mirror of
https://github.com/sudosylabs/vnidrop.git
synced 2026-08-05 02:29:55 +02:00
ci: build Windows Store release artifacts
This commit is contained in:
280
packaging/windows/build-msix.ps1
Normal file
280
packaging/windows/build-msix.ps1
Normal file
@@ -0,0 +1,280 @@
|
||||
[CmdletBinding()]
|
||||
param(
|
||||
[Parameter(Mandatory)]
|
||||
[string] $Version,
|
||||
|
||||
[Parameter(Mandatory)]
|
||||
[string] $AppImage,
|
||||
|
||||
[Parameter(Mandatory)]
|
||||
[string] $OutputDirectory,
|
||||
|
||||
[string] $WindowsSdkVersion = "10.0.26100.0"
|
||||
)
|
||||
|
||||
Set-StrictMode -Version Latest
|
||||
$ErrorActionPreference = "Stop"
|
||||
$ProgressPreference = "SilentlyContinue"
|
||||
|
||||
function Assert-Condition {
|
||||
param(
|
||||
[bool] $Condition,
|
||||
[string] $Message
|
||||
)
|
||||
|
||||
if (-not $Condition) {
|
||||
throw $Message
|
||||
}
|
||||
}
|
||||
|
||||
function Invoke-Checked {
|
||||
param(
|
||||
[string] $FilePath,
|
||||
[string[]] $Arguments
|
||||
)
|
||||
|
||||
& $FilePath @Arguments
|
||||
if ($LASTEXITCODE -ne 0) {
|
||||
throw "$FilePath failed with exit code $LASTEXITCODE"
|
||||
}
|
||||
}
|
||||
|
||||
function Read-ZipEntry {
|
||||
param(
|
||||
[string] $ArchivePath,
|
||||
[string] $EntryPath
|
||||
)
|
||||
|
||||
$archive = [System.IO.Compression.ZipFile]::OpenRead($ArchivePath)
|
||||
try {
|
||||
$entry = $archive.GetEntry($EntryPath)
|
||||
if ($null -eq $entry) {
|
||||
throw "$ArchivePath does not contain $EntryPath"
|
||||
}
|
||||
$reader = [System.IO.StreamReader]::new($entry.Open())
|
||||
try {
|
||||
return $reader.ReadToEnd()
|
||||
}
|
||||
finally {
|
||||
$reader.Dispose()
|
||||
}
|
||||
}
|
||||
finally {
|
||||
$archive.Dispose()
|
||||
}
|
||||
}
|
||||
|
||||
function Get-ZipEntryLength {
|
||||
param(
|
||||
[string] $ArchivePath,
|
||||
[string] $EntryPath
|
||||
)
|
||||
|
||||
$archive = [System.IO.Compression.ZipFile]::OpenRead($ArchivePath)
|
||||
try {
|
||||
$entry = $archive.GetEntry($EntryPath)
|
||||
if ($null -eq $entry) {
|
||||
throw "$ArchivePath does not contain $EntryPath"
|
||||
}
|
||||
return $entry.Length
|
||||
}
|
||||
finally {
|
||||
$archive.Dispose()
|
||||
}
|
||||
}
|
||||
|
||||
if ([System.Environment]::OSVersion.Platform -ne [System.PlatformID]::Win32NT) {
|
||||
throw "MSIX packaging must run on Windows"
|
||||
}
|
||||
|
||||
$versionParts = $Version.Split(".")
|
||||
Assert-Condition ($versionParts.Count -eq 3) "Version must use MAJOR.MINOR.PATCH"
|
||||
for ($index = 0; $index -lt $versionParts.Count; $index++) {
|
||||
$part = $versionParts[$index]
|
||||
$number = 0
|
||||
Assert-Condition ([int]::TryParse($part, [ref] $number)) "Version components must be integers"
|
||||
Assert-Condition ($number.ToString() -eq $part) "Version components must not contain leading zeroes"
|
||||
Assert-Condition ($number -ge $(if ($index -eq 0) { 1 } else { 0 }) -and $number -le 65535) "Version components must be between 0 and 65535, with a non-zero major"
|
||||
}
|
||||
$packageVersion = "$Version.0"
|
||||
|
||||
$appImagePath = (Resolve-Path -LiteralPath $AppImage).Path
|
||||
Assert-Condition (Test-Path -LiteralPath $appImagePath -PathType Container) "App image not found: $AppImage"
|
||||
Assert-Condition (Test-Path -LiteralPath (Join-Path $appImagePath "VniDrop.exe") -PathType Leaf) "The app image does not contain VniDrop.exe"
|
||||
Assert-Condition (Test-Path -LiteralPath (Join-Path $appImagePath "runtime\bin\server\jvm.dll") -PathType Leaf) "The app image does not contain its bundled JVM"
|
||||
|
||||
Add-Type -AssemblyName System.IO.Compression.FileSystem
|
||||
$appFiles = @(Get-ChildItem -LiteralPath $appImagePath -Recurse -File)
|
||||
$debugRustJars = @($appFiles | Where-Object { $_.Name -match "^shared-win32-x86-64-debug-.+\.jar$" })
|
||||
Assert-Condition ($debugRustJars.Count -eq 0) "The app image contains a debug Rust runtime JAR"
|
||||
$releaseRustJars = @($appFiles | Where-Object { $_.Name -match "^shared-win32-x86-64-(?!debug-).+\.jar$" })
|
||||
Assert-Condition ($releaseRustJars.Count -eq 1) "Expected exactly one release Rust runtime JAR"
|
||||
$nativeDllLength = Get-ZipEntryLength -ArchivePath $releaseRustJars[0].FullName -EntryPath "win32-x86-64/vnidrop.dll"
|
||||
Assert-Condition ($nativeDllLength -gt 0) "The release Rust runtime JAR contains an empty vnidrop.dll"
|
||||
|
||||
$sharedJars = @($appFiles | Where-Object { $_.Name -match "^shared-jvm-.+\.jar$" })
|
||||
Assert-Condition ($sharedJars.Count -eq 1) "Expected exactly one shared JVM JAR"
|
||||
$sharedManifest = Read-ZipEntry -ArchivePath $sharedJars[0].FullName -EntryPath "META-INF/MANIFEST.MF"
|
||||
Assert-Condition ($sharedManifest -match "(?m)^Implementation-Version: $([regex]::Escape($Version))\r?$") "The packaged app version does not match $Version"
|
||||
|
||||
$programFilesX86 = [System.Environment]::GetFolderPath([System.Environment+SpecialFolder]::ProgramFilesX86)
|
||||
$makeAppxPath = Join-Path $programFilesX86 "Windows Kits\10\bin\$WindowsSdkVersion\x64\MakeAppx.exe"
|
||||
$makePriPath = Join-Path $programFilesX86 "Windows Kits\10\bin\$WindowsSdkVersion\x64\MakePri.exe"
|
||||
Assert-Condition (Test-Path -LiteralPath $makeAppxPath -PathType Leaf) "MakeAppx.exe from Windows SDK $WindowsSdkVersion was not found"
|
||||
Assert-Condition (Test-Path -LiteralPath $makePriPath -PathType Leaf) "MakePri.exe from Windows SDK $WindowsSdkVersion was not found"
|
||||
|
||||
$outputPath = [System.IO.Path]::GetFullPath($OutputDirectory)
|
||||
[System.IO.Directory]::CreateDirectory($outputPath) | Out-Null
|
||||
$artifactBaseName = "VniDrop_" + $Version + "_x64"
|
||||
$msixPath = Join-Path $outputPath "$artifactBaseName.msix"
|
||||
$uploadPath = Join-Path $outputPath "$artifactBaseName.msixupload"
|
||||
$buildInfoPath = Join-Path $outputPath "$artifactBaseName.build-info.json"
|
||||
$checksumsPath = Join-Path $outputPath "SHA256SUMS"
|
||||
@($msixPath, $uploadPath, $buildInfoPath, $checksumsPath) |
|
||||
Where-Object { Test-Path -LiteralPath $_ } |
|
||||
ForEach-Object { Remove-Item -LiteralPath $_ -Force }
|
||||
|
||||
$stageRoot = Join-Path ([System.IO.Path]::GetTempPath()) ("vnidrop-msix-" + [System.Guid]::NewGuid().ToString("N"))
|
||||
$packageRoot = Join-Path $stageRoot "package"
|
||||
$unpackedRoot = Join-Path $stageRoot "unpacked"
|
||||
$priConfigPath = Join-Path $stageRoot "priconfig.xml"
|
||||
[System.IO.Directory]::CreateDirectory($packageRoot) | Out-Null
|
||||
|
||||
try {
|
||||
Get-ChildItem -LiteralPath $appImagePath -Force | Copy-Item -Destination $packageRoot -Recurse -Force
|
||||
Copy-Item -LiteralPath (Join-Path $PSScriptRoot "Assets") -Destination $packageRoot -Recurse -Force
|
||||
|
||||
$manifestTemplate = Get-Content -LiteralPath (Join-Path $PSScriptRoot "AppxManifest.xml") -Raw
|
||||
Assert-Condition (([regex]::Matches($manifestTemplate, "__VERSION__")).Count -eq 1) "AppxManifest.xml must contain exactly one __VERSION__ placeholder"
|
||||
$manifestText = $manifestTemplate.Replace("__VERSION__", $packageVersion)
|
||||
[System.IO.File]::WriteAllText(
|
||||
(Join-Path $packageRoot "AppxManifest.xml"),
|
||||
$manifestText,
|
||||
[System.Text.UTF8Encoding]::new($false)
|
||||
)
|
||||
|
||||
Invoke-Checked -FilePath $makePriPath -Arguments @(
|
||||
"createconfig",
|
||||
"/cf", $priConfigPath,
|
||||
"/dq", "en-US",
|
||||
"/o"
|
||||
)
|
||||
Invoke-Checked -FilePath $makePriPath -Arguments @(
|
||||
"new",
|
||||
"/pr", $packageRoot,
|
||||
"/cf", $priConfigPath,
|
||||
"/mn", (Join-Path $packageRoot "AppxManifest.xml"),
|
||||
"/of", (Join-Path $packageRoot "resources.pri"),
|
||||
"/o"
|
||||
)
|
||||
Assert-Condition ((Get-Item -LiteralPath (Join-Path $packageRoot "resources.pri")).Length -gt 0) "MakePri created an empty resources.pri"
|
||||
|
||||
Invoke-Checked -FilePath $makeAppxPath -Arguments @(
|
||||
"pack",
|
||||
"/v",
|
||||
"/h", "SHA256",
|
||||
"/d", $packageRoot,
|
||||
"/p", $msixPath,
|
||||
"/o"
|
||||
)
|
||||
Invoke-Checked -FilePath $makeAppxPath -Arguments @(
|
||||
"unpack",
|
||||
"/v",
|
||||
"/p", $msixPath,
|
||||
"/d", $unpackedRoot,
|
||||
"/o"
|
||||
)
|
||||
|
||||
[xml] $manifest = Get-Content -LiteralPath (Join-Path $unpackedRoot "AppxManifest.xml") -Raw
|
||||
$namespaces = [System.Xml.XmlNamespaceManager]::new($manifest.NameTable)
|
||||
$namespaces.AddNamespace("f", "http://schemas.microsoft.com/appx/manifest/foundation/windows10")
|
||||
$namespaces.AddNamespace("uap", "http://schemas.microsoft.com/appx/manifest/uap/windows10")
|
||||
$namespaces.AddNamespace("uap10", "http://schemas.microsoft.com/appx/manifest/uap/windows10/10")
|
||||
$namespaces.AddNamespace("rescap", "http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities")
|
||||
$identity = $manifest.SelectSingleNode("/f:Package/f:Identity", $namespaces)
|
||||
Assert-Condition ($null -ne $identity) "The packed manifest has no Identity"
|
||||
Assert-Condition ($identity.GetAttribute("Name") -eq "SudosyLabs.Vnidrop") "The packed package identity name is incorrect"
|
||||
Assert-Condition ($identity.GetAttribute("Publisher") -eq "CN=6456DC8E-2C31-44BD-AACC-2E6813C833CB") "The packed publisher identity is incorrect"
|
||||
Assert-Condition ($identity.GetAttribute("Version") -eq $packageVersion) "The packed package version is incorrect"
|
||||
Assert-Condition ($identity.GetAttribute("ProcessorArchitecture") -eq "x64") "The packed package architecture is not x64"
|
||||
Assert-Condition ($manifest.SelectSingleNode("/f:Package/f:Properties/f:DisplayName", $namespaces).InnerText -eq "Vnidrop") "The packed display name does not match the reserved Store name"
|
||||
Assert-Condition ($manifest.SelectSingleNode("/f:Package/f:Properties/f:PublisherDisplayName", $namespaces).InnerText -eq "Sudosy Labs") "The packed publisher display name is incorrect"
|
||||
$targetFamily = $manifest.SelectSingleNode("/f:Package/f:Dependencies/f:TargetDeviceFamily", $namespaces)
|
||||
Assert-Condition ($null -ne $targetFamily) "The packed manifest has no target device family"
|
||||
Assert-Condition ($targetFamily.GetAttribute("Name") -eq "Windows.Desktop") "The packed package does not target Windows.Desktop"
|
||||
Assert-Condition ($null -ne $manifest.SelectSingleNode("/f:Package/f:Capabilities/rescap:Capability[@Name='runFullTrust']", $namespaces)) "The packed package does not declare runFullTrust"
|
||||
|
||||
$application = $manifest.SelectSingleNode("/f:Package/f:Applications/f:Application", $namespaces)
|
||||
Assert-Condition ($null -ne $application) "The packed manifest has no Application"
|
||||
Assert-Condition ($application.GetAttribute("Id") -eq "VniDrop") "The packed application ID is incorrect"
|
||||
$executable = $application.GetAttribute("Executable")
|
||||
Assert-Condition ($executable -eq "VniDrop.exe") "The packed manifest executable is incorrect"
|
||||
Assert-Condition ($application.GetAttribute("RuntimeBehavior", "http://schemas.microsoft.com/appx/manifest/uap/windows10/10") -eq "packagedClassicApp") "The packed runtime behavior is incorrect"
|
||||
Assert-Condition ($application.GetAttribute("TrustLevel", "http://schemas.microsoft.com/appx/manifest/uap/windows10/10") -eq "mediumIL") "The packed trust level is incorrect"
|
||||
Assert-Condition ($manifest.SelectSingleNode("/f:Package/f:Applications/f:Application/f:Extensions/uap:Extension/uap:FileTypeAssociation/uap:SupportedFileTypes/uap:FileType[text()='.vnd']", $namespaces) -ne $null) "The packed package is missing the .vnd file association"
|
||||
Assert-Condition (Test-Path -LiteralPath (Join-Path $unpackedRoot $executable) -PathType Leaf) "The packed executable is missing"
|
||||
Assert-Condition (Test-Path -LiteralPath (Join-Path $unpackedRoot "resources.pri") -PathType Leaf) "The packed resource index is missing"
|
||||
}
|
||||
finally {
|
||||
if (Test-Path -LiteralPath $stageRoot) {
|
||||
Remove-Item -LiteralPath $stageRoot -Recurse -Force
|
||||
}
|
||||
}
|
||||
|
||||
$temporaryZip = Join-Path $outputPath "$artifactBaseName.zip"
|
||||
if (Test-Path -LiteralPath $temporaryZip) {
|
||||
Remove-Item -LiteralPath $temporaryZip -Force
|
||||
}
|
||||
Compress-Archive -LiteralPath $msixPath -DestinationPath $temporaryZip -CompressionLevel Optimal
|
||||
Move-Item -LiteralPath $temporaryZip -Destination $uploadPath
|
||||
|
||||
$repoRoot = (Resolve-Path -LiteralPath (Join-Path $PSScriptRoot "..\..")).Path
|
||||
$wrapperProperties = Get-Content -LiteralPath (Join-Path $repoRoot "gradle\wrapper\gradle-wrapper.properties")
|
||||
$gradleDistribution = $wrapperProperties | Where-Object { $_.StartsWith("distributionUrl=") } | Select-Object -First 1
|
||||
$sourceCommit = [System.Environment]::GetEnvironmentVariable("GITHUB_SHA")
|
||||
if ([string]::IsNullOrWhiteSpace($sourceCommit)) {
|
||||
$sourceCommit = "local"
|
||||
}
|
||||
$sourceRef = [System.Environment]::GetEnvironmentVariable("GITHUB_REF")
|
||||
if ([string]::IsNullOrWhiteSpace($sourceRef)) {
|
||||
$sourceRef = "local"
|
||||
}
|
||||
|
||||
$buildInfo = [ordered] @{
|
||||
appVersion = $Version
|
||||
packageVersion = $packageVersion
|
||||
architecture = "x64"
|
||||
identityName = "SudosyLabs.Vnidrop"
|
||||
publisher = "CN=6456DC8E-2C31-44BD-AACC-2E6813C833CB"
|
||||
storeId = "9NJ5Q0FG7TGL"
|
||||
sourceCommit = $sourceCommit
|
||||
sourceRef = $sourceRef
|
||||
runnerImage = [System.Environment]::GetEnvironmentVariable("ImageOS")
|
||||
runnerImageVersion = [System.Environment]::GetEnvironmentVariable("ImageVersion")
|
||||
javaVersion = ((& java --version | Select-Object -First 1) | Out-String).Trim()
|
||||
rustVersion = ((& rustc --version) | Out-String).Trim()
|
||||
cargoVersion = ((& cargo --version) | Out-String).Trim()
|
||||
gradleDistribution = $gradleDistribution
|
||||
windowsSdkVersion = $WindowsSdkVersion
|
||||
makeAppxVersion = (Get-Item -LiteralPath $makeAppxPath).VersionInfo.FileVersion
|
||||
makePriVersion = (Get-Item -LiteralPath $makePriPath).VersionInfo.FileVersion
|
||||
unsignedForMicrosoftStore = $true
|
||||
builtAtUtc = [System.DateTimeOffset]::UtcNow.ToString("O")
|
||||
}
|
||||
[System.IO.File]::WriteAllText(
|
||||
$buildInfoPath,
|
||||
($buildInfo | ConvertTo-Json -Depth 4),
|
||||
[System.Text.UTF8Encoding]::new($false)
|
||||
)
|
||||
|
||||
$checksumTargets = @($msixPath, $uploadPath, $buildInfoPath)
|
||||
[string[]] $checksumLines = $checksumTargets | ForEach-Object {
|
||||
$hash = Get-FileHash -LiteralPath $_ -Algorithm SHA256
|
||||
$hash.Hash.ToLowerInvariant() + " " + [System.IO.Path]::GetFileName($_)
|
||||
}
|
||||
[System.IO.File]::WriteAllLines($checksumsPath, $checksumLines, [System.Text.Encoding]::ASCII)
|
||||
|
||||
Write-Host "Created unsigned Microsoft Store artifacts:"
|
||||
Write-Host " $msixPath"
|
||||
Write-Host " $uploadPath"
|
||||
Write-Host " $checksumsPath"
|
||||
Reference in New Issue
Block a user