Mercurial > hg > sonic-visualiser
annotate deploy/linux/docker/Dockerfile_test_appimage.in @ 2265:d33dff02b39b sandbox-notarize
Work on sandboxing (possibly) and using the hardened runtime for notarization. Supply appropriate bundle ID for helpers as well as main application, and request inherited sandbox entitlements. Currently works with sandboxing (apparently) but not yet with the hardened runtime, where we can't load plugins signed by third parties even with the com.apple.security.cs.disable-library-validation entitlement because their team IDs don't match the host. Possibly that exception is supposed to be requested some other way?
| author | Chris Cannam |
|---|---|
| date | Thu, 25 Apr 2019 16:46:02 +0100 |
| parents | 3f3ad6701482 |
| children |
| rev | line source |
|---|---|
| Chris@1924 | 1 FROM centos:7 |
| Chris@2158 | 2 |
| Chris@2158 | 3 # Ensure that everything subsequent is re-run when a new revision is |
| Chris@2158 | 4 # being built (rather than being cached) - so as to avoid potential |
| Chris@2158 | 5 # mismatches between results of yum update and the package dependency |
| Chris@2158 | 6 # installation itself |
| Chris@2158 | 7 RUN echo [[REVISION]] |
| Chris@2158 | 8 |
| Chris@2158 | 9 RUN yum -y update |
| Chris@1924 | 10 RUN yum -y groupinstall "X Window System" |
| Chris@1924 | 11 RUN yum -y install wget |
| Chris@1924 | 12 ADD output/SonicVisualiser-[[REVISION]]-x86_64.AppImage SV.AppImage |
| Chris@1924 | 13 RUN chmod +x SV.AppImage |
| Chris@1924 | 14 RUN ./SV.AppImage --appimage-extract |
| Chris@2056 | 15 RUN ./squashfs-root/AppRun --version |