Adding libssl to build-image to sign extension. (#23606)

This commit is contained in:
Aasim Khan
2023-07-03 10:44:09 -07:00
committed by GitHub
parent e8c8e54263
commit d98470e34e
3 changed files with 37 additions and 34 deletions

View File

@@ -14,7 +14,11 @@ RUN apt-get update && apt-get upgrade -y
RUN apt-get install -y libxkbfile-dev pkg-config libsecret-1-dev libxss1 dbus xvfb libgtk-3-0 \
libkrb5-dev git apt-transport-https ca-certificates curl gnupg-agent software-properties-common \
libnss3 libasound2 make gcc libx11-dev fakeroot rpm libgconf-2-4 libunwind8 g++ libgbm-dev
libnss3 libasound2 make gcc libx11-dev fakeroot rpm libgconf-2-4 libunwind8 g++ libgbm-dev wget
# Adding Libssl for dotnet 5.0 and ESRP signing to work
RUN wget -c http://security.ubuntu.com/ubuntu/pool/main/o/openssl1.0/libssl1.0.0_1.0.2n-1ubuntu5_amd64.deb
RUN dpkg -i libssl1.0.0_1.0.2n-1ubuntu5_amd64.deb
#docker
RUN curl -fsSL https://download.docker.com/linux/ubuntu/gpg | apt-key add -

View File

@@ -198,38 +198,37 @@ steps:
version: 5.0.x
installationPath: $(Agent.ToolsDirectory)/dotnet
# {{SQL CARBON TODO}} - disable extension signing while investigating build break
# - task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@1
# inputs:
# ConnectedServiceName: 'Code Signing'
# FolderPath: '$(Build.SourcesDirectory)/.build'
# Pattern: 'extensions/*.vsix,langpacks/*.vsix'
# signConfigType: inlineSignParams
# inlineOperation: |
# [
# {
# "keyCode": "CP-233016",
# "operationSetCode": "OpcSign",
# "parameters": [
# {
# "parameterName": "FileDigest",
# "parameterValue": "/fd \"SHA256\""
# }
# ],
# "toolName": "sign",
# "toolVersion": "1.0"
# },
# {
# "keyCode": "CP-233016",
# "operationSetCode": "OpcVerify",
# "parameters": [],
# "toolName": "sign",
# "toolVersion": "1.0"
# }
# ]
# SessionTimeout: 120
# displayName: 'Signing Extensions and Langpacks'
# condition: and(succeeded(), eq(variables['signed'], true))
- task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@1
inputs:
ConnectedServiceName: 'Code Signing'
FolderPath: '$(Build.SourcesDirectory)/.build'
Pattern: 'extensions/*.vsix,langpacks/*.vsix'
signConfigType: inlineSignParams
inlineOperation: |
[
{
"keyCode": "CP-233016",
"operationSetCode": "OpcSign",
"parameters": [
{
"parameterName": "FileDigest",
"parameterValue": "/fd \"SHA256\""
}
],
"toolName": "sign",
"toolVersion": "1.0"
},
{
"keyCode": "CP-233016",
"operationSetCode": "OpcVerify",
"parameters": [],
"toolName": "sign",
"toolVersion": "1.0"
}
]
SessionTimeout: 120
displayName: 'Signing Extensions and Langpacks'
condition: and(succeeded(), eq(variables['signed'], true))
- script: |
set -e

View File

@@ -1,7 +1,7 @@
resources:
containers:
- container: linux-x64
image: sqltoolscontainers.azurecr.io/linux-build-agent:7
image: sqltoolscontainers.azurecr.io/linux-build-agent:8
endpoint: SqlToolsContainers
stages: