daily-build.yml

# Please don't use ADO UI defined scheduled triggers because it takes precedence over YAML scheduled triggers.
# https://docs.microsoft.com/en-us/azure/devops/pipelines/process/scheduled-triggers
variables:
  today: $(Get-Date -Format yyyyMMddhhmmss)

schedules:
- cron: "0 18 * * *"
  displayName: 2:00 AM (UTC + 8:00) China Daily Build
  branches:
    include:
    - main

pr: none

jobs:
- job: DailyBuild
  timeoutInMinutes: 360
  pool: pool-windows-2019
  steps:
  - task: PowerShell@2
    displayName: 'Initialization'
    inputs:
      targetType: 'inline'
      script: |
        Set-PSRepository -Name PSGallery -InstallationPolicy Trusted
        # Avoid issue of filename too long
        git config --global core.longpaths true
        # Wipe any changes from a previous branch
        git clean -xdf
  - task: UseDotNet@2
    displayName: 'Use .NET SDK'
    inputs:
      packageType: sdk
      version: 8.x
  - task: PowerShell@2
    displayName: Prepare Powershell $(PSVersion)
    inputs:
      filePath: 'tools/Test/SmokeTest/PrepareRequiredPowershell.ps1'
      arguments: '-RequiredPsVersion $(PSVersion)'
  - task: PowerShell@2
    displayName: 'Install platyPS'
    inputs:
      targetType: 'inline'
      script: |
        $command = "`$PSVersionTable `
                    Install-Module platyPS -Force -Confirm:`$false -Scope CurrentUser `
                    Exit"
        dotnet tool run pwsh -c $command
  - task: PowerShell@2
    displayName: 'Build for Bumping Version'
    inputs:
      targetType: inline
      pwsh: true
      script: |
        $buildScript = Join-Path "$(Build.SourcesDirectory)" 'tools' 'BuildScripts' 'BuildModules.ps1'
        & $buildScript -RepoRoot "$(Build.SourcesDirectory)" -Configuration Release -EnableTestCoverage -InvokedByPipeline

  - task: PowerShell@2
    displayName: 'Bump Version'
    inputs:
      targetType: 'inline'
      script: |
        $command = "`$PSVersionTable `
        Get-PSRepository `
        ./tools/RunVersionController.ps1 -Release 'Daily Build $(today)' -ReleaseType $(ReleaseType)`
        Exit"
        dotnet tool run pwsh -c $command

  - task: PowerShell@2
    displayName: 'Clean artifacts folder'
    inputs:
      targetType: 'inline'
      script: |
        Remove-Item -Force -Recurse -Path artifacts

  - task: PowerShell@2
    displayName: 'Build after Version Bump up'
    inputs:
      targetType: inline
      pwsh: true
      script: |
        $buildScript = Join-Path "$(Build.SourcesDirectory)" 'tools' 'BuildScripts' 'BuildModules.ps1'
        & $buildScript -ModifiedModule -RepoRoot "$(Build.SourcesDirectory)" -Configuration Release -EnableTestCoverage -InvokedByPipeline

  - task: EsrpCodeSigning@5
    displayName: "Sign Dll [Authenticode + Strong Name]"
    inputs:
      ConnectedServiceName: '$(ESRPServiceConnectionName)'
      AppRegistrationClientId: '$(ESRPAppClientId)'
      AppRegistrationTenantId: '$(ESRPAppTenantId)'
      AuthAKVName: '$(ESRPKVName)'
      AuthCertName: '$(ESRPAuthCertName)'
      AuthSignCertName: '$(ESRPSignCertName)'
      FolderPath: 'artifacts'
      Pattern: |
        Release/**/Microsoft*Azure*PowerShell*.dll
        Release/**/Az.*.private.dll
        Release/**/Microsoft.Azure.Commands.*.AlcWrapper.dll
        InstallerChecks.dll
      UseMinimatch: true
      signConfigType: 'inlineSignParams'
      inlineOperation: |
        [
              {
                "KeyCode": "CP-233863-SN",
                "OperationCode": "StrongNameSign",
                "Parameters": {},
                "ToolName": "sign",
                "ToolVersion": "1.0"
              },
              {
                "KeyCode": "CP-233863-SN",
                "OperationCode": "StrongNameVerify",
                "Parameters": {},
                "ToolName": "sign",
                "ToolVersion": "1.0"
              },
              {
                "KeyCode": "CP-230012",
                "OperationCode": "SigntoolSign",
                "Parameters": {
                  "OpusName": "Microsoft",
                  "OpusInfo": "http://www.microsoft.com",
                  "FileDigest": "/fd \"SHA256\"",
                  "PageHash": "/NPH",
                  "TimeStamp": "/tr \"http://rfc3161.gtm.corp.microsoft.com/TSS/HttpTspServer\" /td sha256"
                },
                "ToolName": "sign",
                "ToolVersion": "1.0"
              },
              {
                "KeyCode": "CP-230012",
                "OperationCode": "SigntoolVerify",
                "Parameters": {},
                "ToolName": "sign",
                "ToolVersion": "1.0"
              }
            ]
      SessionTimeout: '60'
      MaxConcurrency: '50'
      MaxRetryAttempts: '5'
  - task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@5
    displayName: "Sign Scripts [Authenticode]"
    inputs:
      ConnectedServiceName: '$(ESRPServiceConnectionName)'
      AppRegistrationClientId: '$(ESRPAppClientId)'
      AppRegistrationTenantId: '$(ESRPAppTenantId)'
      AuthAKVName: '$(ESRPKVName)'
      AuthCertName: '$(ESRPAuthCertName)'
      AuthSignCertName: '$(ESRPSignCertName)'
      FolderPath: 'artifacts'
      Pattern: |
        Release/**/*.ps1
        Release/**/*.psm1
        Release/**/*.ps1xml
        Release/**/*.js
        InstallModule.ps1
      UseMinimatch: true
      signConfigType: inlineSignParams
      inlineOperation: |
        [
          {
            "KeyCode": "CP-230012",
            "OperationCode": "SigntoolSign",
            "Parameters": {
              "OpusName": "Microsoft",
              "OpusInfo": "http://www.microsoft.com",
              "FileDigest": "/fd \"SHA256\"",
              "PageHash": "/NPH",
              "TimeStamp": "/tr \"http://rfc3161.gtm.corp.microsoft.com/TSS/HttpTspServer\" /td sha256"
            },
            "ToolName": "sign",
            "ToolVersion": "1.0"
          },
          {
            "KeyCode": "CP-230012",
            "OperationCode": "SigntoolVerify",
            "Parameters": {},
            "ToolName": "sign",
            "ToolVersion": "1.0"
          }
        ]
  - task: EsrpCodeSigning@5
    displayName: 'Sign 3rd Party [Strong Name]'
    inputs:
      ConnectedServiceName: '$(ESRPServiceConnectionName)'
      AppRegistrationClientId: '$(ESRPAppClientId)'
      AppRegistrationTenantId: '$(ESRPAppTenantId)'
      AuthAKVName: '$(ESRPKVName)'
      AuthCertName: '$(ESRPAuthCertName)'
      AuthSignCertName: '$(ESRPSignCertName)'
      FolderPath: artifacts
      Pattern: 'Release/**/FuzzySharp.dll'
      UseMinimatch: true
      signConfigType: inlineSignParams
      inlineOperation: |
        [
          {
            "KeyCode": "CP-233863-SN",
            "OperationCode": "StrongNameSign",
            "Parameters": {},
            "ToolName": "sign",
            "ToolVersion": "1.0"
          },
          {
            "KeyCode": "CP-233863-SN",
            "OperationCode": "StrongNameVerify",
            "Parameters": {},
            "ToolName": "sign",
            "ToolVersion": "1.0"
          }
        ]
      SessionTimeout: '60'
      MaxConcurrency: '50'
      MaxRetryAttempts: '5'

  - task: DotNetCoreCLI@2
    displayName: Publish
    inputs:
      command: custom
      custom: msbuild
      arguments: 'build.proj /t:Publish /p:Configuration=Release;NuGetKey=$(NuGetKey)'

  - task: PublishPipelineArtifact@0
    displayName: 'Save artifacts'
    inputs:
      artifactName: artifacts
      targetPath: artifacts
    condition: succeededOrFailed()