source: issm/trunk-jpl/packagers/mac/complete-issm-mac-binaries-python.sh@ 25893

#!/bin/bash

################################################################################
# Wrapper script to build, package, send for signing, and transfer to ISSM Web 
# site ISSM distributable package for macOS with Python API.
#
# Normally, we would put this directly into the project configuration under 
# 'Build' -> 'Excute shell', but becasue it is a bit more involved, it is a 
# good idea to version it.
#
# When no failures/errors occur, performs the following:
# - Builds ISSM according to configuration.
# - Packages and compresses executables and libraries.
# - Runs test suite against package.
# - Commits compressed package to repository to be signed by JPL Cybersecurity.
# - Retrieves signed package and transmits it to ISSM Web site for 
#       distribution.
#
# Options:
# -b/--skipbuild                Skip ISSM compilation.
# -r/--resign                   Skip ISSM compilation and packaging. Use to retrigger 
#                                               signing/notarization if it fails but build and package 
#                                               are valid.
# -s/--skiptests                Skip ISSM compilation and testing during packaging 
#                                               step. Use if 
# -t/--transferonly             Transfer package to ISSM Web site only. Use if transfer 
#                                               fails for some reason to skip building, packaging, and 
#                                               signing.
# -u/--unlock                   Remove lock file from signed package repository. Use if 
#                                               build is aborted to allow for subsequent fresh build.
#
# Debugging:
# - Relies on a very tight handshake with project on remote JPL Cybersecurity 
#       Jenkins server. Debugging may be perfomed locally by running,
#
#               packagers/mac/sign-issm-mac-binaries-python.sh
#
#       with "ISSM_BINARIES_USER" and "ISSM_BINARIES_PASS" hardcoded to Apple 
#       Developer credentials.
# - Removing stdout/stderr redirections to null device (> /dev/null 2>&1) can 
#       help debug potential SVN issues.
#
# NOTE:
# - Use only *one* of the above options at a time, and make sure it is removed 
#       again after a single run.
# - Builds will fail when any of the above options are used on a clean 
#       workspace. For example, if 'Source Code Management' -> 'Check-out Strategy' 
#       select menu is set to "Always check out a fresh copy".
# - Assumes that "ISSM_BINARIES_USER" and "ISSM_BINARIES_PASS" are set up in 
#       the 'Bindings' section under a 'Username and password (separated)' binding 
#       (requires 'Credentials Binding Plugin') with 'Credentials' select menu set 
#       to "jenkins/****** (SVN repository for ISSM binaries)".
################################################################################

## Constants
#
PKG="ISSM-macOS-Python" # Name of directory to copy distributable files to
SIGNED_REPO_COPY="./signed"
SIGNED_REPO_URL="https://issm.ess.uci.edu/svn/issm-binaries/mac/python/signed"

COMPRESSED_PKG="${PKG}.zip"

## Environment
#
export COMPRESSED_PKG
export PKG
export SIGNED_REPO_COPY
export SIGNED_REPO_URL

## Parse options
#
if [ $# -gt 1 ]; then
        echo "Can use only one option at a time"
        exit 1
fi

# NOTE: We could do this with binary switching (i.e. 0011 to sign and transfer, 
#               but the following is self-documenting).
#
build=1
package=1
sign=1
transfer=1

if [ $# -eq 1 ]; then
        case $1 in
                -b|--skipbuild)         build=0;                                                        shift   ;;
                -r|--resign)            build=0;        package=0;                                              ;;
                -s|--skiptests)         build=0;                                                                        ;;
                -t|--transferonly)      build=0;        package=0;      sign=0;                         ;;
                -u|--unlock)            build=0;        package=0;      transfer=0;                     ;;
                *) echo "Unknown parameter passed: $1"; exit 1                                  ;;
        esac
fi

# Build
if [ ${build} -eq 1 ]; then
        ./jenkins/jenkins.sh ./jenkins/pine_island-mac-binaries-python
fi

# Package
if [ ${package} -eq 1 ]; then
        ./packagers/mac/package-issm-mac-binaries-python.sh $1
        shift # Clear $1 so that it is not passed to commit_for_signing script
fi

# Commit for signing
if [ ${sign} -eq 1 ]; then
        ./packagers/mac/commit_for_signing-issm-mac-binaries-python.sh $1
fi

# Transfer distributable package to ISSM Web site
if [ ${transfer} -eq 1 ]; then
        ./packagers/mac/transfer-issm-mac-binaries.sh
fi