1 | #!/bin/bash
|
---|
2 |
|
---|
3 | ################################################################################
|
---|
4 | # Wrapper script to build, package, send for signing, and transfer to ISSM Web
|
---|
5 | # site ISSM distributable package for macOS with Python API.
|
---|
6 | #
|
---|
7 | # Normally, we would put this directly into the project configuration under
|
---|
8 | # 'Build' -> 'Excute shell', but becasue it is a bit more involved, it is a
|
---|
9 | # good idea to version it.
|
---|
10 | #
|
---|
11 | # When no failures/errors occur, performs the following:
|
---|
12 | # - Builds ISSM according to configuration.
|
---|
13 | # - Packages executables and libraries.
|
---|
14 | # - Runs test suite against package.
|
---|
15 | # - Commits compressed package to repository to be signed by JPL Cybersecurity.
|
---|
16 | # - Retrieves signed package and transmits it to ISSM Web site for
|
---|
17 | # distribution.
|
---|
18 | #
|
---|
19 | # Options:
|
---|
20 | # -b/--skipbuild Skip ISSM compilation.
|
---|
21 | # -r/--resign Skip ISSM compilation and packaging. Use to retrigger
|
---|
22 | # signing/notarization if it fails but build and package
|
---|
23 | # are valid.
|
---|
24 | # -s/--skiptests Skip ISSM compilation and testing during packaging
|
---|
25 | # step. Use if packaging fails for some reason but build
|
---|
26 | # is valid.
|
---|
27 | # -t/--transferonly Transfer package to ISSM Web site only. Use if transfer
|
---|
28 | # fails for some reason to skip building, packaging, and
|
---|
29 | # signing.
|
---|
30 | # -u/--unlock Remove lock file from signed package repository. Use if
|
---|
31 | # build is aborted to allow for subsequent fresh build.
|
---|
32 | #
|
---|
33 | # Debugging:
|
---|
34 | # - Relies on a very tight handshake with project on remote JPL Cybersecurity
|
---|
35 | # Jenkins server. Debugging may be perfomed locally by running,
|
---|
36 | #
|
---|
37 | # packagers/mac/sign-issm-mac-binaries-python.sh
|
---|
38 | #
|
---|
39 | # with "ISSM_BINARIES_USER" and "ISSM_BINARIES_PASS" hardcoded to Apple
|
---|
40 | # Developer credentials.
|
---|
41 | # - Removing stdout/stderr redirections to null device (> /dev/null 2>&1) can
|
---|
42 | # help debug potential SVN issues.
|
---|
43 | #
|
---|
44 | # NOTE:
|
---|
45 | # - Use only *one* of the above options at a time, and make sure it is removed
|
---|
46 | # again after a single run.
|
---|
47 | # - Builds will fail when any of the above options are used on a clean
|
---|
48 | # workspace. For example, if 'Source Code Management' -> 'Check-out Strategy'
|
---|
49 | # select menu is set to "Always check out a fresh copy".
|
---|
50 | # - Assumes that "ISSM_BINARIES_USER" and "ISSM_BINARIES_PASS" are set up in
|
---|
51 | # the 'Bindings' section under a 'Username and password (separated)' binding
|
---|
52 | # (requires 'Credentials Binding Plugin') with 'Credentials' select menu set
|
---|
53 | # to "jenkins/****** (SVN repository for ISSM binaries)".
|
---|
54 | ################################################################################
|
---|
55 |
|
---|
56 | ## Constants
|
---|
57 | #
|
---|
58 | PKG="ISSM-macOS-Python" # Name of directory to copy distributable files to
|
---|
59 | SIGNED_REPO_COPY="./signed"
|
---|
60 | SIGNED_REPO_URL="https://issm.ess.uci.edu/svn/issm-binaries/mac/python/signed"
|
---|
61 |
|
---|
62 | COMPRESSED_PKG="${PKG}.zip"
|
---|
63 |
|
---|
64 | ## Environment
|
---|
65 | #
|
---|
66 | export COMPRESSED_PKG
|
---|
67 | export PKG
|
---|
68 | export SIGNED_REPO_COPY
|
---|
69 | export SIGNED_REPO_URL
|
---|
70 |
|
---|
71 | ## Parse options
|
---|
72 | #
|
---|
73 | if [ $# -gt 1 ]; then
|
---|
74 | echo "Can use only one option at a time"
|
---|
75 | exit 1
|
---|
76 | fi
|
---|
77 |
|
---|
78 | # NOTE: We could do this with binary switching (i.e. 0011 to sign and transfer,
|
---|
79 | # but the following is self-documenting).
|
---|
80 | #
|
---|
81 | build=1
|
---|
82 | package=1
|
---|
83 | sign=1
|
---|
84 | transfer=1
|
---|
85 |
|
---|
86 | if [ $# -eq 1 ]; then
|
---|
87 | case $1 in
|
---|
88 | -b|--skipbuild) build=0; shift ;;
|
---|
89 | -r|--resign) build=0; package=0; ;;
|
---|
90 | -s|--skiptests) build=0; ;;
|
---|
91 | -t|--transferonly) build=0; package=0; sign=0; ;;
|
---|
92 | -u|--unlock) build=0; package=0; transfer=0; ;;
|
---|
93 | *) echo "Unknown parameter passed: $1"; exit 1 ;;
|
---|
94 | esac
|
---|
95 | fi
|
---|
96 |
|
---|
97 | # Build
|
---|
98 | if [ ${build} -eq 1 ]; then
|
---|
99 | ./jenkins/jenkins.sh ./jenkins/pine_island-mac-binaries-python
|
---|
100 |
|
---|
101 | if [ $? -ne 0 ]; then
|
---|
102 | exit 1
|
---|
103 | fi
|
---|
104 | fi
|
---|
105 |
|
---|
106 | # Package
|
---|
107 | if [ ${package} -eq 1 ]; then
|
---|
108 | ./packagers/mac/package-issm-mac-binaries-python.sh $1
|
---|
109 |
|
---|
110 | if [ $? -ne 0 ]; then
|
---|
111 | exit 1
|
---|
112 | fi
|
---|
113 |
|
---|
114 | shift # Clear $1 so that it is not passed to commit_for_signing script
|
---|
115 | fi
|
---|
116 |
|
---|
117 | # Commit for signing
|
---|
118 | if [ ${sign} -eq 1 ]; then
|
---|
119 | ./packagers/mac/commit_for_signing-issm-mac-binaries-python.sh $1
|
---|
120 |
|
---|
121 | if [ $? -ne 0 ]; then
|
---|
122 | exit 1
|
---|
123 | fi
|
---|
124 | fi
|
---|
125 |
|
---|
126 | # Transfer distributable package to ISSM Web site
|
---|
127 | if [ ${transfer} -eq 1 ]; then
|
---|
128 | ./packagers/mac/transfer-issm-mac-binaries.sh
|
---|
129 |
|
---|
130 | if [ $? -ne 0 ]; then
|
---|
131 | exit 1
|
---|
132 | fi
|
---|
133 | fi
|
---|
134 |
|
---|