gitbutler/scripts/release.sh

#!/bin/bash

set -o errexit
set -o nounset
set -o pipefail

PWD="$(dirname $(readlink -f -- $0))"

CHANNEL=""
DO_SIGN="false"
DO_BUNDLE_UPDATE="false"
VERSION=""

function help() {
	local to="$1"

	echo "Usage: $0 <flags>" 1>&$to
	echo 1>&$to
	echo "flags:" 1>&$to
	echo "  --version                     release version." 1>&$to
	echo "  --dist                        path to store artifacts in." 1>&$to
	echo "  --sign                        if set, will sign the app." 1>&$to
	echo "  --channel                     the channel to use for the release (release | nightly)." 1>&$to
	echo "  --help                        display this message." 1>&$to
}

function error() {
	echo "error: $@" 1>&2
	echo 1>&2
	help 2
	exit 1
}

function info() {
	echo "$@"
}

function os() {
	local os="$(uname -s)"
	case "$os" in
	Darwin)
		echo "macos"
		;;
	Linux)
		echo "linux"
		;;
	Windows|MSYS*|MINGW*)
		echo "windows"
		;;
	*)
		error "$os: unsupported"
		;;
	esac
}

function arch() {
	local arch="$(uname -m)"
	case "$arch" in
	arm64 | aarch64)
		echo "aarch64"
		;;
	x86_64)
		echo "x86_64"
		;;
	*)
		error "$arch: unsupported architecture"
		;;
	esac
}

ARCH="$(arch)"
OS="$(os)"
DIST="release"

function tauri() {
	(cd "$PWD/.." && pnpm tauri "$@")
}

while [[ $# -gt 0 ]]; do
	case "$1" in
	--help)
		help 1
		exit 1
		;;
	--version)
		VERSION="$2"
		shift
		shift
		;;
	--dist)
		DIST="$2"
		shift
		shift
		;;
	--sign)
		DO_SIGN="true"
		shift
		;;
	--channel)
		CHANNEL="$2"
		shift
		shift
		;;
	*)
		error "unknown flag $1"
		;;
	esac
done

[ -z "${VERSION-}" ] && error "--version is not set"

[ -z "${TAURI_PRIVATE_KEY-}" ] && error '$TAURI_PRIVATE_KEY is not set'
[ -z "${TAURI_KEY_PASSWORD-}" ] && error '$TAURI_KEY_PASSWORD is not set'

if [ "$CHANNEL" != "release" ] && [ "$CHANNEL" != "nightly" ]; then
	error "--channel must be either 'release' or 'nightly'"
fi

export TAURI_PRIVATE_KEY="$TAURI_PRIVATE_KEY"
export TAURI_KEY_PASSWORD="$TAURI_KEY_PASSWORD"

if [ "$DO_SIGN" = "true" ]; then
	if [ "$OS" = "macos" ]; then
		[ -z "${APPLE_CERTIFICATE-}" ] && error '$APPLE_CERTIFICATE is not set'
		[ -z "${APPLE_CERTIFICATE_PASSWORD-}" ] && error '$APPLE_CERTIFICATE_PASSWORD is not set'
		[ -z "${APPLE_SIGNING_IDENTITY-}" ] && error '$APPLE_SIGNING_IDENTITY is not set'
		[ -z "${APPLE_ID-}" ] && error '$APPLE_ID is not set'
		[ -z "${APPLE_TEAM_ID-}" ] && error '$APPLE_TEAM_ID is not set'
		[ -z "${APPLE_PASSWORD-}" ] && error '$APPLE_PASSWORD is not set'
		export APPLE_CERTIFICATE="$APPLE_CERTIFICATE"
		export APPLE_CERTIFICATE_PASSWORD="$APPLE_CERTIFICATE_PASSWORD"
		export APPLE_SIGNING_IDENTITY="$APPLE_SIGNING_IDENTITY"
		export APPLE_ID="$APPLE_ID"
		export APPLE_TEAM_ID="$APPLE_TEAM_ID"
		export APPLE_PASSWORD="$APPLE_PASSWORD"
	elif [ "$OS" == "linux" ]; then
		[ -z "${APPIMAGE_KEY_ID-}" ] && error '$APPIMAGE_KEY_ID is not set'
		[ -z "${APPIMAGE_KEY_PASSPHRASE-}" ] && error '$APPIMAGE_KEY_PASSPHRASE is not set'
		export SIGN=1
		export SIGN_KEY="$APPIMAGE_KEY_ID"
		export APPIMAGETOOL_SIGN_PASSPHRASE="$APPIMAGE_KEY_PASSPHRASE"
	elif [ "$OS" == "windows" ]; then
		info "$OS: signing is not (yet) supported; skipping"
		DO_SIGN="false"
	else
		error "signing is not supported on $(uname -s)"
	fi
fi

info "building:"
info "  channel: $CHANNEL"
info "  version: $VERSION"
info "  os: $OS"
info "  arch: $ARCH"
info "  dist: $DIST"
info "  sign: $DO_SIGN"

TMP_DIR="$(mktemp -d)"
trap "rm -rf '$TMP_DIR'" exit

CONFIG_PATH=$(readlink -f "$PWD/../gitbutler-app/tauri.conf.$CHANNEL.json")

# update the version in the tauri release config
jq '.package.version="'"$VERSION"'"' "$CONFIG_PATH" >"$TMP_DIR/tauri.conf.json"

FEATURES=""

# Remove when we we have signing working on windows
if [ "$CHANNEL" == "release" ] && [ "$OS" = "windows" ]; then
	exit 0
fi

if [ "$CHANNEL" == "nightly" ]; then
	FEATURES="$FEATURES devtools"
fi

# build the app with release config
SENTRY_RELEASE="$VERSION" tauri build \
	--verbose \
	--features "$FEATURES" \
	--config "$TMP_DIR/tauri.conf.json"

BUNDLE_DIR=$(readlink -f "$PWD/../target/release/bundle")
RELEASE_DIR="$DIST/$OS/$ARCH"
mkdir -p "$RELEASE_DIR"

if [ "$OS" = "macos" ]; then
	MACOS_DMG="$(find "$BUNDLE_DIR/dmg" -depth 1 -type f -name "*.dmg")"
	MACOS_UPDATER="$(find "$BUNDLE_DIR/macos" -depth 1 -type f -name "*.tar.gz")"
	MACOS_UPDATER_SIG="$(find "$BUNDLE_DIR/macos" -depth 1 -type f -name "*.tar.gz.sig")"

	cp "$MACOS_DMG" "$RELEASE_DIR"
	cp "$MACOS_UPDATER" "$RELEASE_DIR"
	cp "$MACOS_UPDATER_SIG" "$RELEASE_DIR"

	info "built:"
	info "  - $RELEASE_DIR/$(basename "$MACOS_DMG")"
	info "  - $RELEASE_DIR/$(basename "$MACOS_UPDATER")"
	info "  - $RELEASE_DIR/$(basename "$MACOS_UPDATER_SIG")"
elif [ "$OS" = "linux" ]; then
	APPIMAGE="$(find $BUNDLE_DIR/appimage -name \*.AppImage)"
	APPIMAGE_UPDATER="$(find $BUNDLE_DIR/appimage -name \*.AppImage.tar.gz)"
	APPIMAGE_UPDATER_SIG="$(find $BUNDLE_DIR/appimage -name \*.AppImage.tar.gz.sig)"
	DEB="$(find $BUNDLE_DIR/deb -name \*.deb)"

	cp "$APPIMAGE" "$RELEASE_DIR"
	cp "$APPIMAGE_UPDATER" "$RELEASE_DIR"
	cp "$APPIMAGE_UPDATER_SIG" "$RELEASE_DIR"
	cp "$DEB" "$RELEASE_DIR"

	info "built:"
	info "  - $RELEASE_DIR/$(basename "$APPIMAGE")"
	info "  - $RELEASE_DIR/$(basename "$APPIMAGE_UPDATER")"
	info "  - $RELEASE_DIR/$(basename "$APPIMAGE_UPDATER_SIG")"
	info "  - $RELEASE_DIR/$(basename "$DEB")"
elif [ "$OS" = "windows" ]; then
	WINDOWS_INSTALLER="$(find $BUNDLE_DIR/msi -name \*.msi)"
	WINDOWS_UPDATER="$(find $BUNDLE_DIR/msi -name \*.msi.zip)"
	WINDOWS_UPDATER_SIG="$(find $BUNDLE_DIR/msi -name \*.msi.zip.sig)"

	cp "$WINDOWS_INSTALLER" "$RELEASE_DIR"
	cp "$WINDOWS_UPDATER" "$RELEASE_DIR"
	cp "$WINDOWS_UPDATER_SIG" "$RELEASE_DIR"

	info "built:"
	info "  - $RELEASE_DIR/$(basename "$WINDOWS_INSTALLER")"
	info "  - $RELEASE_DIR/$(basename "$WINDOWS_UPDATER")"
	info "  - $RELEASE_DIR/$(basename "$WINDOWS_UPDATER_SIG")"
else
	error "unsupported os: $OS"
fi

info "done! bye!"