#45 Sign DR2 executable as well

.github/workflows/main.yml

@@ -82,7 +82,10 @@ jobs:
 
     - name: Bundle DR2 executable / PyInstaller
       run: |
-        resources\bundle-dr2.bat
+        resources\bundle-dr2.ps1
+      shell: pwsh
+      env:
+        DRTR_CODESIGN_CERTIFICATE_PASS: ${{ secrets.DRTR_CODESIGN_CERTIFICATE_PASS }}
 
     - name: Zip distribution / create-7z-action
       uses: DuckSoft/[email protected]

docs/develop.md

@@ -24,6 +24,9 @@ To bundle for DiRT Rally
 To bundle for DiRT Rally 2.0
 * Cf. job `assemble`, step `Bundle DR2` in `.github/workflows/main.yml`
 
+Hint: To invoke the .ps1 scripts, you need the Powershell Core (6 or newer) and to [allow script execution](https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_execution_policies?view=powershell-7). You should also remove the signing step 
+in the scripts if you bundle locally.
+
 # Releasing
 
 ## Requirements

resources/bundle-dr1.ps1

@@ -4,4 +4,4 @@ if (Test-Path dirtrally-lb.db) {
 bin\sqlite3 -batch -init resources\setup-dr1.sql dirtrally-lb.db .exit 
 pyinstaller timerecord.spec --noconfirm --name timerecorder-dr1
 pwsh.exe -wd resources resources\sign.ps1 -Exe ..\dist\timerecorder-dr1\timerecord.exe
-exit $LASTEXITCODE
+exit $LASTEXITCODE

resources/bundle-dr2.ps1

@@ -0,0 +1,7 @@
+if (Test-Path dirtrally-lb.db) {
+  Remove-Item -Force dirtrally-lb.db
+}
+bin\sqlite3 -batch -init resources\setup-dr2.sql dirtrally-lb.db .exit 
+pyinstaller timerecord.spec --noconfirm --name timerecorder-dr2
+pwsh.exe -wd resources resources\sign.ps1 -Exe ..\dist\timerecorder-dr2\timerecord.exe
+exit $LASTEXITCODE

resources/sign.ps1

@@ -7,8 +7,6 @@ param ($Exe = $(throw "Exe parameter is required."))
 # (Get-ChildItem Cert:\CurrentUser\My -CodeSigningCert)[0] | Export-PfxCertificate -FilePath code_signing.pfx -Password $mypwd
 ## or unprotected, or use certmgr.msc
 # Export-Certificate -Cert (Get-ChildItem Cert:\CurrentUser\My -CodeSigningCert)[0] -FilePath code_signing.crt
-## Short circuit locally
-# $env:DRTR_CODESIGN_CERTIFICATE_PASS = ConvertFrom-SecureString -SecureString $mypwd
 
 ## Apply it in CI (PWSH 6+)
 try {