ElectronForge打包、签名、自动更新

1
const NEED_SIGN_FW: string[] = [
2
  'Contents/Frameworks/Electron" "Framework.framework/Versions/A/Libraries/libEGL.dylib',
3
  'Contents/Frameworks/Electron" "Framework.framework/Versions/A/Libraries/libffmpeg.dylib',
4
  'Contents/Frameworks/Electron" "Framework.framework/Versions/A/Libraries/libGLESv2.dylib',
5
  'Contents/Frameworks/Electron" "Framework.framework/Versions/A/Libraries/libvk_swiftshader.dylib',
6
  'Contents/Frameworks/Squirrel.framework/Versions/A/Resources/ShipIt',
7
]
8
const ETM_DIR = path.join(__dirname, `./entitlements.mac.plist`)
9
function signMac(appPath: string, APP_NAME: string) {
10
  const caName = 'Developer ID Application: CompanyName (xxxxxxxx)'
11
  const needSignDirs: string[] = [appPath]
12
  NEED_SIGN_FW.forEach((subdir) => {
13
    needSignDirs.push(`${appPath}/${subdir}`)
14
  })
15
  return execPromise(`security find-identity -v -p codesigning`)
16
    .then(({ stdout, stderr }) => {
17
      return stdout.includes(caName)
18
    })
19
    .then((hasCertificate) => {
20
      if (!hasCertificate) throw new Error('钥匙串中没有需要的证书')
21
      return execPromise(`xattr -cr ${appPath}`)
22
    })
23
    .then(() => {
24
      const signList: Promise<{ stdout: string, stderr: string }>[] = []
25
      needSignDirs.forEach((dir) => {
26
        signList.push(
27
          execPromise(
28
            `codesign --force --deep --timestamp --options runtime --entitlements ${ETM_DIR} --sign "${caName}" --verbose=2 -v ${dir}`
29
          )
30
        )
31
      })
32
      return Promise.all(signList)
33
    })
34
    .then((resList) => {
35
      console.info('【签名完成】', resList)
36
      return resList
37
    })
38
  // 查看应用的签名： codesign -d -v -r - /path/to/xxx.app
39
}
40
function execPromise(
41
  command: string
42
): Promise<{ stdout: string, stderr: string }> {
43
  return new Promise((resolve, reject) => {
44
    exec(command, (err, stdout, stderr) => {
45
      if (err) return reject(err)
46
      else resolve({ stdout, stderr })
47
    })
48
  })
49
}

1
export function makeMacProfile() {
2
  const conf = `--apple-id "${process.env.NOTARY_APP_ID}" --team-id "${process.env.NOTARY_TEAM_ID}" --password "${process.env.NOTARY_PASSWORD}"`
3
  return execPromise(`xcrun notarytool store-credentials HAHAHA ${conf}`)
4
}
5
function notarizeMac(dmgPath: string) {
6
  console.info(`【开始公证】: ${dmgPath}`)
7
  return execPromise(
8
    `xcrun notarytool submit ${dmgPath} --keychain-profile "HAHAHA" --wait`
9
  ).then(({ stdout, stderr }) => {
10
    const res = stdout || stderr
11
    if (res.includes('Invalid')) {
12
      console.info('【公证失败】', res)
13
      // @ts-ignore
14
      return logNotarytoolErr(res.match(/id: .{36}/)[0]?.substr(4))
15
    }
16
    console.info('【公证完成】', stdout, stderr)
17
    return res
18
  })
19
  // xcrun notarytool log "96e8072f-4a0c-443d-b2c3-076b39376817" --keychain-profile "OneApps"
20
}
21
function logNotarytoolErr(id: string) {
22
  return execPromise(
23
    `xcrun notarytool log "${id}" --keychain-profile "OneApps"`
24
  ).then(({ stdout, stderr }) => {
25
    const res = stdout || stderr
26
    console.info('【公证失败原因】', res)
27
    return Promise.reject(res)
28
  })
29
}