install-microbuild.yml

parameters:
  # Enable install tasks for MicroBuild
  enableMicrobuild: false
  # Enable install tasks for MicroBuild on Mac and Linux
  # Will be ignored if 'enableMicrobuild' is false or 'Agent.Os' is 'Windows_NT'
  enableMicrobuildForMacAndLinux: false
  # Location of the MicroBuild output folder
  microBuildOutputFolder: '$(Build.SourcesDirectory)'
  continueOnError: false

steps:
  - ${{ if eq(parameters.enableMicrobuild, 'true') }}:
    - ${{ if eq(parameters.enableMicrobuildForMacAndLinux, 'true') }}:
      # Needed to download the MicroBuild plugin nupkgs on Mac and Linux when nuget.exe is unavailable
      - task: UseDotNet@2
        displayName: Install .NET 8.0 SDK for MicroBuild Plugin
        inputs:
          packageType: sdk
          version: 8.0.x
          installationPath: ${{ parameters.microBuildOutputFolder }}/.dotnet
          workingDirectory: ${{ parameters.microBuildOutputFolder }}
        condition: and(succeeded(), ne(variables['Agent.Os'], 'Windows_NT'))

    - task: MicroBuildSigningPlugin@4
      displayName: Install MicroBuild plugin
      inputs:
        signType: $(_SignType)
        zipSources: false
        feedSource: https://dnceng.pkgs.visualstudio.com/_packaging/MicroBuildToolset/nuget/v3/index.json
        ${{ if and(eq(parameters.enableMicrobuildForMacAndLinux, 'true'), ne(variables['Agent.Os'], 'Windows_NT')) }}:
          azureSubscription: 'MicroBuild Signing Task (DevDiv)'
          useEsrpCli: true
      env:
        TeamName: $(_TeamName)
        MicroBuildOutputFolderOverride: ${{ parameters.microBuildOutputFolder }}
        SYSTEM_ACCESSTOKEN: $(System.AccessToken)
      continueOnError: ${{ parameters.continueOnError }}
      condition: and(
        succeeded(),
        or(
          and(
            eq(variables['Agent.Os'], 'Windows_NT'),
            in(variables['_SignType'], 'real', 'test')
          ),
          and(
            ${{ eq(parameters.enableMicrobuildForMacAndLinux, true) }},
            ne(variables['Agent.Os'], 'Windows_NT'),
            eq(variables['_SignType'], 'real')
          )
        ))

    # Workaround for ESRP CLI on Linux - https://github.com/dotnet/source-build/issues/4964
    - ${{ if eq(parameters.enableMicrobuildForMacAndLinux, 'true') }}:
      - task: UseDotNet@2
        displayName: Install .NET 9.0 SDK for ESRP CLI Workaround
        inputs:
          packageType: sdk
          version: 9.0.x
          installationPath: ${{ parameters.microBuildOutputFolder }}/.dotnet
          workingDirectory: ${{ parameters.microBuildOutputFolder }}
        condition: and(succeeded(), eq(variables['Agent.OS'], 'Linux'))

      - task: PowerShell@2
        displayName: Workaround for ESRP CLI on Linux
        inputs:
          targetType: 'inline'
          script: |
            Write-Host "Copying Linux Path"
            $MBSIGN_APPFOLDER = '$(MBSIGN_APPFOLDER)'
            $MBSIGN_APPFOLDER = ($MBSIGN_APPFOLDER -replace '/build', '')

            $versionRegex = '\d+\.\d+\.\d+'
            $package = Get-ChildItem -Path $MBSIGN_APPFOLDER -Directory |
              Where-Object { $_.Name -match $versionRegex }

            if ($package.Count -ne 1) {
                Write-Host "There should be exactly one matching subfolder, but found $($package.Count)."
                exit 1
            }

            $MBSIGN_APPFOLDER = $package[0].FullName + '/build'
            $MBSIGN_APPFOLDER | Write-Host
            $SignConfigPath = $MBSIGN_APPFOLDER + '/signconfig.xml'
            Copy-Item -Path "$(MBSIGN_APPFOLDER)/signconfig.xml" -Destination $SignConfigPath -Force
        condition: and(succeeded(), eq(variables['Agent.OS'], 'Linux'))