1
0
Fork 0
mirror of https://gitlab.com/futo-org/fcast.git synced 2025-06-24 21:25:23 +00:00

CI: Unblock keychain access in CI

This commit is contained in:
Michael Hollister 2025-04-17 12:58:47 -05:00
parent 198814b32f
commit 3e2409425e
2 changed files with 7 additions and 1 deletions

View file

@ -1,5 +1,4 @@
# Todo: Codesign fails for local CI, works when steps replicated in VM GUI
# Run command: `cirrus run --artifacts-dir receivers/electron/out` # Run command: `cirrus run --artifacts-dir receivers/electron/out`
task: task:
name: buildReceiverMac name: buildReceiverMac
@ -10,8 +9,12 @@ task:
- sudo security add-certificates -k /Library/Keychains/System.keychain ./.secure_files/developerID_application.cer - sudo security add-certificates -k /Library/Keychains/System.keychain ./.secure_files/developerID_application.cer
- security unlock-keychain -p "admin" ~/Library/Keychains/login.keychain - security unlock-keychain -p "admin" ~/Library/Keychains/login.keychain
- security import ./.secure_files/Certificates.p12 -k ~/Library/Keychains/login.keychain -P "$FCAST_CERTIFICATES_PASSWORD" -T /usr/bin/codesign - security import ./.secure_files/Certificates.p12 -k ~/Library/Keychains/login.keychain -P "$FCAST_CERTIFICATES_PASSWORD" -T /usr/bin/codesign
# Keychain ignores access control, causing to prompt for access and failing in CI environments...: https://stackoverflow.com/a/40039594
- "security set-key-partition-list -S apple-tool:,apple: -s -k admin ~/Library/Keychains/login.keychain"
- cd receivers/electron - cd receivers/electron
- npm install - npm install
- npm rebuild
- npm run build - npm run build
- npm run make -- --platform="darwin" --arch="arm64" - npm run make -- --platform="darwin" --arch="arm64"
- npm run make -- --platform="darwin" --arch="x64" - npm run make -- --platform="darwin" --arch="x64"

View file

@ -24,9 +24,12 @@ buildMac:
- sudo security add-certificates -k /Library/Keychains/System.keychain ./.secure_files/developerID_application.cer - sudo security add-certificates -k /Library/Keychains/System.keychain ./.secure_files/developerID_application.cer
- security unlock-keychain -p "admin" ~/Library/Keychains/login.keychain - security unlock-keychain -p "admin" ~/Library/Keychains/login.keychain
- security import ./.secure_files/Certificates.p12 -k ~/Library/Keychains/login.keychain -P "$FCAST_CERTIFICATES_PASSWORD" -T /usr/bin/codesign - security import ./.secure_files/Certificates.p12 -k ~/Library/Keychains/login.keychain -P "$FCAST_CERTIFICATES_PASSWORD" -T /usr/bin/codesign
# Keychain ignores access control, causing to prompt for access and failing in CI environments...: https://stackoverflow.com/a/40039594
- "security set-key-partition-list -S apple-tool:,apple: -s -k admin ~/Library/Keychains/login.keychain"
- cd receivers/electron - cd receivers/electron
script: script:
- npm install - npm install
- npm rebuild
- npm run build - npm run build
- npm run make -- --platform="darwin" --arch="arm64" - npm run make -- --platform="darwin" --arch="arm64"
- npm run make -- --platform="darwin" --arch="x64" - npm run make -- --platform="darwin" --arch="x64"