From 0fa09311e06c63ef6c5db3b923dde8d624e7f606 Mon Sep 17 00:00:00 2001 From: Alex Gaynor Date: Fri, 3 May 2019 22:41:48 -0400 Subject: Add the start of an azure pipeline for building macOS wheels (#4867) * Add the start of an azure pipeline for building macOS wheels * Split this into multiple lines * No display name on upload * Be verbose when building OpenSSL * We don't need to reinstall * Bash correctly * Use a virtualenv * Do more things in the venv * Fix order of commands * fixed pip command * Give uploads a name * Fixed key name * fixed regex and escaping * Crazy shenangins * sudo * Don't install enum34 on python3 * Fix for python2.7 * logging to the request * Use curl correctly --- .azure-pipelines/macos-wheels.yml | 68 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 68 insertions(+) create mode 100644 .azure-pipelines/macos-wheels.yml (limited to '.azure-pipelines') diff --git a/.azure-pipelines/macos-wheels.yml b/.azure-pipelines/macos-wheels.yml new file mode 100644 index 00000000..7770757d --- /dev/null +++ b/.azure-pipelines/macos-wheels.yml @@ -0,0 +1,68 @@ +trigger: none +pr: none + +jobs: + - job: 'mac' + pool: + vmImage: 'macOS-10.14' + strategy: + matrix: + Python27: + python.version: '2.7' + PYTHON_DOWNLOAD_URL: "https://www.python.org/ftp/python/2.7.16/python-2.7.16-macosx10.6.pkg" + PYTHON_BIN_PATH: /Library/Frameworks/Python.framework/Versions/2.7/bin/python + Python3: + python.version: '3.4' + PYTHON_DOWNLOAD_URL: "https://www.python.org/ftp/python/3.7.3/python-3.7.3-macosx10.6.pkg" + PYTHON_BIN_PATH: /Library/Frameworks/Python.framework/Versions/3.7/bin/python3 + steps: + - script: | + set -e + set -x + + curl "$PYTHON_DOWNLOAD_URL" -o python.pkg + sudo installer -pkg python.pkg -target / + displayName: Download and install Python + + - script: brew update + displayName: Update brew + - script: brew install openssl@1.1 + displayName: Install OpenSSL with brew + + - script: $PYTHON_BIN_PATH -m pip install -U virtualenv + displayName: Install virtualenv + - script: $PYTHON_BIN_PATH -m virtualenv .venv + displayName: Create virtualenv + - script: .venv/bin/pip install -U wheel + displayName: Update wheel to the latest version + - script: .venv/bin/pip install cffi six idna asn1crypto ipaddress "enum34; python_version < '3'" + displayName: Install our Python dependencies + + - script: | + set -e + set -x + + REGEX="3\.([0-9])*" + if [[ "$PYTHON_VERSION" =~ $REGEX ]]; then + PY_LIMITED_API="--build-option --py-limited-api=cp3${BASH_REMATCH[1]}" + fi + + CRYPTOGRAPHY_SUPPRESS_LINK_FLAGS="1" \ + LDFLAGS="/usr/local/opt/openssl@1.1/lib/libcrypto.a /usr/local/opt/openssl@1.1/lib/libssl.a" \ + CFLAGS="-I/usr/local/opt/openssl@1.1/include -mmacosx-version-min=10.9" \ + .venv/bin/pip wheel cryptography==$BUILD_VERSION --no-use-pep517 --wheel-dir=wheelhouse --no-binary cryptography --no-deps $PY_LIMITED_API + displayName: Build the wheel + - script: .venv/bin/pip install --no-index -f wheelhouse cryptography + displayName: Test installing the wheel + - script: | + .venv/bin/python -c "from cryptography.hazmat.backends.openssl.backend import backend;print('Loaded: ' + backend.openssl_version_text());print('Linked Against: ' + backend._ffi.string(backend._lib.OPENSSL_VERSION_TEXT).decode('ascii'))" + displayName: Print the OpenSSL we built and linked against + - script: otool -L `find .venv -name '_openssl*.so'` + displayName: Print everything we link against + - script: lipo -info `find .venv -name '*.so'` + displayName: Print the architectures in our fat mach-o binary + - script: otool -L `find .venv -name '_openssl*.so'` | grep -vG "libcrypto\\|libssl" + displayName: Verify that we did not link against OpenSSL + + - upload: wheelhouse/ + artifact: cryptography-python$(python.version) -- cgit v1.2.3