81 lines
2.5 KiB
Bash
Executable File
81 lines
2.5 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
cd "$(dirname "$0")"
|
|
|
|
echo "==> Stopping any running Pommedoro..."
|
|
pkill -9 -f Pommedoro 2>/dev/null || true
|
|
sleep 0.5
|
|
|
|
echo "==> Cleaning previous build..."
|
|
rm -rf .build/Pommedoro.app .build/Pommedoro.dmg
|
|
|
|
echo "==> Building release (DMG + SHA256)..."
|
|
make release
|
|
|
|
echo "==> Verifying SHA256 file was generated..."
|
|
if [ ! -f releases/Pommedoro.dmg.sha256 ]; then
|
|
echo "==> FAIL: releases/Pommedoro.dmg.sha256 not found."
|
|
exit 1
|
|
fi
|
|
SHA_CONTENT="$(cat releases/Pommedoro.dmg.sha256)"
|
|
if [ ${#SHA_CONTENT} -ne 64 ]; then
|
|
echo "==> FAIL: SHA256 file content is not a valid 64-char hex hash."
|
|
exit 1
|
|
fi
|
|
echo "==> OK: SHA256 = ${SHA_CONTENT}"
|
|
|
|
echo "==> Verifying SHA256 matches DMG..."
|
|
ACTUAL_SHA="$(shasum -a 256 releases/Pommedoro.dmg | awk '{print $1}')"
|
|
if [ "${SHA_CONTENT}" != "${ACTUAL_SHA}" ]; then
|
|
echo "==> FAIL: SHA256 mismatch (file: ${SHA_CONTENT}, actual: ${ACTUAL_SHA})."
|
|
exit 1
|
|
fi
|
|
echo "==> OK: SHA256 matches DMG."
|
|
|
|
echo "==> Simulating download quarantine on DMG..."
|
|
xattr -w com.apple.quarantine "0081;67890abc;Safari;12345678-1234-1234-1234-123456789012" .build/Pommedoro.dmg
|
|
|
|
echo "==> Mounting quarantined DMG..."
|
|
hdiutil attach .build/Pommedoro.dmg -nobrowse -quiet
|
|
|
|
echo "==> Running Install.command from DMG..."
|
|
bash /Volumes/Pommedoro/Install.command
|
|
|
|
sleep 2
|
|
|
|
echo "==> Verifying app is running..."
|
|
if pgrep -x Pommedoro > /dev/null; then
|
|
echo "==> SUCCESS: Pommedoro is running."
|
|
else
|
|
echo "==> FAIL: Pommedoro did not launch."
|
|
hdiutil detach /Volumes/Pommedoro -quiet 2>/dev/null || true
|
|
exit 1
|
|
fi
|
|
|
|
echo "==> Verifying quarantine is stripped..."
|
|
if xattr /Applications/Pommedoro.app 2>&1 | grep -q "com.apple.quarantine"; then
|
|
echo "==> FAIL: quarantine attribute still present."
|
|
hdiutil detach /Volumes/Pommedoro -quiet 2>/dev/null || true
|
|
exit 1
|
|
else
|
|
echo "==> OK: no quarantine attribute."
|
|
fi
|
|
|
|
echo "==> Verifying SHA256 was stamped locally..."
|
|
SHA_FILE="${HOME}/Library/Application Support/Pommedoro/current.sha256"
|
|
if [ ! -f "${SHA_FILE}" ]; then
|
|
echo "==> FAIL: local SHA256 stamp not found at ${SHA_FILE}."
|
|
hdiutil detach /Volumes/Pommedoro -quiet 2>/dev/null || true
|
|
exit 1
|
|
fi
|
|
LOCAL_SHA="$(cat "${SHA_FILE}")"
|
|
echo "==> OK: local SHA256 stamp = ${LOCAL_SHA}"
|
|
|
|
hdiutil detach /Volumes/Pommedoro -quiet 2>/dev/null || true
|
|
|
|
echo ""
|
|
echo "==> All checks passed."
|
|
echo "==> DMG at: .build/Pommedoro.dmg"
|
|
echo "==> Release at: releases/Pommedoro.dmg + releases/Pommedoro.dmg.sha256"
|