Microbuild sign (#12748)

* [Build] Sign with MicroBuild

* [Build] Remove build-sign step

* [Build] Use main again

* [Build] Update SignList.xml

Author: rmarinho

azure-pipelines.yml

@@ -26,7 +26,7 @@ resources:
       type: github
       name: xamarin/yaml-templates
       endpoint: xamarin
-      ref: refs/heads/main # still defaults to master even though main is the main branch
+      ref: refs/heads/main
 
 trigger:
   branches:
@@ -310,14 +310,13 @@ stages:
       dependsOn: windows
       displayName: Sign Nuget
       jobs:
-        - job: nuget_sign
-          displayName: Sign Phase
-          pool:
-            name: $(signVmImage)
-            demands:
-              msbuild
-          steps:
-            - template: build/steps/build-sign.yml
-          condition: and(succeeded(), ne(variables['signVmImage'], ''), or(eq(variables['Sign'], 'true'), or(eq(variables['Build.SourceBranch'], 'refs/heads/master'), startsWith(variables['Build.SourceBranch'],'refs/tags/'))))
+        - template: sign-artifacts/jobs/v2.yml@xamarin-templates
+          parameters:
+            targetFolder: $(Build.ArtifactStagingDirectory)/nuget/signed
+            artifactPath: release
+            signedArtifactName: nuget
+            signedArtifactPath: signed
+            displayName: Sign Phase
+            condition: and(succeeded(), ne(variables['signVmImage'], ''), or(eq(variables['Sign'], 'true'), or(eq(variables['Build.SourceBranch'], 'refs/heads/master'), startsWith(variables['Build.SourceBranch'],'refs/tags/'))))
 
 

build/SignList.xml

@@ -0,0 +1,22 @@
+<Project xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+
+  <ItemGroup>
+    <FirstParty Include="Xamarin.Forms.*.dll" />
+    <FirstParty Include="FormsViewGroup.dll" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <ThirdParty Include="GMap.NET.Core.dll" />
+    <ThirdParty Include="GMap.NET.GTK.dll" />
+    <ThirdParty Include="webkit-sharp.dll" />
+    <ThirdParty Include="Mono.Cecil.dll" />
+    <ThirdParty Include="Mono.Cecil.*.dll" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <Skip Include="System.*.dll" />
+    <Skip Include="NuGet.*.dll" />
+    <Skip Include="Mono.*.dll" />
+  </ItemGroup>
+
+</Project>

build/steps/build-nuget.yml

@@ -15,6 +15,12 @@ steps:
       SourceFolder: '$(Build.ArtifactsDirectory)/win_build'
       TargetFolder: '$(System.DefaultWorkingDirectory)'
 
+  - task: CopyFiles@2
+    displayName: 'Copy SignList.xml Files'
+    inputs:
+      Contents: build/SignList.xml
+      TargetFolder: '$(build.artifactstagingdirectory)/nuget'
+      flattenFolders: true
 
   - task: PowerShell@1
     displayName: 'Generate docs from docs repo'
@@ -38,6 +44,13 @@ steps:
       versioningScheme: byEnvVar
       versionEnvVar: nugetPackageVersion
       configuration: $(buildConfiguration)
+  
+  - task: CopyFiles@2
+    displayName: 'Copy SignList.xml Files'
+    inputs:
+      Contents: build/SignList.xml
+      TargetFolder: '$(build.artifactstagingdirectory)/nuget/debug'
+      flattenFolders: true
 
 
   - powershell: |
@@ -53,7 +66,7 @@ steps:
        }
     failOnStderr: true
     displayName: 'Update nuspecs'
-    condition: and(succeeded(), or(eq(variables['DefaultBuildConfiguration'], 'Release'), eq(variables['Build.SourceBranch'], 'refs/heads/master'), startsWith(variables['Build.SourceBranch'],'refs/tags/')))
+    condition: and(succeeded(), or(eq(variables['Sign'], 'true'), or(eq(variables['DefaultBuildConfiguration'], 'Release'), eq(variables['Build.SourceBranch'], 'refs/heads/master'), startsWith(variables['Build.SourceBranch'],'refs/tags/'))))
 
   - task: NuGetCommand@2
     displayName: 'Make NuGet Package Release'
@@ -64,7 +77,14 @@ steps:
       packDestination: '$(Build.ArtifactStagingDirectory)/nuget/release'
       versioningScheme: byEnvVar
       versionEnvVar: nugetPackageVersion
-    condition: and(succeeded(), or(eq(variables['DefaultBuildConfiguration'], 'Release'), eq(variables['Build.SourceBranch'], 'refs/heads/master'), startsWith(variables['Build.SourceBranch'],'refs/tags/')))
+    condition: and(succeeded(), or(eq(variables['Sign'], 'true'), or(eq(variables['DefaultBuildConfiguration'], 'Release'), eq(variables['Build.SourceBranch'], 'refs/heads/master'), startsWith(variables['Build.SourceBranch'],'refs/tags/'))))
+
+  - task: CopyFiles@2
+    displayName: 'Copy SignList.xml Files'
+    inputs:
+      Contents: build/SignList.xml
+      TargetFolder: '$(build.artifactstagingdirectory)/nuget/release'
+      flattenFolders: true
 
   - task: PublishBuildArtifacts@1
     displayName: 'Publish Artifact: nuget'