#!/usr/bin/env bash # shellcheck disable=SC1091 set -e APP_NAME_LC="$( echo "${APP_NAME}" | awk '{print tolower($0)}' )" npm install -g checksum sum_file() { if [[ -f "${1}" ]]; then echo "Calculating checksum for ${1}" checksum -a sha256 "${1}" > "${1}".sha256 checksum "${1}" > "${1}".sha1 fi } mkdir -p assets if [[ "${OS_NAME}" == "osx" ]]; then if [[ "${CI_BUILD}" != "no" ]]; then CERTIFICATE_P12="${APP_NAME}.p12" KEYCHAIN="${RUNNER_TEMP}/buildagent.keychain" echo "AGENT_TEMPDIRECTORY: ${AGENT_TEMPDIRECTORY}" echo "RUNNER_TEMP: ${RUNNER_TEMP}" echo "${CERTIFICATE_OSX_P12_DATA}" | base64 --decode > "${CERTIFICATE_P12}" echo "+ create temporary keychain" security create-keychain -p pwd "${KEYCHAIN}" security set-keychain-settings -lut 21600 "${KEYCHAIN}" security unlock-keychain -p pwd "${KEYCHAIN}" security show-keychain-info "${KEYCHAIN}" echo "+ import certificate to keychain" security import "${CERTIFICATE_P12}" -k "${KEYCHAIN}" -P "${CERTIFICATE_OSX_P12_PASSWORD}" -T /usr/bin/codesign CODESIGN_IDENTITY="$( security find-identity -v -p codesigning "${KEYCHAIN}" | grep -oEi "([0-9A-F]{40})" | head -n 1 )" export CODESIGN_IDENTITY security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k pwd "${KEYCHAIN}" > /dev/null security find-identity "${KEYCHAIN}" echo "+ signing" DEBUG="electron-osx-sign*" node vscode/build/darwin/sign.js "$( pwd )" echo "+ notarize" cd "VSCode-darwin-${VSCODE_ARCH}" ZIP_FILE="./${APP_NAME}-darwin-${VSCODE_ARCH}-${RELEASE_VERSION}.zip" zip -r -X -y "${ZIP_FILE}" ./*.app xcrun notarytool store-credentials "notarytool-profile" --apple-id "${CERTIFICATE_OSX_ID}" --password "${CERTIFICATE_OSX_APP_PASSWORD}" xcrun notarytool submit "${ZIP_FILE}" ---keychain-profile "notarytool-profile" --wait echo "+ attach staple" xcrun stapler staple ./*.app rm "${ZIP_FILE}" cd .. fi if [[ "${SHOULD_BUILD_ZIP}" != "no" ]]; then echo "Building and moving ZIP" cd "VSCode-darwin-${VSCODE_ARCH}" zip -r -X -y "../assets/${APP_NAME}-darwin-${VSCODE_ARCH}-${RELEASE_VERSION}.zip" ./*.app cd .. fi if [[ "${SHOULD_BUILD_DMG}" != "no" ]]; then echo "Building and moving DMG" pushd "VSCode-darwin-${VSCODE_ARCH}" npx create-dmg ./*.app .. mv ../*.dmg "../assets/${APP_NAME}.${VSCODE_ARCH}.${RELEASE_VERSION}.dmg" popd fi if [[ "${SHOULD_BUILD_SRC}" == "yes" ]]; then git archive --format tar.gz --output="./assets/${APP_NAME}-${RELEASE_VERSION}-src.tar.gz" HEAD git archive --format zip --output="./assets/${APP_NAME}-${RELEASE_VERSION}-src.zip" HEAD fi VSCODE_PLATFORM="darwin" elif [[ "${OS_NAME}" == "windows" ]]; then cd vscode || { echo "'vscode' dir not found"; exit 1; } yarn gulp "vscode-win32-${VSCODE_ARCH}-inno-updater" if [[ "${SHOULD_BUILD_ZIP}" != "no" ]]; then 7z.exe a -tzip "../assets/${APP_NAME}-win32-${VSCODE_ARCH}-${RELEASE_VERSION}.zip" -x!CodeSignSummary*.md -x!tools "../VSCode-win32-${VSCODE_ARCH}/*" -r fi if [[ "${SHOULD_BUILD_EXE_SYS}" != "no" ]]; then yarn gulp "vscode-win32-${VSCODE_ARCH}-system-setup" fi if [[ "${SHOULD_BUILD_EXE_USR}" != "no" ]]; then yarn gulp "vscode-win32-${VSCODE_ARCH}-user-setup" fi if [[ "${VSCODE_ARCH}" == "ia32" || "${VSCODE_ARCH}" == "x64" ]]; then if [[ "${SHOULD_BUILD_MSI}" != "no" ]]; then . ../build/windows/msi/build.sh fi if [[ "${SHOULD_BUILD_MSI_NOUP}" != "no" ]]; then . ../build/windows/msi/build-updates-disabled.sh fi fi cd .. if [[ "${SHOULD_BUILD_EXE_SYS}" != "no" ]]; then echo "Moving System EXE" mv "vscode\\.build\\win32-${VSCODE_ARCH}\\system-setup\\VSCodeSetup.exe" "assets\\${APP_NAME}Setup-${VSCODE_ARCH}-${RELEASE_VERSION}.exe" fi if [[ "${SHOULD_BUILD_EXE_USR}" != "no" ]]; then echo "Moving User EXE" mv "vscode\\.build\\win32-${VSCODE_ARCH}\\user-setup\\VSCodeSetup.exe" "assets\\${APP_NAME}UserSetup-${VSCODE_ARCH}-${RELEASE_VERSION}.exe" fi if [[ "${VSCODE_ARCH}" == "ia32" || "${VSCODE_ARCH}" == "x64" ]]; then if [[ "${SHOULD_BUILD_MSI}" != "no" ]]; then echo "Moving MSI" mv "build\\windows\\msi\\releasedir\\${APP_NAME}-${VSCODE_ARCH}-${RELEASE_VERSION}.msi" assets/ fi if [[ "${SHOULD_BUILD_MSI_NOUP}" != "no" ]]; then echo "Moving MSI with disabled updates" mv "build\\windows\\msi\\releasedir\\${APP_NAME}-${VSCODE_ARCH}-updates-disabled-${RELEASE_VERSION}.msi" assets/ fi fi VSCODE_PLATFORM="win32" else cd vscode || { echo "'vscode' dir not found"; exit 1; } if [[ "${SHOULD_BUILD_APPIMAGE}" != "no" && "${VSCODE_ARCH}" != "x64" ]]; then SHOULD_BUILD_APPIMAGE="no" fi if [[ "${SHOULD_BUILD_DEB}" != "no" || "${SHOULD_BUILD_APPIMAGE}" != "no" ]]; then yarn gulp "vscode-linux-${VSCODE_ARCH}-build-deb" fi if [[ "${SHOULD_BUILD_RPM}" != "no" ]]; then yarn gulp "vscode-linux-${VSCODE_ARCH}-build-rpm" fi if [[ "${SHOULD_BUILD_APPIMAGE}" != "no" ]]; then . ../build/linux/appimage/build.sh fi cd .. if [[ "${CI_BUILD}" == "no" ]]; then . ./stores/snapcraft/build.sh if [[ "${SKIP_ASSETS}" == "no" ]]; then mv stores/snapcraft/build/*.snap assets/ fi fi if [[ "${SHOULD_BUILD_TAR}" != "no" ]]; then echo "Building and moving TAR" cd "VSCode-linux-${VSCODE_ARCH}" tar czf "../assets/${APP_NAME}-linux-${VSCODE_ARCH}-${RELEASE_VERSION}.tar.gz" . cd .. fi if [[ "${SHOULD_BUILD_DEB}" != "no" ]]; then echo "Moving DEB" mv vscode/.build/linux/deb/*/deb/*.deb assets/ fi if [[ "${SHOULD_BUILD_RPM}" != "no" ]]; then echo "Moving RPM" mv vscode/.build/linux/rpm/*/*.rpm assets/ fi if [[ "${SHOULD_BUILD_APPIMAGE}" != "no" ]]; then echo "Moving AppImage" mv build/linux/appimage/out/*.AppImage* assets/ find assets -name '*.AppImage*' -exec bash -c 'mv $0 ${0/_-_/-}' {} \; fi VSCODE_PLATFORM="linux" fi if [[ "${SHOULD_BUILD_REH}" != "no" ]]; then echo "Building and moving REH" cd "vscode-reh-${VSCODE_PLATFORM}-${VSCODE_ARCH}" tar czf "../assets/${APP_NAME_LC}-reh-${VSCODE_PLATFORM}-${VSCODE_ARCH}-${RELEASE_VERSION}.tar.gz" . cd .. fi cd assets for FILE in *; do if [[ -f "${FILE}" ]]; then sum_file "${FILE}" fi done cd ..