2024-01-03 16:29:48 +00:00
|
|
|
const os = require("os");
|
|
|
|
const fs = require("fs");
|
2024-01-09 15:56:04 +00:00
|
|
|
const path = require("path");
|
|
|
|
const Arch = require("electron-builder").Arch;
|
|
|
|
const { flipFuses, FuseVersion, FuseV1Options } = require("@electron/fuses");
|
2024-01-03 16:29:48 +00:00
|
|
|
|
|
|
|
// Typescript conversion blocked on https://github.com/electron-userland/electron-builder/issues/7775
|
|
|
|
|
|
|
|
/**
|
|
|
|
* This script has different outputs depending on your os platform.
|
|
|
|
*
|
|
|
|
* On Windows:
|
|
|
|
* Prefixes the nightly version with `0.0.1-nightly.` as it breaks if it is not semver
|
|
|
|
* Passes $ED_SIGNTOOL_THUMBPRINT and $ED_SIGNTOOL_SUBJECT_NAME to
|
|
|
|
* build.win.signingHashAlgorithms and build.win.certificateSubjectName respectively if specified.
|
|
|
|
*
|
|
|
|
* On macOS:
|
|
|
|
* Passes $ED_NOTARYTOOL_TEAM_ID to build.mac.notarize.notarize if specified
|
|
|
|
*
|
|
|
|
* On Linux:
|
|
|
|
* Replaces spaces in the product name with dashes as spaces in paths can cause issues
|
|
|
|
* Removes libsqlcipher0 recommended dependency if env SQLCIPHER_BUNDLED is asserted.
|
|
|
|
* Passes $ED_DEBIAN_CHANGELOG to build.deb.fpm if specified
|
|
|
|
*/
|
|
|
|
|
|
|
|
const NIGHTLY_APP_ID = "im.riot.nightly";
|
|
|
|
const NIGHTLY_DEB_NAME = "element-nightly";
|
|
|
|
|
|
|
|
const pkg = JSON.parse(fs.readFileSync("package.json", "utf8"));
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @type {import('electron-builder').Configuration}
|
|
|
|
* @see https://www.electron.build/configuration/configuration
|
|
|
|
*/
|
|
|
|
const config = {
|
|
|
|
appId: "im.riot.app",
|
|
|
|
asarUnpack: "**/*.node",
|
2024-01-09 15:56:04 +00:00
|
|
|
afterPack: async (context) => {
|
|
|
|
if (context.electronPlatformName !== "darwin" || context.arch === Arch.universal) {
|
|
|
|
// Burn in electron fuses for proactive security hardening.
|
|
|
|
// On macOS, we only do this for the universal package, as the constituent arm64 and amd64 packages are embedded within.
|
|
|
|
const ext = {
|
|
|
|
darwin: ".app",
|
|
|
|
win32: ".exe",
|
|
|
|
linux: "",
|
|
|
|
}[context.electronPlatformName];
|
|
|
|
|
|
|
|
let executableName = context.packager.appInfo.productFilename;
|
|
|
|
if (context.electronPlatformName === "linux") {
|
|
|
|
// Linux uses the package name as the executable name
|
|
|
|
executableName = context.packager.appInfo.name;
|
|
|
|
}
|
|
|
|
|
|
|
|
const electronBinaryPath = path.join(context.appOutDir, `${executableName}${ext}`);
|
|
|
|
console.log(`Flipping fuses for: ${electronBinaryPath}`);
|
|
|
|
|
|
|
|
await flipFuses(electronBinaryPath, {
|
|
|
|
version: FuseVersion.V1,
|
|
|
|
resetAdHocDarwinSignature: context.electronPlatformName === "darwin" && context.arch === Arch.universal,
|
|
|
|
|
|
|
|
[FuseV1Options.EnableCookieEncryption]: true,
|
|
|
|
[FuseV1Options.OnlyLoadAppFromAsar]: true,
|
|
|
|
|
|
|
|
[FuseV1Options.RunAsNode]: false,
|
|
|
|
[FuseV1Options.EnableNodeOptionsEnvironmentVariable]: false,
|
|
|
|
[FuseV1Options.EnableNodeCliInspectArguments]: false,
|
|
|
|
|
|
|
|
// Mac app crashes on arm for us when `LoadBrowserProcessSpecificV8Snapshot` is enabled
|
|
|
|
[FuseV1Options.LoadBrowserProcessSpecificV8Snapshot]: false,
|
|
|
|
// https://github.com/electron/fuses/issues/7
|
|
|
|
[FuseV1Options.EnableEmbeddedAsarIntegrityValidation]: false,
|
|
|
|
});
|
|
|
|
}
|
|
|
|
},
|
2024-01-03 16:29:48 +00:00
|
|
|
files: [
|
|
|
|
"package.json",
|
|
|
|
{
|
|
|
|
from: ".hak/hakModules",
|
|
|
|
to: "node_modules",
|
|
|
|
},
|
|
|
|
"lib/**",
|
|
|
|
],
|
|
|
|
extraResources: [
|
|
|
|
{
|
|
|
|
from: "res/img",
|
|
|
|
to: "img",
|
|
|
|
},
|
|
|
|
"webapp.asar",
|
|
|
|
],
|
|
|
|
extraMetadata: {
|
2024-01-11 11:35:21 +00:00
|
|
|
name: pkg.name,
|
2024-01-03 16:29:48 +00:00
|
|
|
productName: pkg.productName,
|
|
|
|
description: pkg.description,
|
|
|
|
},
|
|
|
|
linux: {
|
|
|
|
target: ["tar.gz", "deb"],
|
|
|
|
category: "Network;InstantMessaging;Chat",
|
|
|
|
maintainer: "support@element.io",
|
|
|
|
icon: "build/icons",
|
|
|
|
desktop: {
|
|
|
|
MimeType: "x-scheme-handler/element",
|
|
|
|
},
|
|
|
|
},
|
|
|
|
deb: {
|
|
|
|
packageCategory: "net",
|
|
|
|
depends: [
|
|
|
|
"libgtk-3-0",
|
|
|
|
"libnotify4",
|
|
|
|
"libnss3",
|
|
|
|
"libxss1",
|
|
|
|
"libxtst6",
|
|
|
|
"xdg-utils",
|
|
|
|
"libatspi2.0-0",
|
|
|
|
"libuuid1",
|
|
|
|
"libsecret-1-0",
|
|
|
|
"libasound2",
|
|
|
|
"libgbm1",
|
2024-01-19 09:52:05 +00:00
|
|
|
"libc>=2.28",
|
2024-01-03 16:29:48 +00:00
|
|
|
],
|
|
|
|
recommends: ["libsqlcipher0", "element-io-archive-keyring"],
|
|
|
|
fpm: [
|
|
|
|
"--deb-field",
|
|
|
|
"Replaces: riot-desktop (<< 1.7.0), riot-web (<< 1.7.0)",
|
|
|
|
"--deb-field",
|
|
|
|
"Breaks: riot-desktop (<< 1.7.0), riot-web (<< 1.7.0)",
|
|
|
|
],
|
|
|
|
},
|
|
|
|
mac: {
|
|
|
|
category: "public.app-category.social-networking",
|
|
|
|
darkModeSupport: true,
|
|
|
|
hardenedRuntime: true,
|
|
|
|
gatekeeperAssess: true,
|
|
|
|
entitlements: "./build/entitlements.mac.plist",
|
|
|
|
icon: "build/icons/icon.icns",
|
|
|
|
},
|
|
|
|
win: {
|
|
|
|
target: ["squirrel"],
|
|
|
|
signingHashAlgorithms: ["sha256"],
|
|
|
|
icon: "build/icons/icon.ico",
|
|
|
|
},
|
|
|
|
directories: {
|
|
|
|
output: "dist",
|
|
|
|
},
|
|
|
|
protocols: [
|
|
|
|
{
|
|
|
|
name: "element",
|
|
|
|
schemes: ["element"],
|
|
|
|
},
|
|
|
|
],
|
|
|
|
};
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Allow specifying windows signing cert via env vars
|
|
|
|
* @param {string} process.env.ED_SIGNTOOL_SUBJECT_NAME
|
|
|
|
* @param {string} process.env.ED_SIGNTOOL_THUMBPRINT
|
|
|
|
*/
|
|
|
|
if (process.env.ED_SIGNTOOL_SUBJECT_NAME && process.env.ED_SIGNTOOL_THUMBPRINT) {
|
|
|
|
config.win.certificateSubjectName = process.env.ED_SIGNTOOL_SUBJECT_NAME;
|
|
|
|
config.win.certificateSha1 = process.env.ED_SIGNTOOL_THUMBPRINT;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Allow specifying macOS notary team id via env var
|
|
|
|
* @param {string} process.env.ED_NOTARYTOOL_TEAM_ID
|
|
|
|
*/
|
|
|
|
if (process.env.ED_NOTARYTOOL_TEAM_ID) {
|
|
|
|
config.mac.notarize = {
|
|
|
|
teamId: process.env.ED_NOTARYTOOL_TEAM_ID,
|
|
|
|
};
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Allow specifying nightly version via env var
|
|
|
|
* @param {string} process.env.ED_NIGHTLY
|
|
|
|
*/
|
|
|
|
if (process.env.ED_NIGHTLY) {
|
|
|
|
config.deb.fpm = []; // Clear the fpm as the breaks deb fields don't apply to nightly
|
|
|
|
|
|
|
|
config.appId = NIGHTLY_APP_ID;
|
|
|
|
config.extraMetadata.productName += " Nightly";
|
2024-01-09 15:56:04 +00:00
|
|
|
config.extraMetadata.name += "-nightly";
|
2024-01-03 16:29:48 +00:00
|
|
|
config.extraMetadata.description += " (nightly unstable build)";
|
|
|
|
config.deb.fpm.push("--name", NIGHTLY_DEB_NAME);
|
|
|
|
|
|
|
|
let version = process.env.ED_NIGHTLY;
|
|
|
|
if (os.platform() === "win32") {
|
|
|
|
// The windows packager relies on parsing this as semver, so we have to make it look like one.
|
|
|
|
// This will give our update packages really stupid names, but we probably can't change that either
|
|
|
|
// because squirrel windows parses them for the version too. We don't really care: nobody sees them.
|
|
|
|
// We just give the installer a static name, so you'll just see this in the 'about' dialog.
|
|
|
|
// Turns out if you use 0.0.0 here it makes Squirrel windows crash, so we use 0.0.1.
|
|
|
|
version = "0.0.1-nightly." + version;
|
|
|
|
}
|
|
|
|
config.extraMetadata.version = version;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (os.platform() === "linux") {
|
|
|
|
// Electron crashes on debian if there's a space in the path.
|
|
|
|
// https://github.com/vector-im/element-web/issues/13171
|
|
|
|
config.extraMetadata.productName = config.extraMetadata.productName.replace(/ /g, "-");
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Allow specifying deb changelog via env var
|
|
|
|
* @param {string} process.env.ED_DEB_CHANGELOG
|
|
|
|
*/
|
|
|
|
if (process.env.ED_DEBIAN_CHANGELOG) {
|
|
|
|
config.deb.fpm.push(`--deb-changelog=${process.env.ED_DEBIAN_CHANGELOG}`);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (process.env.SQLCIPHER_BUNDLED) {
|
|
|
|
// Remove sqlcipher dependency when using bundled
|
|
|
|
config.deb.recommends = config.deb.recommends?.filter((d) => d !== "libsqlcipher0");
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
exports.default = config;
|