EX_CONFIG; do
    declare -ri $code=$((status++))
    done


    die() {
    echo "$2" 1>&2
    exit $1
    }


    if [[ $# -ne 1 ]]; then
    die $EX_USAGE "Usage: $0 package_to_notarize.pkg"
    fi
    pkg="$1"


    echo "🔸 Submitting $pkg for notarization"
    altool_output=$( \
    xcrun altool --notarize-app \
    --username "$USERNAME" --password "$PASSWORD" --asc-provider "$ASC_PROVIDER" \
    --primary-bundle-id "se.gu.it.pkg.$(uuidgen)" \
    --file "$pkg" \
    )
    notarize_uuid=$( echo "$altool_output" | grep RequestUUID | awk '{print $3'} )

    if [[ "$notarize_uuid" != ????????-????-????-????-???????????? ]]; then
    die $EX_UNAVAILABLE "⛔️ Notarization submission failed"
    fi


    echo "🔸 Waiting for notarization with id $notarize_uuid"
    PROGRESS=( 😴 😒 😴 😒 😴 😒 😴 😒 😴 😒 😴 😒 😴 😒 😴 🙄 🤨 😤 😡 🤬 )
    timeout="true"
    for i in {1..20}; do
    sleep 30
    progress=$( xcrun altool --username "$USERNAME" --password "$PASSWORD" --notarization-info "$notarize_uuid" || echo "Progress check failed" )

    if [[ "$progress" =~ "Progress check failed" ]] ; then
    die $EX_UNAVAILABLE "⛔️ Notarization progress check for $notarize_uuid failed, exiting"
    fi
    if [[ "$progress" =~ "Invalid" ]] ; then
    die $EX_UNAVAILABLE "⛔️ Notarization failed:"$'\n'"$progress"
    fi

    if [[ "$progress" =~ "success" ]]; then
    timeout="false"
    break
    else
    echo -n ${PROGRESS[$i]}$'\r' 1>&2
    fi
    done

    if [[ "$timeout" == "true" ]]; then
    die $EX_UNAVAILABLE "⏲ Timed out, wait for email instead"
    fi


    echo "🔸 Stapling package"
    xcrun stapler staple "$pkg"


    exit $EX_OK