Browse Source
0.107a9cf80docs: add/update docs for osx dmg signing (Cory Fields)914868abuild: add a deterministic dmg signer (Cory Fields)d69ed2bbuild: Clean up the dmg layout (Cory Fields)2f327a3build: add the deploydir target for gitian (Cory Fields)
Wladimir J. van der Laan
10 years ago
8 changed files with 218 additions and 16 deletions
@ -0,0 +1,37 @@
@@ -0,0 +1,37 @@
|
||||
--- |
||||
name: "bitcoin-dmg-signer" |
||||
suites: |
||||
- "precise" |
||||
architectures: |
||||
- "amd64" |
||||
packages: |
||||
- "libc6:i386" |
||||
- "faketime" |
||||
reference_datetime: "2013-06-01 00:00:00" |
||||
remotes: [] |
||||
files: |
||||
- "bitcoin-0.9.99-osx-unsigned.tar.gz" |
||||
- "signature.tar.gz" |
||||
script: | |
||||
WRAP_DIR=$HOME/wrapped |
||||
mkdir -p ${WRAP_DIR} |
||||
export PATH=`pwd`:$PATH |
||||
FAKETIME_PROGS="dmg genisoimage" |
||||
|
||||
# Create global faketime wrappers |
||||
for prog in ${FAKETIME_PROGS}; do |
||||
echo '#!/bin/bash' > ${WRAP_DIR}/${prog} |
||||
echo "REAL=\`which -a ${prog} | grep -v ${WRAP_DIR}/${prog} | head -1\`" >> ${WRAP_DIR}/${prog} |
||||
echo 'export LD_PRELOAD=/usr/lib/faketime/libfaketime.so.1' >> ${WRAP_DIR}/${prog} |
||||
echo "export FAKETIME=\"${REFERENCE_DATETIME}\"" >> ${WRAP_DIR}/${prog} |
||||
echo "\$REAL \$@" >> $WRAP_DIR/${prog} |
||||
chmod +x ${WRAP_DIR}/${prog} |
||||
done |
||||
|
||||
UNSIGNED=`echo bitcoin-*.tar.gz` |
||||
SIGNED=`echo ${UNSIGNED} | sed 's/.tar.*//' | sed 's/-unsigned//'`.dmg |
||||
|
||||
tar -xf ${UNSIGNED} |
||||
./detached-sig-apply.sh ${UNSIGNED} signature.tar.gz |
||||
${WRAP_DIR}/genisoimage -no-cache-inodes -D -l -probe -V "Bitcoin-Qt" -no-pad -r -apple -o uncompressed.dmg signed-app |
||||
${WRAP_DIR}/dmg dmg uncompressed.dmg ${OUTDIR}/${SIGNED} |
||||
Binary file not shown.
@ -0,0 +1,53 @@
@@ -0,0 +1,53 @@
|
||||
#!/bin/sh |
||||
set -e |
||||
|
||||
UNSIGNED=$1 |
||||
SIGNATURE=$2 |
||||
ARCH=x86_64 |
||||
ROOTDIR=dist |
||||
BUNDLE=${ROOTDIR}/Bitcoin-Qt.app |
||||
TEMPDIR=signed.temp |
||||
OUTDIR=signed-app |
||||
|
||||
if [ -z "$UNSIGNED" ]; then |
||||
echo "usage: $0 <unsigned app> <signature>" |
||||
exit 1 |
||||
fi |
||||
|
||||
if [ -z "$SIGNATURE" ]; then |
||||
echo "usage: $0 <unsigned app> <signature>" |
||||
exit 1 |
||||
fi |
||||
|
||||
rm -rf ${TEMPDIR} && mkdir -p ${TEMPDIR} |
||||
tar -C ${TEMPDIR} -xf ${UNSIGNED} |
||||
tar -C ${TEMPDIR} -xf ${SIGNATURE} |
||||
|
||||
if [ -z "${PAGESTUFF}" ]; then |
||||
PAGESTUFF=${TEMPDIR}/pagestuff |
||||
fi |
||||
|
||||
if [ -z "${CODESIGN_ALLOCATE}" ]; then |
||||
CODESIGN_ALLOCATE=${TEMPDIR}/codesign_allocate |
||||
fi |
||||
|
||||
for i in `find ${TEMPDIR} -name "*.sign"`; do |
||||
SIZE=`stat -c %s ${i}` |
||||
TARGET_FILE=`echo ${i} | sed 's/\.sign$//'` |
||||
|
||||
echo "Allocating space for the signature of size ${SIZE} in ${TARGET_FILE}" |
||||
${CODESIGN_ALLOCATE} -i ${TARGET_FILE} -a ${ARCH} ${SIZE} -o ${i}.tmp |
||||
|
||||
OFFSET=`${PAGESTUFF} ${i}.tmp -p | tail -2 | grep offset | sed 's/[^0-9]*//g'` |
||||
if [ -z ${QUIET} ]; then |
||||
echo "Attaching signature at offset ${OFFSET}" |
||||
fi |
||||
|
||||
dd if=$i of=${i}.tmp bs=1 seek=${OFFSET} count=${SIZE} 2>/dev/null |
||||
mv ${i}.tmp ${TARGET_FILE} |
||||
rm ${i} |
||||
echo "Success." |
||||
done |
||||
mv ${TEMPDIR}/${ROOTDIR} ${OUTDIR} |
||||
rm -rf ${TEMPDIR} |
||||
echo "Signed: ${OUTDIR}" |
||||
@ -0,0 +1,46 @@
@@ -0,0 +1,46 @@
|
||||
#!/bin/sh |
||||
set -e |
||||
|
||||
ROOTDIR=dist |
||||
BUNDLE=${ROOTDIR}/Bitcoin-Qt.app |
||||
CODESIGN=codesign |
||||
TEMPDIR=sign.temp |
||||
TEMPLIST=${TEMPDIR}/signatures.txt |
||||
OUT=signature.tar.gz |
||||
|
||||
if [ ! -n "$1" ]; then |
||||
echo "usage: $0 <codesign args>" |
||||
echo "example: $0 -s MyIdentity" |
||||
exit 1 |
||||
fi |
||||
|
||||
rm -rf ${TEMPDIR} ${TEMPLIST} |
||||
mkdir -p ${TEMPDIR} |
||||
|
||||
${CODESIGN} -f --file-list ${TEMPLIST} "$@" "${BUNDLE}" |
||||
|
||||
for i in `grep -v CodeResources ${TEMPLIST}`; do |
||||
TARGETFILE="${BUNDLE}/`echo ${i} | sed "s|.*${BUNDLE}/||"`" |
||||
SIZE=`pagestuff $i -p | tail -2 | grep size | sed 's/[^0-9]*//g'` |
||||
OFFSET=`pagestuff $i -p | tail -2 | grep offset | sed 's/[^0-9]*//g'` |
||||
SIGNFILE="${TEMPDIR}/${TARGETFILE}.sign" |
||||
DIRNAME="`dirname ${SIGNFILE}`" |
||||
mkdir -p "${DIRNAME}" |
||||
echo "Adding detached signature for: ${TARGETFILE}. Size: ${SIZE}. Offset: ${OFFSET}" |
||||
dd if=$i of=${SIGNFILE} bs=1 skip=${OFFSET} count=${SIZE} 2>/dev/null |
||||
done |
||||
|
||||
for i in `grep CodeResources ${TEMPLIST}`; do |
||||
TARGETFILE="${BUNDLE}/`echo ${i} | sed "s|.*${BUNDLE}/||"`" |
||||
RESOURCE="${TEMPDIR}/${TARGETFILE}" |
||||
DIRNAME="`dirname "${RESOURCE}"`" |
||||
mkdir -p "${DIRNAME}" |
||||
echo "Adding resource for: "${TARGETFILE}"" |
||||
cp "${i}" "${RESOURCE}" |
||||
done |
||||
|
||||
rm ${TEMPLIST} |
||||
|
||||
tar -C ${TEMPDIR} -czf ${OUT} . |
||||
rm -rf ${TEMPDIR} |
||||
echo "Created ${OUT}" |
||||
Loading…
Reference in new issue