pkginstaller: add makefile target to notarize the built pkg

[NO NEW TESTS NEEDED]

Signed-off-by: Anjan Nath <kaludios@gmail.com>
This commit is contained in:
Anjan Nath 2022-07-28 18:55:44 +05:30
parent c5029d2eea
commit e6670cd297
2 changed files with 10 additions and 0 deletions

View File

@ -9,6 +9,7 @@ QEMU_RELEASE_URL ?= https://github.com/containers/podman-machine-qemu/releases/d
PACKAGE_DIR ?= out/packaging PACKAGE_DIR ?= out/packaging
TMP_DOWNLOAD ?= tmp-download TMP_DOWNLOAD ?= tmp-download
PACKAGE_ROOT ?= root PACKAGE_ROOT ?= root
PKG_NAME := podman-installer-macos-$(ARCH).pkg
default: pkginstaller default: pkginstaller
@ -46,6 +47,12 @@ package_root: get_gvproxy get_qemu
pkginstaller: packagedir pkginstaller: packagedir
cd $(PACKAGE_DIR) && ./package.sh .. cd $(PACKAGE_DIR) && ./package.sh ..
_notarize: pkginstaller
xcrun notarytool submit --apple-id $(NOTARIZE_USERNAME) --password $(NOTARIZE_PASSWORD) --team-id=$(NOTARIZE_TEAM) -f json --wait out/$(PKG_NAME)
notarize: _notarize
xcrun stapler staple out/$(PKG_NAME)
.PHONY: clean .PHONY: clean
clean: clean:
rm -rf $(TMP_DOWNLOAD) $(PACKAGE_ROOT) $(PACKAGE_DIR) Distribution welcome.html rm -rf $(TMP_DOWNLOAD) $(PACKAGE_ROOT) $(PACKAGE_DIR) Distribution welcome.html

View File

@ -5,6 +5,9 @@ $ make ARCH=<amd64 | aarch64> NO_CODESIGN=1 pkginstaller
# or to create signed pkg # or to create signed pkg
$ make ARCH=<amd64 | aarch64> CODESIGN_IDENTITY=<ID> PRODUCTSIGN_IDENTITY=<ID> pkginstaller $ make ARCH=<amd64 | aarch64> CODESIGN_IDENTITY=<ID> PRODUCTSIGN_IDENTITY=<ID> pkginstaller
# or to prepare a signed and notarized pkg for release
$ make ARCH=<amd64 | aarch64> CODESIGN_IDENTITY=<ID> PRODUCTSIGN_IDENTITY=<ID> NOTARIZE_USERNAME=<appleID> NOTARIZE_PASSWORD=<appleID-password> NOTARIZE_TEAM=<team-id> notarize
``` ```
The generated pkg will be written to `out/podman-macos-installer-*.pkg`. The generated pkg will be written to `out/podman-macos-installer-*.pkg`.