mirror of
https://github.com/servo/servo
synced 2026-04-25 17:15:48 +02:00
a2bd2ab09b
This script automates the signing, packaging and notarization of servoshell on macOS. This is a first step towards: #40031 and #12532. While we could let a maintainer code-sign and upload the signed release, probably this should be integrated into CI, which would require additional work. This script started out quite simple as part of `./mach package`. However, since the script has access to secrets, it shouldn't be part of mach (to minimize the amout of code that needs to be trusted). We also needed to save state and be able to resume operations, since notarizing can take quite long and the stapling needs to wait until notarization has completed. Since notarizing can take long (up to a day has been observed during first tests), we save artifacts and the notarization ID, and add a `--check-status` command that can be used to poll if notarization has been finished. Testing: Manually testing required. A signed and notarized `.dmg` artifact has [been uploaded](https://servo.zulipchat.com/#narrow/channel/500774-tsc/topic/Signing.20macos.20Servoshell/near/576256648) to zulip, allowing others to verify the notarization worked. --------- Signed-off-by: Jonathan Schwender <schwenderjonathan@gmail.com>
81 lines
907 B
Plaintext
81 lines
907 B
Plaintext
/.servo
|
|
/.cargo/*
|
|
!/.cargo/config.*
|
|
/.rustup
|
|
/.servobuild
|
|
/.wpt
|
|
/.vs
|
|
/android-toolchains
|
|
/target
|
|
/tests/wpt/reftests-report/report.html
|
|
/python/_virtualenv*
|
|
/python/_venv*
|
|
/python/tidy/servo_tidy.egg-info
|
|
/tests/wpt/sync
|
|
/tests/wpt/**/**/.cache/
|
|
/tests/dromaeo/dromaeo
|
|
*.pkl
|
|
*.pyc
|
|
*.swp
|
|
*.swo
|
|
*.csv
|
|
*.rej
|
|
*.orig
|
|
.coverage
|
|
.DS_Store
|
|
Servo.app
|
|
servo.pftrace
|
|
.config.mk.last
|
|
/glfw
|
|
webrender-captures/
|
|
/screenshots
|
|
/etc/notarization/
|
|
|
|
# Python setuptools
|
|
/servo.egg-info
|
|
|
|
# Allow CSV files to be used as resources in tests
|
|
!/tests/**/*.csv
|
|
|
|
# Editors
|
|
## IntelliJ
|
|
.idea
|
|
*.iws
|
|
*.iml
|
|
|
|
## Gradle
|
|
.gradle
|
|
|
|
## VSCode
|
|
.vscode
|
|
!/.vscode/extensions.json
|
|
!/.vscode/settings.json
|
|
|
|
## Emacs
|
|
*~
|
|
.#*
|
|
\#*
|
|
\#*\#
|
|
|
|
## Vim
|
|
Session.vim
|
|
Sessionx.vim
|
|
|
|
# Zed
|
|
/.zed
|
|
|
|
/unminified-js
|
|
/unminified-css
|
|
|
|
# Layout debugger trace files
|
|
layout_trace*
|
|
|
|
# Package managers
|
|
support/macos/Brewfile.lock.json
|
|
|
|
# direnv
|
|
.envrc
|
|
|
|
# Justfiles
|
|
justfile
|