Skip to content

Commit 99fa0ad

Browse files
nb-ccdnb-ccd
committed
fix: test repackaging with shell prompt
1 parent a726d30 commit 99fa0ad

File tree

1 file changed

+81
-74
lines changed

1 file changed

+81
-74
lines changed

‎.github/workflows/test-windows-code-signing.yaml‎

Lines changed: 81 additions & 74 deletions
Original file line numberDiff line numberDiff line change
@@ -98,90 +98,96 @@ jobs:
9898
echo "ARTIFACT_NAME=${ARTIFACT_NAME}" >> $GITHUB_ENV
9999
shell: bash
100100

101-
- name: Install DigiCert Client tools (Windows only)
102-
id: digicert_client
103-
uses: digicert/[email protected]
104-
105-
# - name: Import Windows certificate (Windows only)
106-
# id: windows_certificate
101+
# - name: Install DigiCert Client tools (Windows only)
102+
# id: digicert_client
103+
# uses: digicert/[email protected]
104+
105+
# # - name: Import Windows certificate (Windows only)
106+
# # id: windows_certificate
107+
# # env:
108+
# # # Base64 encoding of the pfx/p12 certificate for Windows code signing.
109+
# # SM_CLIENT_CERT_FILE_B64: ${{ secrets.WINDOWS_SM_CLIENT_CERT_FILE_B64 }}
110+
# # run: |
111+
# # $CERTIFICATE_PATH_BASE64="$env:RUNNER_TEMP\cert-b64.txt"
112+
# # $CERTIFICATE_PATH="$env:RUNNER_TEMP\cert.pfx"
113+
114+
# # Set-Content -Path $CERTIFICATE_PATH_BASE64 -Value $env:SM_CLIENT_CERT_FILE_B64
115+
# # certutil -decode $CERTIFICATE_PATH_BASE64 $CERTIFICATE_PATH
116+
# # echo "CERTIFICATE_PATH=$CERTIFICATE_PATH" >> $env:GITHUB_OUTPUT
117+
118+
# - name: Run smctl healthcheck to confirm if the tool is configured properly.
119+
# working-directory: ${{steps.build.outputs.bin_dir}}
107120
# env:
108-
# # Base64 encoding of the pfx/p12 certificate for Windows code signing.
109-
# SM_CLIENT_CERT_FILE_B64: ${{ secrets.WINDOWS_SM_CLIENT_CERT_FILE_B64 }}
121+
# WINDOWS_PKCS11_CONFIG: ${{ steps.digicert_client.outputs.PKCS11_CONFIG }}
122+
# WINDOWS_SM_KEYPAIR_ALIAS: ${{ secrets.WINDOWS_SM_KEYPAIR_ALIAS }}
123+
# SM_HOST: ${{ vars.WINDOWS_SM_HOST }}
124+
# SM_API_KEY: ${{ secrets.WINDOWS_SM_API_KEY }}
125+
# SM_CLIENT_CERT_FILE: ${{ steps.windows_certificate.outputs.CERTIFICATE_PATH }}
126+
# SM_CLIENT_CERT_PASSWORD: ${{ secrets.WINDOWS_SM_CLIENT_CERT_PASSWORD }}
110127
# run: |
111-
# $CERTIFICATE_PATH_BASE64="$env:RUNNER_TEMP\cert-b64.txt"
112-
# $CERTIFICATE_PATH="$env:RUNNER_TEMP\cert.pfx"
113-
114-
# Set-Content -Path $CERTIFICATE_PATH_BASE64 -Value $env:SM_CLIENT_CERT_FILE_B64
115-
# certutil -decode $CERTIFICATE_PATH_BASE64 $CERTIFICATE_PATH
116-
# echo "CERTIFICATE_PATH=$CERTIFICATE_PATH" >> $env:GITHUB_OUTPUT
117-
118-
- name: Run smctl healthcheck to confirm if the tool is configured properly.
119-
working-directory: ${{steps.build.outputs.bin_dir}}
120-
env:
121-
WINDOWS_PKCS11_CONFIG: ${{ steps.digicert_client.outputs.PKCS11_CONFIG }}
122-
WINDOWS_SM_KEYPAIR_ALIAS: ${{ secrets.WINDOWS_SM_KEYPAIR_ALIAS }}
123-
SM_HOST: ${{ vars.WINDOWS_SM_HOST }}
124-
SM_API_KEY: ${{ secrets.WINDOWS_SM_API_KEY }}
125-
SM_CLIENT_CERT_FILE: ${{ steps.windows_certificate.outputs.CERTIFICATE_PATH }}
126-
SM_CLIENT_CERT_PASSWORD: ${{ secrets.WINDOWS_SM_CLIENT_CERT_PASSWORD }}
127-
run: |
128-
smctl healthcheck --all
129-
shell: cmd
128+
# smctl healthcheck --all
129+
# shell: cmd
130130

131-
- name: Install dependencies
132-
run: |
133-
choco install yq jq -y
134-
shell: bash
131+
# - name: Install dependencies
132+
# run: |
133+
# choco install yq jq -y
134+
# shell: bash
135135

136-
- name: Install Rust
137-
uses: actions-rust-lang/setup-rust-toolchain@v1
138-
with:
139-
toolchain: ${{ env.RUST_VERSION }}-x86_64-pc-windows-msvc
136+
# - name: Install Rust
137+
# uses: actions-rust-lang/setup-rust-toolchain@v1
138+
# with:
139+
# toolchain: ${{ env.RUST_VERSION }}-x86_64-pc-windows-msvc
140140

141-
- name: Install Rust
142-
uses: actions-rust-lang/setup-rust-toolchain@v1
143-
with:
144-
toolchain: ${{ env.RUST_VERSION }}-x86_64-pc-windows-gnu
141+
# - name: Install Rust
142+
# uses: actions-rust-lang/setup-rust-toolchain@v1
143+
# with:
144+
# toolchain: ${{ env.RUST_VERSION }}-x86_64-pc-windows-gnu
145145

146-
- name: Setup node folder
147-
run: |
148-
mkdir -p "C:/Program Files/node/include"
149-
Add-Content -Path $env:GITHUB_PATH -Value "C:/Program Files/node"
146+
# - name: Setup node folder
147+
# run: |
148+
# mkdir -p "C:/Program Files/node/include"
149+
# Add-Content -Path $env:GITHUB_PATH -Value "C:/Program Files/node"
150150

151-
- name: Install flatbuffers
152-
run: |
153-
curl -L -O https://github.com/google/flatbuffers/releases/download/v${{ env.FLATBUFFERS_VERSION }}/Windows.flatc.binary.zip
154-
unzip Windows.flatc.binary.zip
155-
mv flatc.exe "C:/Program Files/node/"
151+
# - name: Install flatbuffers
152+
# run: |
153+
# curl -L -O https://github.com/google/flatbuffers/releases/download/v${{ env.FLATBUFFERS_VERSION }}/Windows.flatc.binary.zip
154+
# unzip Windows.flatc.binary.zip
155+
# mv flatc.exe "C:/Program Files/node/"
156156

157-
- name: Install protobuf (protoc)
158-
run: |
159-
curl -L -O https://github.com/protocolbuffers/protobuf/releases/download/v${{ env.PROTOC_VERSION }}/protoc-${{ env.PROTOC_VERSION }}-win64.zip
160-
unzip protoc-${{ env.PROTOC_VERSION }}-win64.zip
161-
mv bin/protoc.exe "C:/Program Files/node/"
162-
mv include/* "C:/Program Files/node/include"
157+
# - name: Install protobuf (protoc)
158+
# run: |
159+
# curl -L -O https://github.com/protocolbuffers/protobuf/releases/download/v${{ env.PROTOC_VERSION }}/protoc-${{ env.PROTOC_VERSION }}-win64.zip
160+
# unzip protoc-${{ env.PROTOC_VERSION }}-win64.zip
161+
# mv bin/protoc.exe "C:/Program Files/node/"
162+
# mv include/* "C:/Program Files/node/include"
163163

164-
- name: Setup Haskell
165-
uses: haskell-actions/setup@v2
166-
with:
167-
ghc-version: ${{ env.GHC_VERSION }}
168-
enable-stack: true
169-
stack-version: ${{ env.STACK_VERSION }}
164+
# - name: Setup Haskell
165+
# uses: haskell-actions/setup@v2
166+
# with:
167+
# ghc-version: ${{ env.GHC_VERSION }}
168+
# enable-stack: true
169+
# stack-version: ${{ env.STACK_VERSION }}
170170

171-
- uses: milliewalky/setup-7-zip@v1
171+
# - uses: milliewalky/setup-7-zip@v1
172172

173-
- name: Install GCC
174-
run: |
175-
curl -L -O https://github.com/brechtsanders/winlibs_mingw/releases/download/14.2.0posix-19.1.1-12.0.0-msvcrt-r2/winlibs-x86_64-posix-seh-gcc-14.2.0-llvm-19.1.1-mingw-w64msvcrt-12.0.0-r2.7z
176-
7z x winlibs-x86_64-posix-seh-gcc-14.2.0-llvm-19.1.1-mingw-w64msvcrt-12.0.0-r2.7z -oC:/gcc
177-
Add-Content -Path $env:GITHUB_PATH -Value "C:/gcc/mingw64/bin"
173+
# - name: Install GCC
174+
# run: |
175+
# curl -L -O https://github.com/brechtsanders/winlibs_mingw/releases/download/14.2.0posix-19.1.1-12.0.0-msvcrt-r2/winlibs-x86_64-posix-seh-gcc-14.2.0-llvm-19.1.1-mingw-w64msvcrt-12.0.0-r2.7z
176+
# 7z x winlibs-x86_64-posix-seh-gcc-14.2.0-llvm-19.1.1-mingw-w64msvcrt-12.0.0-r2.7z -oC:/gcc
177+
# Add-Content -Path $env:GITHUB_PATH -Value "C:/gcc/mingw64/bin"
178178

179-
- name: Install LMDB
180-
run: stack exec -- pacman -S --noconfirm mingw-w64-x86_64-lmdb
179+
# - name: Install LMDB
180+
# run: stack exec -- pacman -S --noconfirm mingw-w64-x86_64-lmdb
181+
182+
# - name: Build Windows Node
183+
# run: |
184+
# ./scripts/distribution/windows/build-all.ps1 -nodeVersion ${{ needs.validate-preconditions.outputs.version }} -rustVersion ${{ env.RUST_VERSION }}
181185

182-
- name: Build Windows Node
186+
- name: Download existing Windows build
183187
run: |
184-
./scripts/distribution/windows/build-all.ps1 -nodeVersion ${{ needs.validate-preconditions.outputs.version }} -rustVersion ${{ env.RUST_VERSION }}
188+
curl -o ./service/windows/installer/Node.msi "https://s3.eu-west-1.amazonaws.com/distribution.concordium.software/windows/Node-9.0.5-0.msi?response-content-disposition=inline&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEIj%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCWV1LXdlc3QtMSJHMEUCIFLVMKqXHik1LLHdDuExKV84GJHJ%2BnFkVVu41nW7B02UAiEAuxIvUrWt95nkpc1QqBZ052WLVIqBEWCX%2FlH6AY1tm14qxQQIkf%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FARAFGgwxOTI1NDk4NDMwMDUiDLVWMQZwOuxIWJeQECqZBMIzXXy28hjXBirUMy4m01sbE0GVshLZUV339K9iknyNicQH29wE7lAZ32fOAh53jdgSDdF4%2Fuyn6njW1md0G5fYoZjU63JGeJabFZhEadZhz6QHuJNO1fdlLLMtbvuyEiaEDReL7e65CUCRoOyhWbUQYzrCoDk4nr87DkyvkXhBiY5CQRmO1g8fA%2FXqfORh4w9%2B48G6Zyf5nTbUEZB7HD4E1EjiNF7%2FBl89iZmEZvj3REyy1%2FdGe%2FuldF9H9sJZ3dHpZjfVXwjkr6ZXpy6I9SLZnQv0zvn6s2wzzAvpVB3yJdDCErunBqWedlKVW3%2F%2B95l2TO8s%2BiWqbwUFmzKVS13ArFBOCDOsf%2BGNTlvOC6P30qd6jzLmqsi2s4K44o%2BfXPAw0FJoRKUtKe84beEnSh33CLjJgAqMAVLaBxjj0p%2FG1i3CNBeBp9vWcUPv3AtmDecfuuRZF7v0jDb0xn8gPUnJ8jEHXqUP7kpNMiwyv%2BYgZzUIC6xWqBSEr%2B9cVfdsqXCEyBjTG3PmQCqc88bwhO82GG4JMX2iDys9JchDvbSRHYotEJdaUUaKPqNvUDi5KU3L%2BAGPnJP8ZrvKOxMnaSWNcOzV1Fwq%2FiK%2Fr7N8TeXsSgv4NOmMzS8BaZoPJf%2B%2FBI%2FEp4K9%2B0bFM%2BIRxSIdgtU11V7ZvpgLcHiKIPAIBsk2JB7%2F1p0QQWwPhDqrnW0k%2FYdeJUcBkcsv7zCL%2BrTDBjrFAl25RK67HUoTYb537roZWnKMoRAUrgbsLUall0xs0usTlrOu9xNkIKroV74LZyyHFIx145IVYpq4Pzn6HGnlz2gBJrl1e%2FVRYxXw%2Fm7wgeuOdCbrAqkeQqd49tmuVuOgaefjbA3wtO%2FYYe%2BWZR0AloZR5KIuBED7XzR39qffYOx3xfp%2BZZFOPYGO9cvX5Riipc3pmz3ZneUBCkjQiICad48HHuiYnwaEa%2F3d31fhjIiq7AwJfSPigI06WjBELuJzkpsox%2B33Rzn0Ra3vKWModoehhc30gbAmwBMuSb7aijikB0g3mums2pVTKgrz7wB%2B5OL%2FwyZp3ybbND%2FXIbXHGnJUb8s1a1069d1ZU7wVoS6OIjJLkPK%2F1xkmDpwYQCPu3k3Vb1GUt26SBq%2F%2Bzldg7t6BZT8snPkvhEbikaT%2F2Zv66uJf2qI%3D&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIASZVG5OA66WXXADA7%2F20250708%2Feu-west-1%2Fs3%2Faws4_request&X-Amz-Date=20250708T154545Z&X-Amz-Expires=7200&X-Amz-SignedHeaders=host&X-Amz-Signature=717af1bdef8acbbcba7e06fc893a1428de6563bfd53ff37761541c54ebc36359"
189+
shell: cmd
190+
185191

186192
- name: Extract files to prepare for signing
187193
run: |
@@ -242,11 +248,12 @@ jobs:
242248

243249
- name: Repackage the cabinet file.
244250
run: |
245-
rm Node.cab
246-
mv disk1\Node.cab .
251+
del Node.cab
252+
move disk1\Node.cab .
247253
expand -d Node.cab
248-
MsiDb.exe -d ./service/windows/installer/Node.msi -k Node.cab
249-
MsiDb.exe -d ./service/windows/installer/Node.msi -a Node.cab
254+
MsiDb.exe -d service/windows/installer/Node.msi -k Node.cab
255+
MsiDb.exe -d service/windows/installer/Node.msi -a Node.cab
256+
shell: cmd
250257

251258
# - name: Sign files with smctl
252259
# working-directory: ${{steps.build.outputs.bin_dir}}

0 commit comments

Comments
 (0)