diff options
| author | Daniel Moody <daniel.moody@mongodb.com> | 2022-04-18 21:14:29 +0000 |
|---|---|---|
| committer | Evergreen Agent <no-reply@evergreen.mongodb.com> | 2022-04-21 21:43:33 +0000 |
| commit | 85c39ef1591fdacdf221d168a0ae5a8b08d8b5ce (patch) | |
| tree | df292c8e19616863df55c6ffcced96044f5ba761 | |
| parent | 6836630168e0ff3a1298ac44bcf5c33f8012cf06 (diff) | |
| download | mongo-85c39ef1591fdacdf221d168a0ae5a8b08d8b5ce.tar.gz | |
SERVER-64332 added macos binary signing to push task
(cherry picked from commit 8aee4d35ca04dce4d045dc366fc47bfd0d4c4a5e)
| -rw-r--r-- | etc/evergreen.yml | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/etc/evergreen.yml b/etc/evergreen.yml index aa28d4afb8b..9553b8314ed 100644 --- a/etc/evergreen.yml +++ b/etc/evergreen.yml @@ -757,6 +757,7 @@ functions: export NOTARY_TOKEN=${signing_auth_token_44} export BARQUE_USERNAME=${barque_user} export BARQUE_API_KEY=${barque_api_key} + export MACOS_NOTARY_TOKEN=${macos_notarization_secret} EOF echo "${signing_auth_token_44}" > signing_auth_token @@ -8003,6 +8004,19 @@ tasks: set -o errexit set -o verbose + if [[ "${push_name}" == "macos"* ]]; then + curl https://macos-notary-1628249594.s3.amazonaws.com/releases/client/v3.3.0/linux_amd64.zip -o linux_amd64.zip + unzip linux_amd64.zip + chmod +x ./linux_amd64/macnotary + bins=("mongo-binaries.tgz" "mongo-shell.tgz" "mongo-cryptd.tgz" "mh.tgz") + for archive in ${bins[@]}; do + TEMP_ARCHIVE="$(mktemp -p $PWD)" + mv "$archive" "$TEMP_ARCHIVE" + ./linux_amd64/macnotary -f "$TEMP_ARCHIVE" -m notarizeAndSign -u https://dev.macos-notary.build.10gen.cc/api -k server -s ${MACOS_NOTARY_TOKEN} -b server.mongodb.com -o "$archive" + rm -f "$TEMP_ARCHIVE" + done + fi + mv mongo-binaries.tgz mongodb-${push_name}-${push_arch}-${suffix}.${ext|tgz} mv mongo-shell.tgz mongodb-shell-${push_name}-${push_arch}-${suffix}.${ext|tgz} mv mongo-cryptd.tgz mongodb-cryptd-${push_name}-${push_arch}-${suffix}.${ext|tgz} || true |