Skip to content

Fixing path references. #38

Fixing path references.

Fixing path references. #38

# This pipeline will be triggered manually.
parameters:
- name: version
type: string
default: 0.8.6
- name: prerelease
displayName: Prerelease?
type: boolean
default: true
- name: buildConfigs
type: object
default:
- pool:
name: Azure-Pipelines-1ESPT-ExDShared
image: windows-latest
os: windows
runtime: win10-x64
archiveExt: zip
- pool:
name: Azure Pipelines
image: macOS-latest
os: macOS
runtime: osx-x64
archiveExt: tar.gz
- pool:
name: Azure Pipelines
image: macOS-latest
os: macOS
runtime: osx-arm64
archiveExt: tar.gz
variables:
- name: tags
value: "nonproduction"
readonly: true
- name: pythonVersion
value: 3.10
readonly: true
trigger:
branches:
include:
- fixing-indentation
pr: none
resources:
repositories:
- repository: CustomPipelineTemplates
type: git
name: 1ESPipelineTemplates/OfficePipelineTemplates
ref: refs/tags/release
extends:
template: v1/Office.Unofficial.PipelineTemplate.yml@CustomPipelineTemplates
parameters:
pool:
name: Azure-Pipelines-1ESPT-ExDShared
image: ubuntu-latest
os: linux
sdl:
sourceAnalysisPool:
name: Azure-Pipelines-1ESPT-ExDShared
image: windows-latest
os: windows
stages:
- stage: validate
displayName: Validate
jobs:
- job: validate
displayName: Validate
steps:
- checkout: self
- task: UsePythonVersion@0
displayName: Use Python $(pythonVersion)
inputs:
versionSpec: $(pythonVersion)
- task: Bash@3
inputs:
targetType: inline
script: |
echo ${{ parameters.version }} | python ./bin/version.py
- stage: build
displayName: Build
jobs:
- ${{ each config in parameters.buildConfigs }}:
- job: build_${{ replace(config.runtime,'-', '_') }}
displayName: Building for ${{ config.runtime }} on ${{ config.pool.name }}
pool:
name: ${{ config.pool.name }}
image: ${{ config.pool.image }}
os: ${{ config.pool.os }}
templateContext:
outputs:
- output: pipelineArtifact
targetPath: dist/${{ config.runtime }}
artifactName: azureauth-${{ parameters.version }}-${{ config.runtime }}
steps:
- checkout: self
- task: UseDotNet@2
displayName: Use .NET Core sdk 6.x
inputs:
version: 6.x
- task: NuGetToolInstaller@0
displayName: Use NuGet 6.x
inputs:
versionSpec: 6.x
- task: DotNetCoreCLI@2
displayName: Install dependencies
inputs:
command: restore
feedsToUse: select
vstsFeed: $(vstsFeedId)
includeNuGetOrg: false
arguments: --runtime ${{ config.runtime }}
- task: DotNetCoreCLI@2
displayName: Test
inputs:
command: test
arguments: --configuration release --no-restore
- task: DotNetCoreCLI@2
displayName: Build artifacts
env:
ADO_TOKEN: $(System.AccessToken)
inputs:
command: publish
projects: src/AzureAuth/AzureAuth.csproj
arguments: -p:Version=${{ parameters.version }} --configuration release --self-contained true --runtime ${{ config.runtime }} --output dist/${{ config.runtime }}
publishWebProjects: false
zipAfterPublish: false
modifyOutputPath: true
- stage: sign
displayName: Sign
dependsOn: build
jobs:
- ${{ each config in parameters.buildConfigs }}:
- job: sign_${{ replace(config.runtime,'-', '_') }}
displayName: Signing ${{ config.runtime }}
pool:
name: Azure-Pipelines-1ESPT-ExDShared
# This step has to run on Windows because ESRPClient.exe is currently only available for that platform.
image: windows-latest
os: windows
templateContext:
inputs:
- input: pipelineArtifact
artifactName: azureauth-${{ parameters.version }}-${{ config.runtime }}
targetPath: ./azureauth-${{ parameters.version }}-${{ config.runtime }}
outputs:
- output: pipelineArtifact
artifactName: azureauth-${{ parameters.version }}-${{ config.runtime }}-signed
targetPath: ./azureauth-${{ parameters.version }}-${{ config.runtime }}
steps:
- checkout: self
- task: UsePythonVersion@0
displayName: Use Python $(pythonVersion)
inputs:
versionSpec: $(pythonVersion)
- task: NuGetToolInstaller@1
inputs:
versionSpec: 5.x
- task: PowerShell@2
displayName: Download ESRPClient.exe
env:
ESRP_VERSION: $(esrpVersion)
NUGET_CREDENTIALS: $(System.AccessToken)
inputs:
targetType: inline
script: |
nuget sources add -Name esrp -Username esrp-downloader -Password $env:NUGET_CREDENTIALS -Source https://pkgs.dev.azure.com/office/_packaging/Office/nuget/v3/index.json
nuget install Microsoft.EsrpClient -Version "$env:ESRP_VERSION" -OutputDirectory .\esrp -Source https://pkgs.dev.azure.com/office/_packaging/Office/nuget/v3/index.json
failOnStderr: true
# - task: AzureCLI@2
# displayName: Login to Azure with Service Principal
# inputs:
# azureSubscription: $(esrpKVServiceConnection)
# scriptType: ps
# scriptLocation: inlineScript
# addSpnToEnvironment: true
# inlineScript: |
# az keyvault secret download --subscription "$env:AZURE_SUBSCRIPTION" --vault-name "$env:AZURE_VAULT" --name "$env:ESRP_AAD_CERT_NAME" -f cert.pfx
# certutil -f -importpfx cert.pfx
# Remove-Item cert.pfx
# az keyvault secret download --subscription "$env:AZURE_SUBSCRIPTION" --vault-name "$env:AZURE_VAULT" --name "$env:ESRP_REQ_CERT_NAME" -f cert.pfx
# certutil -f -importpfx cert.pfx
# Remove-Item cert.pfx
# - task: PowerShell@2
# displayName: Sign artifacts
# env:
# SIGNING_AAD_ID: ${{ secrets.SIGNING_AAD_ID }}
# SIGNING_TENANT_ID: ${{ secrets.SIGNING_TENANT_ID }}
# SIGNING_KEY_CODE_AUTHENTICODE: ${{ secrets.SIGNING_KEY_CODE_AUTHENTICODE }}
# SIGNING_KEY_CODE_MAC: ${{ secrets.SIGNING_KEY_CODE_MAC }}
# SIGNING_KEY_CODE_LINUX: ${{ secrets.SIGNING_KEY_CODE_LINUX }}
# SIGNING_CUSTOMER_CORRELATION_ID: ${{ secrets.SIGNING_CUSTOMER_CORRELATION_ID }}
# ESRP_CLIENT_EXE: ".\\esrp\\Microsoft.EsrpClient.${{ secrets.ESRP_VERSION }}\\tools\\EsrpClient.exe"
# inputs:
# targetType: inline
# script: |
# python .\bin\sign.py $env:ESRP_CLIENT_EXE --runtime=${{ config.runtime }} --source=azureauth-${{ parameters.version }}-${{ config.runtime }}
# Currently we package artifacts into the most commonly accessible archive format for their respective platforms.
- stage: package
displayName: Package
dependsOn: sign
jobs:
- job: package
displayName: Package
pool:
name: Azure-Pipelines-1ESPT-ExDShared
image: ubuntu-latest
os: linux
templateContext:
inputs:
- ${{ each config in parameters.buildConfigs }}:
- input: pipelineArtifact
artifactName: azureauth-${{ parameters.version }}-${{ config.runtime }}-signed
targetPath: ./azureauth-${{ parameters.version }}-${{ config.runtime }}
outputs:
- ${{ each config in parameters.buildConfigs }}:
- output: pipelineArtifact
artifactName: azureauth-${{ parameters.version }}-${{ config.runtime }}.${{ config.archiveExt }}-packaged
targetPath: ./azureauth-${{ parameters.version }}-${{ config.runtime }}.${{ config.archiveExt }}
steps:
- task: ArchiveFiles@2
displayName: Create win10-x64 archive
inputs:
rootFolderOrFile: azureauth-${{ parameters.version }}-win10-x64
includeRootFolder: false
archiveType: zip
archiveFile: azureauth-${{ parameters.version }}-win10-x64.zip
- task: Bash@3
displayName: Prepare osx-x64 executables
inputs:
targetType: inline
script: |
cd azureauth-${{ parameters.version }}-osx-x64
chmod +x azureauth createdump *.dylib
- task: ArchiveFiles@2
displayName: Create osx-x64 archive
inputs:
rootFolderOrFile: azureauth-${{ parameters.version }}-osx-x64
includeRootFolder: false
archiveType: tar
archiveFile: azureauth-${{ parameters.version }}-osx-x64.tar
- task: Bash@3
displayName: Prepare osx-arm64 executables
inputs:
targetType: inline
script: |
cd azureauth-${{ parameters.version }}-osx-arm64
chmod +x azureauth createdump *.dylib
- task: ArchiveFiles@2
displayName: Create osx-arm64 archive
inputs:
rootFolderOrFile: azureauth-${{ parameters.version }}-osx-arm64
includeRootFolder: false
archiveType: tar
archiveFile: azureauth-${{ parameters.version }}-osx-arm64.tar
# - stage: release
# displayName: Release
# dependsOn: package
# jobs:
# - job: release
# displayName: Release
# pool:
# name: Azure-Pipelines-1ESPT-ExDShared
# image: ubuntu-latest
# os: linux
# steps:
# - name: Download win10-x64 artifact
# uses: actions/download-artifact@v3
# with:
# name: azureauth-${{ github.event.inputs.version }}-win10-x64.zip
# - name: Download osx-x64 artifact
# uses: actions/download-artifact@v3
# with:
# name: azureauth-${{ github.event.inputs.version }}-osx-x64.tar.gz
# - name: Download osx-arm64 artifact
# uses: actions/download-artifact@v3
# with:
# name: azureauth-${{ github.event.inputs.version }}-osx-arm64.tar.gz
# - name: Create Release
# uses: softprops/action-gh-release@v1
# with:
# name: ${{ github.event.inputs.version }}
# body: "Release ${{ github.event.inputs.version }}. See [`CHANGELOG.md`](https://github.com/AzureAD/microsoft-authentication-cli/blob/${{ github.event.inputs.version }}/CHANGELOG.md) for updates."
# tag_name: ${{ github.event.inputs.version }}
# prerelease: ${{ github.event.inputs.prerelease }}
# files: |
# azureauth-${{ github.event.inputs.version }}-win10-x64.zip
# azureauth-${{ github.event.inputs.version }}-osx-x64.tar.gz
# azureauth-${{ github.event.inputs.version }}-osx-arm64.tar.gz