Repository navigation
ci: build a test-signed MSI installer - #148
Open
eiz-claude wants to merge 1 commit into
Open
eiz-claude wants to merge 1 commit into
eiz-claude wants to merge 1 commit into
Conversation
Adds an installer job that builds SarInstallerActions and the WiX SarInstaller project around the test-signed driver and the x64/x86 SarAsio builds, and uploads it with the test certificate and install steps as sar-installer-x64-testsigned. WiX comes from the pinned 3.14 binaries zip, checked by hash. Product.wxs takes its input locations and version from preprocessor variables (defaulting to the old relative paths), the wixproj finds the difxapp wixlibs through $(WixExtDir) instead of a hard-coded WiX 3.10 install, and SarInstallerActions also looks in the WiX 3.14 SDK's include directory. CI now also runs on pushes to vnext and on every PR, so PRs stacked on other branches get builds. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
eiz
marked this pull request as ready for review
October 3, 2026 20:13
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds an
installerjob tobuild.ymlthat builds the WiXSarInstallerproject into a test-signed MSI, so a CI build can be installed by hand.SarInstallerActions(x64) and packages the test-signed driver from thedriverjob with the x64 and x86 SarAsio builds from theusermodejobs.sar-installer-x64-testsigned: the MSI, that run'stestsign.cer, SHA256SUMS and a README with the install steps (test signing on, trust the certificate in Root and TrustedPublisher,msiexec /i). It only installs on machines with test signing on. A redistributable MSI has to wrap the attestation-signed driver, so it can only be built after signing.Product.wxstakes its input paths and version from preprocessor variables. The defaults are the old relative paths, so a Visual Studio build works as before.$(WixExtDir)instead of a hard-coded WiX 3.10 install path.SarInstallerActionsalso searches the WiX 3.14 SDK'ssdk\inc.vnextand on every PR, whatever its base branch, so PRs stacked on this one get builds.Tested
Fork CI run: all four jobs pass; the MSI is 2.2 MB.
On the Windows 11 25H2 test VM (test signing on, Driver Verifier on), I installed that run's MSI silently, checked the state after install and after uninstall, then restored the VM:
ROOT\MEDIA\0000, status OK, hardware IDSW\{0BCFFA5C-…}SynchronousAudioRouterdriversystem32\driversSarAsio_x64.dll/SarAsio.dll🤖 Generated with Claude Code