Prefer grabbing the altool password from the keychain

Closes #522
This commit is contained in:
Alex Pyrgiotis 2023-08-17 15:29:57 +03:00
parent 098e532bd2
commit 404c49874b
No known key found for this signature in database
GPG key ID: B6C15EBA0357C9AA

View file

@ -205,15 +205,15 @@ To make a macOS release, go to macOS build machine:
- Run `poetry run ./install/macos/build-app.py --only-codesign`; this will make `dist/Dangerzone.dmg` - Run `poetry run ./install/macos/build-app.py --only-codesign`; this will make `dist/Dangerzone.dmg`
* You need to run this command as the account that has access to the code signing certificate * You need to run this command as the account that has access to the code signing certificate
* You must run this command from the MacOS UI, from a terminal application. * You must run this command from the MacOS UI, from a terminal application.
- Notarize it: `xcrun altool --notarize-app --primary-bundle-id "press.freedom.dangerzone" -u "<email>" --file dist/Dangerzone.dmg` - Notarize it: `xcrun altool --notarize-app --primary-bundle-id "press.freedom.dangerzone" -u "<email>" -p "@keychain:altool" --file dist/Dangerzone.dmg`
* You need to change the `<email>` in the above command with the email * You need to change the `<email>` in the above command with the email
associated with the Apple Developer ID. associated with the Apple Developer ID.
* This command will ask you for a password. Prefer creating an application * This command assumes that you have created, and stored in the Keychain, an
password associated with your Apple Developer ID, which will be used application password associated with your Apple Developer ID, which will be
specifically for `altool`. used specifically for `altool`.
- Wait for it to get approved, check status with: `xcrun altool --notarization-history 0 -u "<email>"` - Wait for it to get approved, check status with: `xcrun altool --notarization-history 0 -u "<email>" -p "@keychain:altool"`
* You will also receive an update in your email. * You will also receive an update in your email.
- (If it gets rejected, you can see why with: `xcrun altool --notarization-info $REQUEST_UUID -u "<email>"`) - (If it gets rejected, you can see why with: `xcrun altool --notarization-info $REQUEST_UUID -u "<email>" -p "@keychain:altool"`)
- After it's approved, staple the ticket: `xcrun stapler staple dist/Dangerzone.dmg` - After it's approved, staple the ticket: `xcrun stapler staple dist/Dangerzone.dmg`
This process ends up with the final file: This process ends up with the final file: