mirror of
https://github.com/nolen777/eagle0.git
synced 2026-07-28 22:35:42 +00:00
e96c0704ed
Add dedicated self-hosted runners for parallel Unity builds: - unity-mac: Mac Unity builds and deployment - unity-windows: Windows Unity builds (cross-compiled on Mac) - notarize: Notarization waiting (lightweight, doesn't block builds) Split mac_build.yml into 3 jobs: 1. build-and-sign (unity-mac): Build, sign, submit to Apple 2. wait-notarization (notarize): Wait for Apple, staple ticket 3. deploy (unity-mac): Deploy notarized app This allows: - Mac and Windows Unity builds to run in parallel - Notarization waiting doesn't block other builds - All runners share the same Mac Mini hardware New scripts: - notarize_submit.sh: Submit without waiting, output submission ID - notarize_wait.sh: Wait for submission ID, staple ticket 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
77 lines
2.2 KiB
Bash
Executable File
77 lines
2.2 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
#
|
|
# Wait for Apple notarization to complete and staple the ticket
|
|
# Usage: notarize_wait.sh <submission_id> <app_path>
|
|
#
|
|
# Environment variables (required):
|
|
# APPLE_ID - Apple Developer account email
|
|
# APP_SPECIFIC_PASSWORD - App-specific password for notarytool
|
|
# TEAM_ID - Apple Developer Team ID
|
|
|
|
set -euo pipefail
|
|
|
|
SUBMISSION_ID="$1"
|
|
APP_PATH="$2"
|
|
|
|
if [ -z "$SUBMISSION_ID" ]; then
|
|
echo "ERROR: submission_id is required" >&2
|
|
exit 1
|
|
fi
|
|
|
|
if [ ! -d "$APP_PATH" ]; then
|
|
echo "ERROR: App not found at $APP_PATH" >&2
|
|
exit 1
|
|
fi
|
|
|
|
if [ -z "${APPLE_ID:-}" ] || [ -z "${APP_SPECIFIC_PASSWORD:-}" ] || [ -z "${TEAM_ID:-}" ]; then
|
|
echo "ERROR: Required environment variables not set" >&2
|
|
exit 1
|
|
fi
|
|
|
|
echo "=== Waiting for notarization of submission $SUBMISSION_ID ==="
|
|
WAIT_OUTPUT=$(xcrun notarytool wait "$SUBMISSION_ID" \
|
|
--apple-id "$APPLE_ID" \
|
|
--password "$APP_SPECIFIC_PASSWORD" \
|
|
--team-id "$TEAM_ID" 2>&1) || true
|
|
|
|
echo "$WAIT_OUTPUT"
|
|
|
|
# Extract status (look for " status:" to avoid matching "Current status:")
|
|
STATUS=$(echo "$WAIT_OUTPUT" | grep "^ status:" | awk '{print $2}')
|
|
|
|
echo "Status: $STATUS"
|
|
|
|
if [ "$STATUS" != "Accepted" ]; then
|
|
echo "=== Notarization failed! Fetching log for details ==="
|
|
xcrun notarytool log "$SUBMISSION_ID" \
|
|
--apple-id "$APPLE_ID" \
|
|
--password "$APP_SPECIFIC_PASSWORD" \
|
|
--team-id "$TEAM_ID"
|
|
exit 1
|
|
fi
|
|
|
|
echo "=== Stapling notarization ticket to app ==="
|
|
# Retry stapling - Apple's CloudKit can have a brief delay after notarization completes
|
|
MAX_STAPLE_ATTEMPTS=5
|
|
STAPLE_ATTEMPT=1
|
|
while [ $STAPLE_ATTEMPT -le $MAX_STAPLE_ATTEMPTS ]; do
|
|
echo "Stapling attempt $STAPLE_ATTEMPT/$MAX_STAPLE_ATTEMPTS..."
|
|
if xcrun stapler staple "$APP_PATH"; then
|
|
echo "Stapling successful"
|
|
break
|
|
fi
|
|
if [ $STAPLE_ATTEMPT -eq $MAX_STAPLE_ATTEMPTS ]; then
|
|
echo "ERROR: Stapling failed after $MAX_STAPLE_ATTEMPTS attempts"
|
|
exit 1
|
|
fi
|
|
echo "Stapling failed, waiting 10 seconds before retry..."
|
|
sleep 10
|
|
STAPLE_ATTEMPT=$((STAPLE_ATTEMPT + 1))
|
|
done
|
|
|
|
echo "=== Verifying notarization ==="
|
|
xcrun stapler validate "$APP_PATH"
|
|
spctl --assess --type exec -v "$APP_PATH"
|
|
|
|
echo "Notarization complete: $APP_PATH"
|