build.sh

#!/usr/bin/env bash

set -euo pipefail

BUILD_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"

notarization_status() {
  xcrun altool --notarization-info "$1" --username "$apple_id_username" --password "$apple_id_app_password" 2>&1 | awk -F ': ' '/Status:/ { print $2; }'
}

get_apple_id() {
  op item get --account "$op_account" --fields "username" "$one_password_item_id"
}

get_apple_password() {
  op item get --account "$op_account" --fields "App-specific Password" "$one_password_item_id"
}

get_cert_id() {
  op item get --account "$op_account" --fields "Certificate Id" "$one_password_item_id"
}

download_dependencies() {
  local ace_version="1.15.0"
  local ace_cdn_url="https://cdnjs.cloudflare.com/ajax/libs/ace"
  local ace_theme_dependencies=( "chrome" )
  local ace_worker_dependencies=( "css" "json" "html" "javascript" "php" "xml" "yaml" )
  local ace_mode_dependencies=( "plain_text" "css" "dockerfile" "gitignore" "golang" "groovy" "html" "ini" "java" "javascript" "json" "makefile" "markdown" "mysql" "nginx" "php" "properties" "python" "r" "ruby" "sh" "toml" "typescript" "xml" "yaml" )

  echo "Downloading ace"
  wget -q -O "$BUILD_DIR/static/js/ace.js" "$ace_cdn_url/$ace_version/ace.min.js"
  for theme in "${ace_theme_dependencies[@]}"; do
    echo "Downloading ace theme: $theme"
    wget -q -O "$BUILD_DIR/static/js/theme-$theme.js" "$ace_cdn_url/$ace_version/theme-$theme.min.js"
  done
  for worker in "${ace_worker_dependencies[@]}"; do
    echo "Downloading ace worker: $worker"
    wget -q -O "$BUILD_DIR/static/js/worker-$worker.js" "$ace_cdn_url/$ace_version/worker-$worker.min.js"
  done
  for mode in "${ace_mode_dependencies[@]}"; do
    echo "Downloading ace mode: $mode"
    wget -q -O "$BUILD_DIR/static/js/mode-$mode.js" "$ace_cdn_url/$ace_version/mode-$mode.min.js"
  done

  echo "Downloading jquery"
  wget -q -O "$BUILD_DIR/static/js/jquery.min.js" "https://code.jquery.com/jquery-3.6.3.min.js"

  echo "Downloading bootstrap"
  wget -q -O "$BUILD_DIR/static/js/bootstrap.bundle.min.js" "https://cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/js/bootstrap.bundle.min.js"

  echo "Downloading bootstrap css"
  wget -q -O "$BUILD_DIR/static/css/bootstrap.min.css" "https://cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/css/bootstrap.min.css"

  echo "Downloading fontawesome"
  local fontawesome_version="5.15.4"
  local fontawesome_name="fontawesome-free-$fontawesome_version-web"
  local tmp_dir="$(mktemp -d)"
  trap "rm -rf $tmp_dir" EXIT
  wget -q -e robots=off -O "$tmp_dir/$fontawesome_name.zip" "https://github.com/FortAwesome/Font-Awesome/releases/download/$fontawesome_version/$fontawesome_name.zip"
  unzip -q -d "$tmp_dir" "$tmp_dir/$fontawesome_name.zip"
  cp -R -f $tmp_dir/$fontawesome_name"/webfonts/"* "$BUILD_DIR/static/webfonts"
  mv -f "$tmp_dir/$fontawesome_name/css/all.css" "$BUILD_DIR/static/css/all.css"
}

function run() {
  local op_account="${1:?1Password account must be provided}"
  local one_password_item_id="${2:?1Password item id must be provided}"
  export BUNDLE_ID="org.kadaan.ansibleJinja2Tester"
  local apple_id_username="$(get_apple_id)"
  local apple_id_app_password="$(get_apple_password)"
  local cert_id="$(get_cert_id)"
  local venv_dir="$BUILD_DIR/.venv"
  local app_path="$BUILD_DIR/dist/Ansible Jinja2 Tester.app"
  local dmg_path="$BUILD_DIR/dist/Ansible Jinja2 Tester.dmg"

  echo ""
  echo "==> Cleaning up previous runs"
  rm -rf "$BUILD_DIR/build"
  rm -rf "$BUILD_DIR/dist"

  echo ""
  echo "==> Download dependencies"
  download_dependencies

  echo ""
  echo "==> Setting up Python"
  local python_version="$(cat "$BUILD_DIR/.python-version")"
  pyenv install "$python_version" --skip-existing
  pyenv sh-shell "$python_version"

  if ! pyenv exec virtualenv --version; then
    echo ""
    echo "==> Installing virtualenv"
    pyenv exec pip3 install virtualenv
  fi

  if [ ! -d "$venv_dir" ]; then
    echo ""
    echo "==> Creating virtualenv"
    pyenv exec virtualenv "$venv_dir"
  fi

  echo ""
  echo "==> Activating virtualenv"
  source .venv/bin/activate

  echo ""
  echo "==> Installing requirements"
  pip install -r requirements.txt

  echo ""
  echo "==> Building app"
  export CODESIGN_IDENTITY="$cert_id"
  pyinstaller main.spec --log-level=DEBUG --noconfirm

   echo ""
   echo "==> Creating dmg"
   hdiutil create -srcfolder "$app_path" "$dmg_path"

   echo ""
   echo "==> Signing dmg"
   codesign --timestamp --sign "$cert_id" "$dmg_path"

   echo ""
   echo -n "==> Notarizing dmg"
   local request_uuid=$(xcrun altool --notarize-app --primary-bundle-id "$BUNDLE_ID" --username "$apple_id_username" --password "$apple_id_app_password" --file "$dmg_path" 2>&1 | awk '/RequestUUID/ { print $NF; }')
   while [[ "$(notarization_status "$request_uuid")" == "in progress" ]] ; do
     echo -n "."
     sleep 10
   done
   echo ""

   status="$(notarization_status "$request_uuid")"
   if [[ "$status" != "success" ]] ; then
     exit 1
   fi

   echo ""
   echo "==> Stapling dmg"
   xcrun stapler staple -q "$dmg_path"

   echo ""
   echo "==> Checksum"
   shasum -a 256 "$dmg_path"
}

run "$@"