wehub-resource-sync
070959e133
landing-page-staging / Deploy landing page to staging (push) Has been skipped
landing-page-ci / Validate landing page (push) Failing after 4s
visual-baseline / Capture visual baselines (push) Has been cancelled
bake-plugin-previews / Bake plugin previews (push) Has been cancelled
157 lines
4.0 KiB
Bash
Executable File
157 lines
4.0 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
usage() {
|
|
cat <<'EOF'
|
|
Usage:
|
|
scripts/install-unsafe-dmg.sh [--force] [--name <file.dmg>] <dmg-url>
|
|
|
|
Internal helper for installing non-notarized macOS DMGs during beta-s validation.
|
|
It downloads with curl, mounts the DMG, copies the single app bundle to
|
|
/Applications, and removes quarantine/provenance xattrs from the installed app.
|
|
|
|
Options:
|
|
--force Overwrite an existing ~/Downloads DMG and /Applications app.
|
|
--name <file> DMG filename to use under ~/Downloads. Required when the URL
|
|
path does not end in a parseable .dmg filename.
|
|
-h, --help Show this help.
|
|
EOF
|
|
}
|
|
|
|
fail() {
|
|
echo "install-unsafe-dmg: $*" >&2
|
|
exit 1
|
|
}
|
|
|
|
if [[ "$(uname -s)" != "Darwin" ]]; then
|
|
fail "this script only runs on macOS"
|
|
fi
|
|
|
|
force=0
|
|
dmg_name=""
|
|
url=""
|
|
|
|
while [[ $# -gt 0 ]]; do
|
|
case "$1" in
|
|
--force)
|
|
force=1
|
|
shift
|
|
;;
|
|
--name)
|
|
[[ $# -ge 2 ]] || fail "--name requires a value"
|
|
dmg_name="$2"
|
|
shift 2
|
|
;;
|
|
-h | --help)
|
|
usage
|
|
exit 0
|
|
;;
|
|
--*)
|
|
fail "unknown option: $1"
|
|
;;
|
|
*)
|
|
[[ -z "$url" ]] || fail "expected exactly one DMG URL"
|
|
url="$1"
|
|
shift
|
|
;;
|
|
esac
|
|
done
|
|
|
|
[[ -n "$url" ]] || {
|
|
usage >&2
|
|
exit 1
|
|
}
|
|
|
|
if [[ -z "$dmg_name" ]]; then
|
|
dmg_name="$(
|
|
URL="$url" node --input-type=module <<'NODE'
|
|
const raw = process.env.URL ?? "";
|
|
try {
|
|
const parsed = new URL(raw);
|
|
const parts = parsed.pathname.split("/").filter(Boolean);
|
|
const last = parts.at(-1);
|
|
process.stdout.write(last == null ? "" : decodeURIComponent(last));
|
|
} catch {
|
|
process.stdout.write("");
|
|
}
|
|
NODE
|
|
)"
|
|
fi
|
|
|
|
[[ -n "$dmg_name" ]] || fail "could not infer DMG filename from URL; pass --name <file.dmg>"
|
|
[[ "$dmg_name" != */* ]] || fail "--name must be a filename, not a path: $dmg_name"
|
|
[[ "$dmg_name" == *.dmg ]] || fail "DMG filename must end with .dmg: $dmg_name"
|
|
|
|
downloads_dir="$HOME/Downloads"
|
|
download_path="$downloads_dir/$dmg_name"
|
|
partial_path="$download_path.partial.$$"
|
|
mount_dir="$(mktemp -d "${TMPDIR:-/tmp}/open-design-unsafe-dmg.XXXXXX")"
|
|
mounted=0
|
|
|
|
cleanup() {
|
|
local status=$?
|
|
if [[ "$mounted" -eq 1 ]]; then
|
|
hdiutil detach "$mount_dir" -quiet >/dev/null 2>&1 || hdiutil detach "$mount_dir" -force -quiet >/dev/null 2>&1 || true
|
|
fi
|
|
rm -f "$partial_path"
|
|
rmdir "$mount_dir" >/dev/null 2>&1 || true
|
|
exit "$status"
|
|
}
|
|
trap cleanup EXIT
|
|
|
|
mkdir -p "$downloads_dir"
|
|
|
|
if [[ -e "$download_path" && "$force" -ne 1 ]]; then
|
|
fail "download target already exists: $download_path (pass --force to overwrite)"
|
|
fi
|
|
|
|
echo "Downloading DMG:"
|
|
echo " url: $url"
|
|
echo " path: $download_path"
|
|
curl -fL --output "$partial_path" "$url"
|
|
mv -f "$partial_path" "$download_path"
|
|
|
|
echo "Mounting DMG:"
|
|
echo " path: $download_path"
|
|
echo " mount: $mount_dir"
|
|
hdiutil attach "$download_path" -mountpoint "$mount_dir" -nobrowse -quiet
|
|
mounted=1
|
|
|
|
mapfile -t apps < <(find "$mount_dir" -maxdepth 1 -type d -name "*.app" -print | sort)
|
|
if [[ "${#apps[@]}" -eq 0 ]]; then
|
|
fail "no .app bundle found at DMG root"
|
|
fi
|
|
if [[ "${#apps[@]}" -gt 1 ]]; then
|
|
printf 'install-unsafe-dmg: multiple .app bundles found at DMG root:\n' >&2
|
|
printf ' %s\n' "${apps[@]}" >&2
|
|
fail "refusing to guess which app to install"
|
|
fi
|
|
|
|
source_app="${apps[0]}"
|
|
app_name="$(basename "$source_app")"
|
|
target_app="/Applications/$app_name"
|
|
|
|
if [[ -e "$target_app" && "$force" -ne 1 ]]; then
|
|
fail "target app already exists: $target_app (pass --force to overwrite)"
|
|
fi
|
|
|
|
if [[ -e "$target_app" ]]; then
|
|
echo "Removing existing app:"
|
|
echo " path: $target_app"
|
|
rm -rf "$target_app"
|
|
fi
|
|
|
|
echo "Installing app:"
|
|
echo " from: $source_app"
|
|
echo " to: $target_app"
|
|
ditto "$source_app" "$target_app"
|
|
|
|
echo "Removing unsafe-install xattrs:"
|
|
echo " path: $target_app"
|
|
xattr -dr com.apple.quarantine "$target_app" 2>/dev/null || true
|
|
xattr -dr com.apple.provenance "$target_app" 2>/dev/null || true
|
|
xattr -dr com.apple.macl "$target_app" 2>/dev/null || true
|
|
|
|
echo "Installed unsafe DMG app:"
|
|
echo " app: $target_app"
|