aidev/goldenChart
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: desktop updater signing in non-interactive CI

Browse Source 
Use --ci for key generation and pass empty password to tauri signer sign
so Jenkins/SSH builds can sign updater bundles without a TTY.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Macbook
2026-06-14 11:43:16 +09:00
parent 85b5341dee
commit 5c29ddaf23
3 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/prepare-tauri-build.sh
+1
View File
@@ -38,6 +38,7 @@ console.log('[prepare-tauri-build] createUpdaterArtifacts=' + enable);
if [[ "$enable" == "true" ]]; then if [[ "$enable" == "true" ]]; then
export TAURI_SIGNING_PRIVATE_KEY="$(tr -d '\n\r' < "$KEY_PATH")" export TAURI_SIGNING_PRIVATE_KEY="$(tr -d '\n\r' < "$KEY_PATH")"
export TAURI_SIGNING_PRIVATE_KEY_PASSWORD="${TAURI_SIGNING_PRIVATE_KEY_PASSWORD-}"
echo "[prepare-tauri-build] updater signing enabled" echo "[prepare-tauri-build] updater signing enabled"
else else
unset TAURI_SIGNING_PRIVATE_KEY 2>/dev/null || true unset TAURI_SIGNING_PRIVATE_KEY 2>/dev/null || true
scripts/publish-desktop-update.sh
+1 -1
View File
@@ -52,7 +52,7 @@ if [[ -f "$KEY_PATH" ]]; then
[[ -f "$bundle" ]] || continue [[ -f "$bundle" ]] || continue
[[ "$bundle" == *.sig ]] && continue [[ "$bundle" == *.sig ]] && continue
log "Signing $(basename "$bundle")" log "Signing $(basename "$bundle")"
(cd "$DESKTOP_DIR" && npx tauri signer sign -f "$KEY_PATH" "$bundle") (cd "$DESKTOP_DIR" && npx tauri signer sign -f "$KEY_PATH" -p "${TAURI_SIGNING_PRIVATE_KEY_PASSWORD-}" "$bundle")
done done
shopt -u nullglob shopt -u nullglob
else else
scripts/setup-desktop-updater-keys.sh
+1 -1
View File
@@ -17,7 +17,7 @@ if [[ -f "$KEY_PATH" ]]; then
echo "기존 private key: $KEY_PATH" echo "기존 private key: $KEY_PATH"
else else
echo "새 updater 키 생성: $KEY_PATH" echo "새 updater 키 생성: $KEY_PATH"
GEN_OUT="$(cd "$DESKTOP_DIR" && npx tauri signer generate -w "$KEY_PATH" -f 2>&1)" || true GEN_OUT="$(cd "$DESKTOP_DIR" && CI=1 npx tauri signer generate -w "$KEY_PATH" -f --ci 2>&1)" || true
echo "$GEN_OUT" echo "$GEN_OUT"
if [[ ! -f "$KEY_PATH" ]]; then if [[ ! -f "$KEY_PATH" ]]; then
echo "키 생성 실패. Rust/tauri-cli 확인 후 재시도." echo "키 생성 실패. Rust/tauri-cli 확인 후 재시도."