migrate to 1ES - first draft (#325)

Author: davidmrdavid

eng/ci/official-build.yml

@@ -0,0 +1,42 @@
+parameters:
+- name: binlog
+  displayName: MSBuild binary log
+  type: boolean
+  default: false
+
+variables:
+  - template: ci/variables/cfs.yml@eng
+
+trigger:
+    batch: true
+    branches:
+        include:
+            - main
+
+# CI only, does not trigger on PRs.
+pr: none
+
+resources:
+    repositories:
+        - repository: 1es
+          type: git
+          name: 1ESPipelineTemplates/1ESPipelineTemplates
+          ref: refs/tags/release
+        - repository: eng
+          type: git
+          name: engineering
+          ref: refs/tags/release
+
+extends:
+    template: v1/1ES.Official.PipelineTemplate.yml@1es
+    parameters:
+        pool:
+            name: 1es-pool-azfunc
+            image: 1es-windows-2022
+            os: windows
+
+        stages:
+            - stage: BuildAndSign
+              dependsOn: []
+              jobs:
+                  - template: /eng/templates/build.yml@self

eng/templates/build.yml

@@ -0,0 +1,81 @@
+jobs:
+    - job: Build
+
+      templateContext:
+          outputs:
+              - output: pipelineArtifact
+                path: $(pkg_dir)
+                artifact: drop
+                sbomBuildDropPath: $(System.DefaultWorkingDirectory)
+                sbomPackageName: 'DurableTask-Dotnet SBOM'
+
+      variables:
+        project: 'src/dirs.proj'
+        bin_dir: 'out/bin'
+        log_dir: 'out/log'
+        pkg_dir: 'out/pkg'
+        build_args: -c release -p:FileVersionRevision=$(Build.BuildId) -p:ContinuousIntegrationBuild=true
+        ${{ if parameters.binlog }}:
+            build_binlog: -bl:$(log_dir)/build.binlog
+            pack_binlog: -bl:$(log_dir)/pack.binlog
+        ${{ else }}:
+            build_binlog: ''
+            pack_binlog: ''
+
+      steps:
+        - checkout: self
+          submodules: true
+
+        - task: UseDotNet@2
+          displayName: 'Install .NET 6 SDK (ESRP)' # This is needed for ESRP.
+          inputs:
+            packageType: 'sdk'
+            version: '6.x'
+
+        - task: UseDotNet@2
+          displayName: 'Install .NET SDK (Build)' # This is needed for the build.
+          inputs:
+            packageType: 'sdk'
+            useGlobalJson: true
+
+        # Start by restoring all the dependencies. This needs to be its own task.
+        - task: DotNetCoreCLI@2
+          displayName: Restore
+          inputs:
+            command: restore
+            verbosityRestore: Minimal
+            projects: $(project)
+            feedsToUse: config
+            nugetConfigPath: nuget.config
+
+        # Build source directory
+        - task: DotNetCoreCLI@2
+          displayName: Build
+          inputs:
+            command: build
+            arguments: --no-restore $(build_args) $(build_binlog)
+            projects: $(project)
+
+        - template: ci/sign-files.yml@eng
+          parameters:
+            displayName: Sign assemblies
+            folderPath: $(bin_dir)
+            pattern: Microsoft.DurableTask.*.dll
+            signType: dll
+
+        # Packaging needs to be a separate step from build.
+        # This will automatically pick up the signed DLLs.
+        - task: DotNetCoreCLI@2
+          displayName: Pack
+          inputs:
+            command: custom
+            custom: pack
+            arguments: --no-build $(build_args) $(pack_binlog)
+            projects: $(project)
+
+        - template: ci/sign-files.yml@eng
+          parameters:
+            displayName: Sign NugetPackages
+            folderPath: $(build.artifactStagingDirectory)
+            pattern: '*.nupkg'
+            signType: nuget