macos: use pkgbuild to build the package on 10.10/10.11
[openafs.git] / src / packaging / MacOS / pkgbuild.sh.in
1 #!/bin/bash
2 # Portions Copyright (c) 2003, 2006 Apple Computer, Inc.  All rights reserved.
3 echo '**BUILDPKG**' "$@"
4
5 usage() {
6     exec >&2
7
8     echo 'Usage: pkgbuild.sh [-x] [--app-key <appkey>] [--inst-key <instkey>]'
9     echo '                   [--pass N] [--csdb <CellServDB>] <binary-dir>'
10     echo
11     echo '--app-key and --inst-key are for signing. -x prints all comamnds as '
12     echo 'they are run.'
13     echo
14     echo 'By default, all passes are run. Available passes:'
15     echo '    --pass 1: prepare pkgroot'
16     echo '    --pass 2: create packages/installer from pkgroot'
17     echo 'If you want to alter the pkgroot, run pass 1, then alter what you'
18     echo 'want, and then run pass 2 to create the resulting packages.'
19     echo 'The --pass argument may be given multiple times.'
20     exit 1
21 }
22
23 if [ x"$#" = x0 ]; then
24     usage
25 fi
26
27 anypass=0
28 PASS1=
29 PASS2=
30
31 APP_KEY=
32 INST_KEY=
33 DEST_DIR=
34 CSDB=
35
36 while [ x"$#" != x0 ] ; do
37     key="$1"
38     shift
39
40     case "$key" in
41     --app-key)
42         APP_KEY="$1"
43         shift
44         ;;
45     --inst-key)
46         INST_KEY="$1"
47         shift
48         ;;
49     --csdb)
50         CSDB="$1"
51         shift
52         ;;
53     --pass)
54         anypass=1
55         pass_arg="$1"
56         shift
57         case "$pass_arg" in
58         1)
59             PASS1=1
60             ;;
61         2)
62             PASS2=1
63             ;;
64         *)
65             echo "Unknown pass $pass_arg" >&2
66             exit 1
67             ;;
68         esac
69         ;;
70     -x)
71         DO_X=1
72         ;;
73     *)
74         if [ x"$DEST_DIR" = x ] ; then
75             DEST_DIR="$key"
76         else
77             echo "Error: Unknown arg $key" >&2
78             usage
79         fi
80         ;;
81     esac
82 done
83
84 if [ x"$anypass" = x0 ] ; then
85     PASS1=1
86     PASS2=1
87 fi
88
89 if [ x"$DEST_DIR" = x ] ; then
90     echo "Error: binary 'dest' dir not given"
91     usage
92 fi
93
94 set -e
95
96 if [ x"$DO_X" = x1 ] ; then
97     set -x
98 fi
99
100 BINDEST=`cd "$DEST_DIR" && pwd`
101 CURDIR=`pwd`
102 RESSRC=`dirname "$0"`
103 RESSRC=`cd "$RESSRC" && pwd`
104 majorvers=`uname -r | cut -d. -f1`
105
106 if [ x"$majorvers" = x10 ]; then
107     RELNAME="Snowleopard"
108     THISREL=6
109
110 elif [ x"$majorvers" = x11 ]; then
111     RELNAME="Lion"
112     THISREL=7
113
114 elif [ x"$majorvers" = x12 ]; then
115     RELNAME="MountainLion"
116     THISREL=8
117
118 elif [ x"$majorvers" = x13 ]; then
119     RELNAME="Mavericks"
120     THISREL=9
121
122 elif [ x"$majorvers" = x14 ]; then
123     RELNAME="Yosemite"
124     THISREL=10
125
126 elif [ x"$majorvers" = x15 ]; then
127     RELNAME="ElCapitan"
128     THISREL=11
129
130 elif [ x"$majorvers" = x ] ; then
131     echo "Error running uname" >&2
132     exit 1
133
134 else
135     echo "Unknown major version $majorvers" >&2
136     exit 1
137 fi
138
139 SEP=:
140
141 PKGROOT="$CURDIR"/pkgroot
142 PKGRES="$CURDIR"/pkgres
143 DPKGROOT="$CURDIR"/dpkgroot
144 PLUGINS="$CURDIR"/plugins
145 if test -e /usr/bin/pkgbuild; then
146     :
147 else
148     echo pkgbuild not found >&2
149     exit 1
150 fi
151 if test -e /usr/bin/productbuild; then
152     :
153 else
154     echo productbuild not found >&2
155     exit 1
156 fi
157
158 if [ x"$PASS1" = x1 ]; then
159     if [ -x /usr/bin/curl ] && [ x"$CSDB" = x ]; then
160         echo "No CellServDB provided; downloading one from central.org"
161         /usr/bin/curl -f -O https://www.central.org/dl/cellservdb/CellServDB
162         if [ -f "$CURDIR"/CellServDB ] ; then
163             CSDB="$CURDIR"/CellServDB
164         fi
165     fi
166
167     if [ x"$CSDB" = x ]; then
168         echo "A CellServDB file must be provided with --csdb" >&2
169         die=1
170     else
171         # Turn CSDB into an absolute path
172         case "$CSDB" in
173         /*)
174             ;;
175         *)
176             CSDB="$CURDIR/$CSDB"
177             ;;
178         esac
179
180         if grep -q 'GCO Public CellServDB' "$CSDB" ; then
181             touch "$CSDB"
182         else
183             echo "A proper CellServDB file must be provided" >&2
184             die=1
185         fi
186     fi
187
188     for f in ReadMe.rtf."$majorvers" \
189              License.rtf \
190              CellServDB.list \
191              OpenAFS.info \
192              OpenAFS.post_install \
193              OpenAFS.pre_upgrade \
194              csrvdbmerge.pl \
195              2.0.txt
196     do
197         if [ ! -f "$RESSRC/$f" ]; then
198             echo "file missing: $RESSRC/$f" >&2
199             die=1
200         fi
201     done
202     if [ x"$die" = x1 ]; then
203         echo "Correct above errors; then retry" >&2
204         exit 1
205     fi
206
207     for f in "$BINDEST"/bin/translate_et \
208              "$BINDEST/root.client/usr/vice/etc/afs.kext/Contents/MacOS/afs"
209     do
210         if [ ! -f "$f" ] ; then
211             echo "dest file missing: $f" >&2
212             die=1
213         fi
214     done
215     if [ x"$die" = x1 ]; then
216         echo $BINDEST " is not a valid binary dir. it should be the result of" >&2
217         echo "make dest" >&2
218         exit 1
219     fi
220
221     rm -rf "$PKGROOT" "$PLUGINS"
222     mkdir "$PKGROOT"
223     mkdir "$PLUGINS"
224
225     mkdir -p "$PKGROOT"/Library
226     mkdir -p "$PKGROOT"/Library/PreferencePanes
227     mkdir -p "$PKGROOT"/Library/Security/SecurityAgentPlugins
228
229     chown -R root${SEP}admin "$PKGROOT"
230     chmod -R 755 "$PKGROOT"
231
232     (cd "$BINDEST"/tools && pax -rw OpenAFS.prefPane "$PKGROOT"/Library/PreferencePanes/)
233     (cd "$BINDEST"/tools && pax -rw aklog.bundle \
234     "$PKGROOT"/Library/Security/SecurityAgentPlugins/)
235
236     mkdir -p "$PKGROOT"/Library/OpenAFS/Tools
237     (cd "$BINDEST" && pax -rw * "$PKGROOT"/Library/OpenAFS/Tools)
238
239     cd "$RESSRC"
240     mv "$PKGROOT"/Library/OpenAFS/Tools/installer/* "$PLUGINS"/
241
242     mkdir -p "$PKGROOT"/Library/LaunchDaemons
243     chmod -R o-w "$PKGROOT"/Library
244     chmod -R g-w "$PKGROOT"/Library
245
246     cp openafs.launchd.plist "$PKGROOT"/Library/LaunchDaemons/org.openafs.filesystems.afs.plist
247     chmod 644 "$PKGROOT"/Library/LaunchDaemons/org.openafs.filesystems.afs.plist
248
249     chown root${SEP}admin "$PKGROOT"/Library
250     chown -R root${SEP}wheel "$PKGROOT"/Library/LaunchDaemons
251     chown -R root${SEP}wheel "$PKGROOT"/Library/OpenAFS/Tools
252     chmod -R og-w "$PKGROOT"/Library/OpenAFS/Tools
253
254     mkdir -p "$PKGROOT"/private/var/db/openafs/cache
255     mkdir -p "$PKGROOT"/private/var/db/openafs/etc/config
256
257     cp openafs.launchdaemon "$PKGROOT"/private/var/db/openafs/etc/launchafs.sh
258     chmod 755 "$PKGROOT"/private/var/db/openafs/etc/launchafs.sh
259
260     cp "$CSDB" "$PKGROOT"/private/var/db/openafs/etc/CellServDB.master
261     echo grand.central.org > "$PKGROOT"/private/var/db/openafs/etc/ThisCell.sample
262     echo /afs:/var/db/openafs/cache:100000 > \
263          "$PKGROOT"/private/var/db/openafs/etc/cacheinfo.sample
264
265     cp -RP "$PKGROOT"/Library/OpenAFS/Tools/etc/afssettings \
266            "$PKGROOT"/private/var/db/openafs/etc/config
267     cp settings.plist "$PKGROOT"/private/var/db/openafs/etc/config/settings.plist.orig
268     cp afs.conf "$PKGROOT"/private/var/db/openafs/etc/config/afs.conf.sample
269     cp krb5-weak.conf "$PKGROOT"/private/var/db/openafs/etc/krb5-weak.conf
270
271     cp decode-panic "$PKGROOT"/Library/OpenAFS/Tools/tools
272     chmod a+x "$PKGROOT"/Library/OpenAFS/Tools/tools/decode-panic
273
274     rm -rf "$DPKGROOT"
275     mkdir "$DPKGROOT"
276     mkdir -p "$DPKGROOT"/Library/OpenAFS/Debug
277
278     mv "$PKGROOT"/Library/OpenAFS/Tools/root.client/usr/vice/etc/afs.kext.dSYM \
279        "$DPKGROOT"/Library/OpenAFS/Debug/
280     cp -RP "$PKGROOT"/Library/OpenAFS/Tools/root.client/usr/vice/etc/afs.kext \
281            "$DPKGROOT"/Library/OpenAFS/Debug/
282     chown -R root${SEP}wheel "$DPKGROOT"/Library/OpenAFS/Debug
283     chmod -R og-w "$DPKGROOT"/Library/OpenAFS/Debug
284
285     strip -X -S \
286         "$PKGROOT"/Library/OpenAFS/Tools/root.client/usr/vice/etc/afs.kext/Contents/MacOS/afs
287
288     mkdir -p "$PKGROOT"/private/var/db/openafs
289
290     cp -RP "$PKGROOT"/Library/OpenAFS/Tools/root.client/usr/vice/etc/afs.kext \
291            "$PKGROOT"/Library/OpenAFS/Tools/root.client/usr/vice/etc/C \
292            "$PKGROOT"/private/var/db/openafs/etc
293
294     chown -R root${SEP}wheel "$PKGROOT"/private
295     chmod -R og-w "$PKGROOT"/private
296
297     chown -R root${SEP}wheel "$PKGROOT"/private
298     chmod -R og-w "$PKGROOT"/private
299     chmod  og-rx "$PKGROOT"/private/var/db/openafs/cache
300
301     if [ x"$APP_KEY" != x ] ; then
302         # Sign each 'thing' that we have (commands, kexts, etc)
303         for obj in "$DPKGROOT"/Library/OpenAFS/Debug/afs.kext \
304                    "$PKGROOT"/Library/OpenAFS/Tools/root.client/usr/vice/etc/afs.kext \
305                    "$PKGROOT"/private/var/db/openafs/etc/afs.kext \
306                    "$PKGROOT"/Library/PreferencePanes/OpenAFS.prefPane/Contents/Resources/AFSBackgrounder.app \
307                    "$PKGROOT"/Library/PreferencePanes/OpenAFS.prefPane \
308                    "$PKGROOT"/Library/Security/SecurityAgentPlugins/aklog.bundle \
309                    "$PKGROOT"/Library/OpenAFS/Tools/tools/growlagent-openafs.app \
310                    "$PKGROOT"/Library/OpenAFS/Tools/tools/aklog.bundle \
311                    "$PLUGINS"/afscell.bundle
312         do
313             codesign --verbose --force --timestamp --sign "$APP_KEY" "$obj"
314         done
315
316         # Check if our signatures for our kexts are valid. 'kextutil' will exit
317         # with an error and print out a message if something is wrong with the
318         # signature. Note that a code signing cert must have the
319         # 1.2.840.113635.100.6.1.18 extension present to be used for kexts
320         # (most code signing certs cannot be used for kexts).
321         for kext in "$DPKGROOT"/Library/OpenAFS/Debug/afs.kext \
322                     "$PKGROOT"/Library/OpenAFS/Tools/root.client/usr/vice/etc/afs.kext \
323                     "$PKGROOT"/private/var/db/openafs/etc/afs.kext
324         do
325             kextutil -no-load -print-diagnostics "$kext"
326         done
327     fi
328
329     if [ $majorvers -ge 15 ]; then
330         # El Capitan and further prevent us from touching /usr/bin directly
331         PREFIX=/opt
332         USRBIN=/opt/openafs/bin
333         USRBIN2TOOLS=../../../Library/OpenAFS/Tools
334
335         USRSBIN=/opt/openafs/sbin
336         USRSBIN2TOOLS=../../../Library/OpenAFS/Tools
337
338         MANDIR=/opt/openafs/share/man
339         MANDIR2TOOLS=../../../../Library/OpenAFS/Tools
340
341         # Add our bin, sbin, and man directories to the default search path
342         mkdir -p "$PKGROOT"/etc/paths.d "$PKGROOT"/etc/manpaths.d
343         echo "$USRBIN" > "$PKGROOT"/etc/paths.d/40-openafs
344         echo "$USRSBIN" >> "$PKGROOT"/etc/paths.d/40-openafs
345         echo "$MANDIR" > "$PKGROOT"/etc/manpaths.d/40-openafs
346     else
347         PREFIX=/usr
348         USRBIN=/usr/bin
349         USRBIN2TOOLS=../../Library/OpenAFS/Tools
350
351         USRSBIN=/usr/sbin
352         USRSBIN2TOOLS="$USRBIN2TOOLS"
353
354         MANDIR=/usr/share/man
355         MANDIR2TOOLS=../../../Library/OpenAFS/Tools
356     fi
357
358     mkdir -p "$PKGROOT$USRBIN" \
359              "$PKGROOT$USRSBIN" \
360              "$PKGROOT$MANDIR"/man1 \
361              "$PKGROOT$MANDIR"/man5 \
362              "$PKGROOT$MANDIR"/man8
363
364     BINLIST="fs klog klog.krb pagsh pagsh.krb pts sys tokens tokens.krb unlog unlog.krb aklog"
365     ETCLIST="vos"
366
367     if [ x"$DO_X" = x1 ] ; then
368         # Don't print out every single 'ln -s'... that's kinda useless
369         : 'Symlinking commands and manpages into place...'
370         set +x
371     fi
372
373     for f in $BINLIST; do
374         ln -s "$USRBIN2TOOLS"/bin/"$f" "$PKGROOT$USRBIN/$f"
375     done
376     for f in $ETCLIST; do
377         ln -s "$USRSBIN2TOOLS"/etc/"$f" "$PKGROOT$USRSBIN/$f"
378     done
379
380     for section in man1 man5 man8 ; do
381         for f in $(ls $PKGROOT/Library/OpenAFS/Tools/man/$section); do
382
383             if [ -L "$PKGROOT/Library/OpenAFS/Tools/man/$section/$f" ] ; then
384                 # If this manpage is a symlink, just change where it's pointing,
385                 # and rename the link; don't actually 'gzip' it.
386                 link=$(readlink "$PKGROOT/Library/OpenAFS/Tools/man/$section/$f")
387                 rm -f "$PKGROOT/Library/OpenAFS/Tools/man/$section/$f"
388                 ln -s "$link".gz "$PKGROOT/Library/OpenAFS/Tools/man/$section/$f".gz
389
390             else
391                 gzip -9 "$PKGROOT/Library/OpenAFS/Tools/man/$section/$f"
392             fi
393             ln -s ../"$MANDIR2TOOLS"/man/"$section/$f".gz \
394                   "$PKGROOT$MANDIR/$section/$f".gz
395         done
396     done
397
398     if [ x"$DO_X" = x1 ] ; then
399         set -x
400     fi
401
402     ln -s "$USRBIN2TOOLS"/bin/kpasswd "$PKGROOT$USRBIN"/kpasswd.afs
403
404     ln -s "$USRSBIN2TOOLS"/root.client/usr/vice/etc/afsd "$PKGROOT$USRSBIN"/afsd
405
406     chown -R root${SEP}wheel "$PKGROOT$PREFIX"
407     chmod -R og-w "$PKGROOT$PREFIX"
408 fi
409
410 if [ x"$PASS2" = x1 ]; then
411     rm -rf "$PKGRES"
412     mkdir "$PKGRES"
413     cd "$RESSRC"
414
415     rm -rf "$CURDIR"/OpenAFS-debug-extension.pkg
416     /usr/bin/pkgbuild --root "$DPKGROOT" --id org.openafs.OpenAFS-debug.pkg \
417                       --version '@VERSION@' \
418              "$CURDIR"/OpenAFS-debug-extension.pkg
419
420     cd "$RESSRC"
421     cp OpenAFS.post_install "$PKGRES"/postinstall
422     cp OpenAFS.pre_upgrade "$PKGRES"/preupgrade
423     cp OpenAFS.post_install "$PKGRES"/postupgrade
424     cp csrvdbmerge.pl "$PKGRES"
425
426     chmod a+x "$PKGRES"/csrvdbmerge.pl \
427               "$PKGRES"/postinstall \
428               "$PKGRES"/postupgrade \
429               "$PKGRES"/preupgrade
430
431     cp CellServDB.list "$PKGRES"
432     chown -R root${SEP}wheel "$PKGRES"
433
434     rm -rf "$CURDIR"/OpenAFS-dist.pkg
435     /usr/bin/pkgbuild --root "$PKGROOT" --id org.openafs.OpenAFS.pkg \
436                       --version '@VERSION@' \
437                       --scripts "$PKGRES" "$CURDIR"/OpenAFS-dist.pkg
438
439     rm -rf "$PKGRES"
440     mkdir "$PKGRES"
441     cp background.jpg "$PKGRES"/background.jpg
442     cp License.rtf "$PKGRES"
443     cp ReadMe.rtf."$majorvers" "$PKGRES"/ReadMe.rtf
444     chown -R root${SEP}wheel "$PKGRES"
445
446     if [ $majorvers -ge 15 ] ; then
447         # For El Capitan and further, we have some extra information to tell
448         # the user at the end of the installation process.
449         cp conclusion.txt "$PKGRES"/conclusion.txt
450         PRES_EXTRA="<conclusion file=\"conclusion.txt\"/>"
451     fi
452
453     # generate Distribution.xml from Distribution.xml.in -- nonstandard substs
454     sed -e "s/%%OSX_MAJOR_CUR%%/$THISREL/g" \
455         -e "s/%%OSX_MAJOR_NEXT%%/$(( $THISREL + 1 ))/g" \
456         -e "s,%%PRES_EXTRA%%,$PRES_EXTRA,g" \
457         -e "s/%%OPENAFS_VERSION%%/@VERSION@/g" \
458         < Distribution.xml.in > Distribution.xml
459
460     rm -rf "$CURDIR/prod"
461     mkdir "$CURDIR/prod"
462     mv "$CURDIR"/OpenAFS-dist.pkg "$CURDIR"/OpenAFS-debug-extension.pkg "$CURDIR"/prod
463     /usr/bin/productbuild --distribution Distribution.xml --resources "$PKGRES" \
464                           --plugins "$PLUGINS" --package-path "$CURDIR"/prod "$CURDIR"/OpenAFS.pkg
465
466     if [ x"$INST_KEY" != x ] ; then
467         mv "$CURDIR"/OpenAFS.pkg "$CURDIR"/OpenAFS-unsigned.pkg
468         productsign --timestamp --sign "$INST_KEY" "$CURDIR"/OpenAFS-unsigned.pkg \
469                     "$CURDIR"/OpenAFS.pkg
470         rm -f "$CURDIR"/OpenAFS-unsigned.pkg
471     fi
472
473     rm -rf "$CURDIR/dmg"
474     rm -f "$CURDIR/TMP.dmg"
475     rm -rf "$CURDIR/OpenAFS-@VERSION@-$RELNAME.dmg"
476
477     mkdir "$CURDIR"/dmg
478     mv "$CURDIR"/OpenAFS.pkg "$CURDIR"/dmg
479     cp "$RESSRC"/Uninstall.14.15 "$CURDIR"/dmg/Uninstall.command
480     cp "$RESSRC"/DS_Store "$CURDIR"/dmg/.DS_Store
481     mkdir "$CURDIR"/dmg/.background
482     cp "$RESSRC"/afslogo.jpg "$CURDIR"/dmg/.background
483
484     if [ x"$APP_KEY" != x ] ; then
485         codesign --verbose --force --timestamp --sign "$APP_KEY" "$CURDIR"/dmg/Uninstall.command
486     fi
487
488     hdiutil create -srcfolder "$CURDIR"/dmg -volname OpenAFS \
489             -o "$CURDIR"/TMP.dmg
490     hdiutil convert -format UDZO "$CURDIR"/TMP.dmg \
491             -o "$CURDIR/OpenAFS-@VERSION@-$RELNAME".dmg
492
493     echo
494     echo "Created $CURDIR/OpenAFS-@VERSION@-$RELNAME".dmg
495 fi