codesign_identity

Author: jksdou

build.spec

@@ -40,7 +40,7 @@ exe = EXE(pyz,
     console=False,
     disable_windowed_traceback=False,
     target_arch=None,
-    codesign_identity=None,
+    codesign_identity=MacDeveloperID,
     entitlements_file=None)
 coll = COLLECT(exe,
     a.binaries,

pkg.sh

@@ -0,0 +1,38 @@
+#!/bin/bash
+
+appName="PyThub PyInstaller Desktop"
+# MacDeveloperID="3rd Party Mac Developer Installer: Developer Name (XXXX)"
+MacDeveloperID="Developer ID Installer: CROGRAM INC. (4LWSS9P873)"
+
+# rm -rf ./build/pkg
+mkdir ./build/pkg
+
+appPath=./dist/"$appName".app
+pkgPath=./dist/"$appName".pkg
+
+
+# 生成中间 PKG 文件
+pkgbuild --install-location /Applications --component "$appPath" ./build/pkg/intermediate.pkg
+
+cd ./build/pkg
+
+# 创建分发 XML 文件
+productbuild --synthesize --package ./intermediate.pkg ./distribution.xml
+
+# 生成最终的 PKG 文件。此 PKG 文件未签名
+productbuild --distribution ./distribution.xml --package-path ./intermediate.pkg ./unsigned_final.pkg
+
+
+if ["$MacDeveloperID" = ""]; then
+    # 未签名
+    mv ./unsigned_final.pkg ./final.pkg
+else
+    # 使用 Mac 开发人员 ID 证书对 PKG 文件进行签名
+    productsign --sign "$MacDeveloperID" ./unsigned_final.pkg ./signed_final.pkg
+    mv ./signed_final.pkg ./final.pkg
+fi
+
+cd -
+
+# rm "$pkgPath"
+mv ./build/pkg/final.pkg "$pkgPath"