268 lines
8.8 KiB
YAML
268 lines
8.8 KiB
YAML
pool:
|
|
vmImage: 'windows-latest'
|
|
|
|
variables:
|
|
- name: buildPlatform
|
|
value: 'Any CPU'
|
|
- name: buildConfiguration
|
|
value: 'Release'
|
|
- name: build.version.major
|
|
value: 1
|
|
- name: build.version.minor
|
|
value: 0
|
|
- name: build.version.revision
|
|
value: $[counter(format('{0}.{1}', variables['build.version.major'], variables['build.version.minor']), 0)]
|
|
- name: build.version.suffix
|
|
value: -beta1
|
|
- name: build.version
|
|
value: $(build.version.major).$(build.version.minor).$(build.version.revision)$(build.version.suffix)
|
|
- name: build.date
|
|
value: $[format('{0:yyyy}-{0:MM}-{0:dd}T{0:HH}:{0:mm}:{0:ss}', pipeline.startTime)]
|
|
- group: Azure KeyVault Code Signing
|
|
- group: PSGallery
|
|
|
|
name: $(build.version.major).$(build.version.minor).$(build.version.revision)$(build.version.suffix)
|
|
trigger: none
|
|
|
|
stages:
|
|
- stage: build_provider
|
|
displayName: Build credential provider
|
|
dependsOn: []
|
|
jobs:
|
|
- job: "build_provider_job"
|
|
steps:
|
|
- task: DotNetCoreCLI@2
|
|
displayName: dotnet build
|
|
inputs:
|
|
command: build
|
|
arguments: '-c $(buildConfiguration) -p:Version=$(build.version) -p:GeneratePackageOnBuild=false'
|
|
projects: 'src/Lithnet.CredentialProvider/Lithnet.CredentialProvider.csproj'
|
|
|
|
- task: DotNetCoreCLI@2
|
|
inputs:
|
|
command: 'custom'
|
|
custom: 'tool'
|
|
arguments: 'update --global azuresigntool'
|
|
displayName: Install AzureSignTool
|
|
|
|
- task: PowerShell@2
|
|
displayName: 'Sign files with AzureSignTool'
|
|
inputs:
|
|
targetType: 'inline'
|
|
script: |
|
|
$files = @()
|
|
$files += (Get-ChildItem -Recurse -Path "$(Build.SourcesDirectory)\Lithnet*.dll").FullName
|
|
|
|
write-host "Signing $($files.Length) files:"
|
|
write-output $files
|
|
|
|
$cmdargs = @(
|
|
"sign",
|
|
"-d", "Lithnet Windows Credential Provider",
|
|
"-kvu", "$(akv.url)",
|
|
"-kvi", "$(akv.applicationID)",
|
|
"-kvs", "$(akv.secret)",
|
|
"-kvt", "$(akv.tenantId)",
|
|
"-kvc", "$(akv.certificateName)",
|
|
"-tr", "http://timestamp.digicert.com",
|
|
"-td", "sha256"
|
|
)
|
|
|
|
$cmdargs += $files
|
|
|
|
& AzureSignTool $cmdargs
|
|
failOnStderr: true
|
|
showWarnings: true
|
|
|
|
- task: DotNetCoreCLI@2
|
|
displayName: dotnet pack
|
|
inputs:
|
|
command: 'pack'
|
|
packagesToPack: 'src/Lithnet.CredentialProvider/Lithnet.CredentialProvider.csproj'
|
|
packDirectory: '$(Build.ArtifactStagingDirectory)\cp'
|
|
nobuild: true
|
|
includesymbols: true
|
|
versioningScheme: 'off'
|
|
|
|
- task: DotNetCoreCLI@2
|
|
inputs:
|
|
command: 'custom'
|
|
custom: 'tool'
|
|
arguments: 'update --global NuGetKeyVaultSignTool'
|
|
displayName: Install NugetKeyVaultSignTool
|
|
|
|
- task: PowerShell@2
|
|
displayName: 'Sign Nuget package'
|
|
inputs:
|
|
targetType: 'inline'
|
|
script: |
|
|
$cmdargs = @(
|
|
"sign", "$(Build.ArtifactStagingDirectory)\cp\Lithnet.CredentialProvider.$(build.version).nupkg"
|
|
"-fd", "sha256",
|
|
"-kvu", "$(akv.url)",
|
|
"-kvi", "$(akv.applicationID)",
|
|
"-kvs", "$(akv.secret)",
|
|
"-kvt", "$(akv.tenantId)",
|
|
"-kvc", "$(akv.certificateName)",
|
|
"-tr", "http://timestamp.digicert.com",
|
|
"-td", "sha256"
|
|
)
|
|
|
|
& NuGetKeyVaultSignTool $cmdargs
|
|
failOnStderr: true
|
|
showWarnings: true
|
|
|
|
- task: PowerShell@2
|
|
displayName: 'Sign Nuget symbols package'
|
|
inputs:
|
|
targetType: 'inline'
|
|
script: |
|
|
$cmdargs = @(
|
|
"sign", "$(Build.ArtifactStagingDirectory)\cp\Lithnet.CredentialProvider.$(build.version).snupkg"
|
|
"-fd", "sha256",
|
|
"-kvu", "$(akv.url)",
|
|
"-kvi", "$(akv.applicationID)",
|
|
"-kvs", "$(akv.secret)",
|
|
"-kvt", "$(akv.tenantId)",
|
|
"-kvc", "$(akv.certificateName)",
|
|
"-tr", "http://timestamp.digicert.com",
|
|
"-td", "sha256"
|
|
)
|
|
|
|
& NuGetKeyVaultSignTool $cmdargs
|
|
failOnStderr: true
|
|
showWarnings: true
|
|
|
|
- task: DotNetCoreCLI@2
|
|
displayName: Publish package to internal feed
|
|
inputs:
|
|
command: 'push'
|
|
packagesToPush: '$(Build.ArtifactStagingDirectory)/cp/*.nupkg'
|
|
nuGetFeedType: 'internal'
|
|
publishVstsFeed: '91a552bc-359d-4f28-bdbd-f36f71cfdf81'
|
|
|
|
- task: DotNetCoreCLI@2
|
|
displayName: Publish symbols to internal feed
|
|
inputs:
|
|
command: 'push'
|
|
packagesToPush: '$(Build.ArtifactStagingDirectory)/cp/*.snupkg'
|
|
nuGetFeedType: 'internal'
|
|
publishVstsFeed: '91a552bc-359d-4f28-bdbd-f36f71cfdf81'
|
|
|
|
- task: PublishPipelineArtifact@1
|
|
displayName: Publish nuget artifact
|
|
inputs:
|
|
targetPath: '$(Build.ArtifactStagingDirectory)/cp'
|
|
publishLocation: 'pipeline'
|
|
|
|
- stage: build_psmodule
|
|
displayName: Build PowerShell module
|
|
dependsOn: []
|
|
jobs:
|
|
- job: "build_ps_job"
|
|
steps:
|
|
- task: DotNetCoreCLI@2
|
|
displayName: dotnet publish
|
|
inputs:
|
|
command: 'publish'
|
|
arguments: '-c $(buildConfiguration) -p:Version=$(build.version) --output "$(Build.ArtifactStagingDirectory)\ps"'
|
|
zipAfterPublish: false
|
|
modifyOutputPath: false
|
|
|
|
- task: PowerShell@2
|
|
displayName: 'Update manifest version'
|
|
inputs:
|
|
targetType: 'inline'
|
|
script: |
|
|
Update-ModuleManifest -Path "$(Build.ArtifactStagingDirectory)\ps\Lithnet.CredentialProvider.Management.psd1" -ModuleVersion "$(build.version)"
|
|
|
|
- task: DotNetCoreCLI@2
|
|
inputs:
|
|
command: 'custom'
|
|
custom: 'tool'
|
|
arguments: 'update --global azuresigntool'
|
|
displayName: Install AzureSignTool
|
|
|
|
- task: PowerShell@2
|
|
displayName: 'Sign files with AzureSignTool'
|
|
inputs:
|
|
targetType: 'inline'
|
|
script: |
|
|
$files = @()
|
|
$files += (Get-ChildItem -Recurse -Path "$(Build.ArtifactStagingDirectory)\ps\Lithnet*.dll").FullName
|
|
$files += (Get-ChildItem -Recurse -Path "$(Build.ArtifactStagingDirectory)\ps\Lithnet*.psd1").FullName
|
|
|
|
write-host "Signing $($files.Length) files:"
|
|
write-output $files
|
|
|
|
$cmdargs = @(
|
|
"sign",
|
|
"-d", "Lithnet Windows Credential Provider",
|
|
"-kvu", "$(akv.url)",
|
|
"-kvi", "$(akv.applicationID)",
|
|
"-kvs", "$(akv.secret)",
|
|
"-kvt", "$(akv.tenantId)",
|
|
"-kvc", "$(akv.certificateName)",
|
|
"-tr", "http://timestamp.digicert.com",
|
|
"-td", "sha256"
|
|
)
|
|
|
|
$cmdargs += $files
|
|
|
|
& AzureSignTool $cmdargs
|
|
failOnStderr: true
|
|
showWarnings: true
|
|
|
|
- task: PublishPipelineArtifact@1
|
|
displayName: Publish PS artifact
|
|
inputs:
|
|
targetPath: '$(Build.ArtifactStagingDirectory)/ps'
|
|
publishLocation: 'pipeline'
|
|
|
|
- stage: publish_nuget
|
|
displayName: Publish packages to production feed
|
|
dependsOn: "build_provider"
|
|
jobs:
|
|
- deployment: 'PublishPackages'
|
|
environment: 'Production'
|
|
displayName: Publish packages to public nuget feed
|
|
pool:
|
|
vmImage: windows-2022
|
|
strategy:
|
|
runOnce:
|
|
deploy:
|
|
steps:
|
|
- checkout: none
|
|
- task: NuGetToolInstaller@1
|
|
inputs:
|
|
versionSpec: '>=4.9.0-0'
|
|
- task: NuGetCommand@2
|
|
displayName: 'Publish nuget package to public feed'
|
|
inputs:
|
|
command: 'push'
|
|
packagesToPush: '$(Pipeline.Workspace)/cp/*.nupkg'
|
|
nuGetFeedType: 'external'
|
|
publishFeedCredentials: 'WindowsCredentialProviderNuget'
|
|
|
|
- stage: publish_psgallery
|
|
displayName: Publish module to PSGallery
|
|
dependsOn: "build_psmodule"
|
|
jobs:
|
|
- deployment: 'PublishPackages'
|
|
environment: 'Production'
|
|
displayName: Publish packages to public PSGallery
|
|
pool:
|
|
vmImage: windows-2022
|
|
strategy:
|
|
runOnce:
|
|
deploy:
|
|
steps:
|
|
- checkout: none
|
|
- task: PowerShell@2
|
|
displayName: 'Upload module to PSGallery'
|
|
inputs:
|
|
targetType: 'inline'
|
|
script: |
|
|
Publish-Module -Path "$(Pipeline.Workspace)\ps\Lithnet.CredentialProvider.Management.psd1" -NuGetApiKey "$(psgallery.apikey)"
|
|
|