from origin repo gh:ddworken/hishtory, commit 480630e9181167b51554f4407db55717d9b7e4dd

scripts/actions-sign.py

@@ -0,0 +1,58 @@
+import os 
+import requests
+import time 
+import subprocess
+
+def main():
+    version = os.environ['GITHUB_REF'].split('/')[-1].split("-")[0]
+    print("Downloading binaries (this may pause for a while)")
+    waitUntilPublished(f"https://github.com/ddworken/hishtory/releases/download/{version}/hishtory-darwin-arm64", "hishtory-darwin-arm64")
+    waitUntilPublished(f"https://github.com/ddworken/hishtory/releases/download/{version}/hishtory-darwin-amd64", "hishtory-darwin-amd64")
+
+    print("before sha1sum:")
+    os.system("sha1sum hishtory-* 2>&1")
+
+    print("file:")
+    os.system("file hishtory-* 2>&1")
+
+    notAscii("hishtory-darwin-arm64")
+    notAscii("hishtory-darwin-amd64")
+
+    print("signing...")
+    os.system("""
+    cp hishtory-darwin-arm64 hishtory-darwin-arm64-unsigned
+    cp hishtory-darwin-amd64 hishtory-darwin-amd64-unsigned
+    echo $MACOS_CERTIFICATE | base64 -d > certificate.p12
+    security create-keychain -p $MACOS_CERTIFICATE_PWD build.keychain
+    security default-keychain -s build.keychain
+    security unlock-keychain -p $MACOS_CERTIFICATE_PWD build.keychain
+    security import certificate.p12 -k build.keychain -P $MACOS_CERTIFICATE_PWD -T /usr/bin/codesign
+    security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k $MACOS_CERTIFICATE_PWD build.keychain
+    /usr/bin/codesign --force -s 6D4E1575A0D40C370E294916A8390797106C8A6E hishtory-darwin-arm64 -v
+    /usr/bin/codesign --force -s 6D4E1575A0D40C370E294916A8390797106C8A6E hishtory-darwin-amd64 -v
+    """)
+
+    print("after sha1sum:")
+    os.system("sha1sum hishtory-* 2>&1")
+
+
+
+def notAscii(fn):
+    out = subprocess.check_output(["file", fn]).decode('utf-8')
+    if "ASCII text" in out:
+        raise Exception(f"fn={fn} is of type {out}")
+
+def waitUntilPublished(url, output) -> None:
+    startTime = time.time()
+    while True:
+        r = requests.get(url, headers={'authorization': f'bearer {os.environ["GITHUB_TOKEN"]}'})
+        if r.status_code == 200:
+            break 
+        if (time.time() - startTime)/60 > 20:
+            raise Exception(f"failed to get url={url} (startTime={startTime}, endTime={time.time()}), status_code=" + str(r.status_code) + " body=" + str(r.content))
+        time.sleep(5)
+    with open(output, 'wb') as f:
+        f.write(r.content)
+
+if __name__ == '__main__':
+    main()

scripts/client-ldflags

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+
+GIT_HASH=$(git rev-parse HEAD)
+echo "-X main.GitCommit=$GIT_HASH -X github.com/ddworken/hishtory/client/lib.Version=`cat VERSION` -w -extldflags \"-static\""