Munki.Notarize.Specific.Git.Version.zsh

#!/bin/zsh

# Made by Lux
# https://github.com/lifeunexpected

# PS: you first need to modify MunkiPythonNotarizeAndSign.zsh if you dont do that this script wont work!
# Copy both Munki.Notarize.zsh and Munki.Notarize.Specific.Git.Version.zsh too munki/code/tools/

# This is based on Greag Neagles original script and we are just doing some small modifications.
# 1: Copy script to Munki folder
# 2: In terminal "cd FolderWheremunki" git repo is located
# 3: run script with the commands you want
# 4 Enter Password

# Defaults.
PKGID="com.googlecode.munki"
OUTPUTDIR="$(pwd)"
CHECKOUTREV="HEAD"
BRANCH="main"

# Delete old munki-git folder from munki root folder if exist
sudo rm -rf $OUTPUTDIR/munki-git

usage() {
    cat <<EOF
Usage: $(basename "$0") [-b branch ] [-r revision] [<make_munki_mpkg.sh options>]"

    -b branch   Git branch to clone (main is the default)
    -r revision Git revision to check out (HEAD is the default)

    The remaining options are passed to make_munki_pkg.sh:
    -i id       Specify the base package bundle ID
    -o dir      Specify the output directory
    -n orgname  Specify the name of the organization
    -p          Build Python.framework even if one exists
    -B          Include a package that sets Munki's bootstrap mode
    -m          Build the package in a manner suitable for install via MDM;
                specifically, attempt to start all the launchd agents and
                daemons without requiring a restart. Such a package is not
                suited for upgrade installs or install via Munki itself.
    -c plist    Build a configuration package using the preferences defined in a
                plist file
    -R          Include a pkg to install Rosetta2 on ARM-based hardware.
    -s cert_cn  Sign distribution package with a Developer ID Installer
                certificate from keychain. Provide the certificate's Common
                Name. Ex: "Developer ID Installer: Munki (U8PN57A5N2)"
    -S cert_cn  Sign apps with a Developer ID Application certificated from
                keychain. Provide the certificate's Common Name.
                Ex: "Developer ID Application: Munki (U8PN57A5N2)"
    -T pemfile  Include a pkg to install a client certificate for server mTLS
                mutual authentication, at /Library/Managed Installs/certs/.

EOF
}

ADDITIONALARGS=""
while getopts "b:r:i:o:n:c:s:S:T:pBmhR" option
do
    case $option in
        "b")
            BRANCH="$OPTARG"
            ;;
        "r")
            CHECKOUTREV="$OPTARG"
            ;;
        "i")
            ADDITIONALARGS="${ADDITIONALARGS} -i \"$OPTARG\""
            ;;
        "o")
            ADDITIONALARGS="${ADDITIONALARGS} -o \"$OPTARG\""
            ;;
        "n")
            ADDITIONALARGS="${ADDITIONALARGS} -n \"$OPTARG\""
            ;;
        "c")
            ADDITIONALARGS="${ADDITIONALARGS} -c \"$OPTARG\""
            ;;
        "s")
            ADDITIONALARGS="${ADDITIONALARGS} -s \"$OPTARG\""
            ;;
        "S")
            ADDITIONALARGS="${ADDITIONALARGS} -S \"$OPTARG\""
            ;;
        "p")
            ADDITIONALARGS="${ADDITIONALARGS} -p"
            ;;
        "B")
            ADDITIONALARGS="${ADDITIONALARGS} -B"
            ;;
        "m")
            ADDITIONALARGS="${ADDITIONALARGS} -m"
            ;;
        "R")
            ADDITIONALARGS="${ADDITIONALARGS} -R"
            ;;
        "T")
            ADDITIONALARGS="${ADDITIONALARGS} -T \"$OPTARG\""
            ;;
        "h" | *)
            usage
            exit 1
            ;;
    esac
done
shift $(($OPTIND - 1))

if [ $# -ne 0 ]; then
    usage
    exit 1
fi

MUNKIDIR="$(pwd)/munki-git"

# Sanity checks.
if ! which git 1>/dev/null ; then
    echo "Could not find git in command path. Maybe it's not installed?" 1>&2
    echo "You can get a Git package here:" 1>&2
    echo "    https://git-scm.com/download/mac"
    exit 1
fi

echo "Cloning munki repo branch $BRANCH from github..."
git clone --branch "$BRANCH" --no-checkout -- https://github.com/munki/munki.git "$MUNKIDIR"
CLONE_RESULT="$?"
if [ "$CLONE_RESULT" != "0" ]; then
    echo "Error cloning munki repo: $CLONE_RESULT" 1>&2
    exit 1
fi

echo "Checking out revision $CHECKOUTREV..."
cd "$MUNKIDIR"
git checkout "$CHECKOUTREV"
CHECKOUT_RESULT="$?"
if [ "$CHECKOUT_RESULT" != "0" ]; then
    echo "Error checking out $CHECKOUTREV: $CHECKOUT_RESULT" 1>&2
    exit 1
fi

# Copy notarization script to munki-git folder
cp $OUTPUTDIR/code/tools/Munki.Notarize.zsh $MUNKIDIR/code/tools/
cp $OUTPUTDIR/code/tools/MunkiClientSettings.plist $MUNKIDIR/code/tools/

# now use the version of the MunkiPythonNotarizeAndSignedPrivate.zsh script in the Git repo to get the files notarized
CMD="\"$MUNKIDIR/code/tools/Munki.Notarize.zsh\" -r \"$MUNKIDIR\" -o \"$OUTPUTDIR\" $ADDITIONALARGS"
eval $CMD

exit $?