macOS universal binaries and package notarization

src/Info.plist

@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>CFBundleExecutable</key>
+	<string>niimath</string>
+	<key>CFBundleIdentifier</key>
+	<string>com.mricro.niimath</string>
+	<key>CFBundleInfoDictionaryVersion</key>
+	<string>6.0</string>
+	<key>CFBundleName</key>
+	<string>niimath</string>
+	<key>CFBundleShortVersionString</key>
+	<string>1.0</string>
+	<key>CFBundleVersion</key>
+	<string>1</string>
+	<key>CFBundleSupportedPlatforms</key>
+	<array>
+		<string>MacOSX</string>
+	</array>
+	<key>CFBundlePackageType</key>
+	<string>APPL</string>
+</dict>
+</plist>

src/macos_validation.bat

@@ -0,0 +1,55 @@
+#com.${COMPANY_NAME}.${APP_NAME} e.g. com.mricro.niimath
+COMPANY_NAME=example
+APP_NAME=niimath
+APP_SPECIFIC_PASSWORD=abcd-efgh-ijkl-mnop
+APPLE_ID_USER=yourname@email.com
+APPLE_ID_INSTALL="Developer ID Installer: Your Name"
+APPLE_ID_APP="Developer ID Application: Your Name"
+
+cd ~/src/niimath/src
+clang -sectcreate TEXT info_plist Info.plist -O3 -DHAVE_ZLIB -o niimathX86 niimath.c bw.c core.c tensor.c core32.c core64.c niftilib/nifti2_io.c znzlib/znzlib.c -I./niftilib -I./znzlib  -lm -lz -target x86_64-apple-macos10.12 -mmacosx-version-min=10.12
+strip ./niimathX86
+clang -sectcreate TEXT info_plist Info.plist -O3 -DHAVE_ZLIB -o niimathARM niimath.c bw.c core.c tensor.c core32.c core64.c niftilib/nifti2_io.c znzlib/znzlib.c -I./niftilib -I./znzlib  -lm -lz -target arm64-apple-macos11 -mmacosx-version-min=11.0
+strip ./niimathARM
+# Create the universal binary.
+lipo -create -output ${APP_NAME} niimathX86 niimathARM
+# Create a staging area for the installer package.
+mkdir -p usr/local/bin
+# Copy the binary into the staging area.
+cp ${APP_NAME} usr/local/bin
+# Sign the binary.
+codesign --timestamp --options=runtime -s "${APPLE_ID_APP}" -v usr/local/bin/${APP_NAME}
+# Build the package.
+pkgbuild --identifier "com.${COMPANY_NAME}.${APP_NAME}.pkg" --sign "${APPLE_ID_INSTALL}" --timestamp --root usr/local --install-location /usr/local/ ${APP_NAME}.pkg
+# Submit the package to the notarization service.
+
+xcrun altool --notarize-app --primary-bundle-id "com.${COMPANY_NAME}.${APP_NAME}.pkg" --username $APPLE_ID_USER --password $APP_SPECIFIC_PASSWORD --file ${APP_NAME}.pkg --output-format xml > upload_log_file.txt
+
+# now we need to query apple's server to the status of notarization
+# when the "xcrun altool --notarize-app" command is finished the output plist
+# will contain a notarization-upload->RequestUUID key which we can use to check status
+echo "Checking status..."
+sleep 50
+REQUEST_UUID=`/usr/libexec/PlistBuddy -c "Print :notarization-upload:RequestUUID" upload_log_file.txt`
+while true; do
+  xcrun altool --notarization-info $REQUEST_UUID -u $APPLE_ID_USER -p $APP_SPECIFIC_PASSWORD --output-format xml > request_log_file.txt
+  # parse the request plist for the notarization-info->Status Code key which will
+  # be set to "success" if the package was notarized
+  STATUS=`/usr/libexec/PlistBuddy -c "Print :notarization-info:Status" request_log_file.txt`
+  if [ "$STATUS" != "in progress" ]; then
+    break
+  fi
+  # echo $STATUS
+  echo "$STATUS"
+  sleep 10
+done
+
+# download the log file to view any issues
+/usr/bin/curl -o log_file.txt `/usr/libexec/PlistBuddy -c "Print :notarization-info:LogFileURL" request_log_file.txt`
+
+# staple
+echo "Stapling..."
+xcrun stapler staple ${APP_NAME}.pkg
+xcrun stapler validate ${APP_NAME}.pkg
+
+open log_file.txt