79 lines
3.6 KiB
Bash
Executable File
79 lines
3.6 KiB
Bash
Executable File
#!/bin/bash
|
|
# 发布已公证的版本：Apple 芯片版与 Intel 版的 DMG、在线升级包上传到官网 /download/，最后更新版本清单 appcast.json（已安装的应用据此提示升级），
|
|
# cask 提交到 gentpan/homebrew-tap，并校验线上文件。
|
|
#
|
|
# ./Scripts/release.sh # 先打包、公证
|
|
# ./Scripts/publish_release.sh # 再发布
|
|
set -euo pipefail
|
|
cd "$(dirname "$0")/.."
|
|
|
|
HOST="${SITE_HOST:-debian@51.38.126.148}"
|
|
KEY="${SITE_KEY:-$HOME/.ssh/gentpan.pem}"
|
|
ROOT="${SITE_ROOT:-/var/www/getopenstats.com}"
|
|
TAP="${TAP:-gentpan/homebrew-tap}"
|
|
VERSION="$(sed -nE 's/^ *MARKETING_VERSION: *"?([0-9.]+)"?.*/\1/p' project.yml | head -1)"
|
|
CHIPS=(AppleSilicon Intel)
|
|
APPCAST="dist/appcast.json"
|
|
CASK="dist/openstats.rb"
|
|
SSH=(ssh -i "$KEY" -o BatchMode=yes "$HOST")
|
|
|
|
for chip in "${CHIPS[@]}"; do
|
|
for ext in dmg zip; do
|
|
file="dist/OpenStats-${VERSION}-${chip}.${ext}"
|
|
[ -f "$file" ] || { echo "缺少 $file，先运行 ./Scripts/release.sh" >&2; exit 1; }
|
|
done
|
|
done
|
|
for file in "$APPCAST" "$CASK"; do
|
|
[ -f "$file" ] || { echo "缺少 $file，先运行 ./Scripts/release.sh" >&2; exit 1; }
|
|
done
|
|
python3 - "$APPCAST" "$VERSION" "dist/OpenStats-${VERSION}-AppleSilicon.zip" "dist/OpenStats-${VERSION}-Intel.zip" <<'PY' \
|
|
|| { echo "$APPCAST 与升级包不一致" >&2; exit 1; }
|
|
import hashlib, json, sys
|
|
feed = json.load(open(sys.argv[1]))
|
|
digest = lambda path: hashlib.sha256(open(path, "rb").read()).hexdigest()
|
|
assert feed["version"] == sys.argv[2] and feed["notes"], feed
|
|
assert feed["sha256"] == digest(sys.argv[3]) and feed["url"].endswith("-AppleSilicon.zip"), feed
|
|
assert feed["intel"]["sha256"] == digest(sys.argv[4]) and feed["intel"]["url"].endswith("-Intel.zip"), feed
|
|
PY
|
|
grep -q "version \"${VERSION}\"" "$CASK" || { echo "$CASK 的版本不是 ${VERSION}" >&2; exit 1; }
|
|
for chip in "${CHIPS[@]}"; do
|
|
dmg="dist/OpenStats-${VERSION}-${chip}.dmg"
|
|
xcrun stapler validate "$dmg" >/dev/null || { echo "$dmg 没有装订公证票据" >&2; exit 1; }
|
|
grep -q "$(shasum -a 256 "$dmg" | cut -d' ' -f1)" "$CASK" || { echo "$CASK 里的 sha256 与 $dmg 不一致" >&2; exit 1; }
|
|
done
|
|
|
|
# 上传：先传临时名再改名，下载中途不会拿到半个文件
|
|
"${SSH[@]}" "sudo install -d -o \$(id -un) -m 755 $ROOT/download"
|
|
upload() {
|
|
local name
|
|
name="$(basename "$1")"
|
|
scp -i "$KEY" -o BatchMode=yes "$1" "$HOST:$ROOT/download/.${name}.part"
|
|
"${SSH[@]}" "mv -f $ROOT/download/.${name}.part $ROOT/download/${name} && chmod 644 $ROOT/download/${name}"
|
|
local online
|
|
online="$(curl -fsSL --max-time 300 "https://getopenstats.com/download/${name}" | shasum -a 256 | cut -d' ' -f1)"
|
|
[ "$online" = "$(shasum -a 256 "$1" | cut -d' ' -f1)" ] || { echo "线上 ${name} 校验不一致：$online" >&2; exit 1; }
|
|
echo "✅ https://getopenstats.com/download/${name}"
|
|
}
|
|
for chip in "${CHIPS[@]}"; do
|
|
upload "dist/OpenStats-${VERSION}-${chip}.dmg"
|
|
upload "dist/OpenStats-${VERSION}-${chip}.zip"
|
|
done
|
|
# 版本清单最后发布：安装包都已就位后，已安装的应用才会看到新版本
|
|
upload "$APPCAST"
|
|
|
|
# Homebrew tap
|
|
WORK="$(mktemp -d)"
|
|
trap 'rm -rf "$WORK"' EXIT
|
|
gh repo clone "$TAP" "$WORK/tap" -- --quiet
|
|
mkdir -p "$WORK/tap/Casks"
|
|
cp "$CASK" "$WORK/tap/Casks/openstats.rb"
|
|
if git -C "$WORK/tap" diff --quiet -- Casks/openstats.rb && git -C "$WORK/tap" ls-files --error-unmatch Casks/openstats.rb >/dev/null 2>&1; then
|
|
echo "✅ $TAP 已是 ${VERSION}"
|
|
else
|
|
git -C "$WORK/tap" add Casks/openstats.rb
|
|
git -C "$WORK/tap" commit -q -m "openstats ${VERSION}"
|
|
git -C "$WORK/tap" push -q
|
|
echo "✅ 已提交 Casks/openstats.rb 到 $TAP"
|
|
fi
|
|
echo "安装：brew tap gentpan/tap && brew trust gentpan/tap && brew install --cask openstats"
|