@halospv3/hce.shared-config 2.6.4 → 3.0.0-develop.2

package/dotnet/ExecNupkgDeterministicator.targets

@@ -0,0 +1,173 @@
+<Project xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <!-- ExecNupkgDeterministicator
+  <Summary>
+    | Inputs                | Values/Types                | Default                     | Usage |
+    | - - - - - - - - - - - | - - - - - - - - - - - - - - | - - - - - - - - - - - - - - | - - - - - - |
+    | Deterministic         | `'true'`/`'false'`/`''`     | `'true'`                    | If true, run NupkgDeterministicator on the nupkg and snupkg (if applicable) |
+    | PackageOutputPath     | string                      | `'$(OutputPath)'`           | The directory in which the package was created |
+    | PackageId             | string                      | `'$(AssemblyName)'`         | Used to identify the nupkg and symbols package |
+    | PackageVersion        | string                      | `'$(Version)'`              | Used to identify the nupkg and symbols package |
+    | IncludeSymbols        | `'true'`/`'false'`/`''`     | `''` (falsey)               | If true, deterministicate the symbols package |
+    | SymbolPackageFormat   | `'symbols.nupkg'`/`'snupkg'`| `'symbols.nupkg'` (legacy)  | Used to identify the symbols package |
+  </Summary>
+  TODO: contribute 'Kuinox.NupkgDeterministicator.MSBuild' and deprecate this target. https://github.com/Kuinox/NupkgDeterministicator
+  https://stackoverflow.com/a/16804205/14894786
+
+  The first "finished" version of this file is located at https://gist.github.com/BinToss/5776bf9efd962e8885f4427c72498480
+   -->
+  <Target Condition="'$(Deterministic)' == 'true'" Name="ExecNupkgDeterministicator" AfterTargets="Pack">
+    <PropertyGroup>
+      <_IsAlreadyDeterministic>false</_IsAlreadyDeterministic>
+      <_PackageFullPathNoExt>$(PackageOutputPath)\$(PackageId).$(PackageVersion)</_PackageFullPathNoExt>
+      <_PackageOutputPathIsFullyQualified>$([System.IO.Path]::IsPathFullyQualified("$(PackageOutputPath)"))</_PackageOutputPathIsFullyQualified>
+      <_PackageFullPathNoExt Condition=" '$(_PackageOutputPathIsFullyQualified)' != 'true' ">$(MSBuildProjectDirectory)\$(PackageOutputPath)\$(PackageId).$(PackageVersion)</_PackageFullPathNoExt>
+      <_PackageFullPath>$(_PackageFullPathNoExt).nupkg</_PackageFullPath>
+      <_PackageSymbolsFullPath Condition=" ('$(IncludeSymbols)' == 'true')">$(_PackageFullPathNoExt).$(SymbolPackageFormat)</_PackageSymbolsFullPath>
+      <_ToolListLocalExitCode>0</_ToolListLocalExitCode>
+      <_ToolListGlobalExitCode>0</_ToolListGlobalExitCode>
+      <!-- <PATH Condition=" '$(CI)' == 'true' AND '$(OS)' == 'Unix'">/usr/share/dotnet:$(PATH)</PATH> -->
+      <_PATH_multiline Condition=" '$(OS)' == 'Unix' ">
+        $(PATH.Replace(":", $([System.Environment]::NewLine)))
+      </_PATH_multiline>
+      <_PATH_multiline Condition=" '$(OS)' == 'Windows_NT' ">
+        $(PATH.Replace(";", $([System.Environment]::NewLine)))
+      </_PATH_multiline>
+    </PropertyGroup>
+
+    <Exec Command="dotnet --info" ConsoleToMSBuild="true" />
+
+    <!-- Check if the tool is installed locally (i.e. added to './.config/dotnet-tools.json') -->
+    <Exec
+      Command="dotnet tool list kuinox.nupkgdeterministicator"
+      StandardOutputImportance="low"
+      ContinueOnError="true" >
+      <Output TaskParameter="ExitCode" PropertyName="_ToolListLocalExitCode" />
+    </Exec>
+    <!-- Check if `dotnet tool` is unavailable. Yes, this is possible. It caused a week of panic. -->
+    <!-- A. No .NET SDK could be found. Only .NET runtimes. -->
+    <!-- B. The SDK version specified in global.json is unavailable. -->
+    <Error Condition=" '$(_ToolListLocalExitCode)' == '145' " Text="
+  `dotnet tool` subcommand is unavailable: .NET SDK not found.
+  If this occurs on a GitHub Actions runner, this process's PATH may be missing the `actions/setup-dotnet` SDK path. On Ubuntu runners, this is `/usr/share/dotnet/`.
+  Alternatively, this error could may the SDK version specified in the nearest global.json is unavailable.
+  Current PATH:
+  $(_PATH_multiline)"
+    />
+    <!-- Error codes other than 0, 1, and 145 are unknown and cannot be handled. -->
+    <Error Condition=" ('$(_ToolListLocalExitCode)' != '0') AND ('$(_ToolListLocalExitCode)' != '1')"
+      Text="The Exec command 'dotnet tool list kuinox.nupkgdeterministicator' exited with the unrecognized code '$(_ToolListLocalExitCode)'."
+    />
+
+    <!-- If the tool is not installed locally, check if it's installed globally. -->
+    <Exec Condition=" '$(_ToolListLocalExitCode)' == '1' "
+      Command="dotnet tool list -g kuinox.nupkgdeterministicator"
+      StandardOutputImportance="low"
+      ContinueOnError="true"
+      ConsoleToMsBuild="true" >
+      <Output TaskParameter="ExitCode" PropertyName="_ToolListGlobalExitCode" />
+    </Exec>
+    <!-- Error codes other than 0 and 1 are unknown and cannot be handled. -->
+    <Error Condition=" ('$(_ToolListGlobalExitCode)' != '0') AND ('$(_ToolListGlobalExitCode)' != '1')"
+      Text="The Exec command 'dotnet tool list -g kuinox.nupkgdeterministicator' exited with the unrecognized code '$(_ToolListGlobalExitCode)'."
+    />
+
+    <!-- If NupkgDeterministicator not installed locally nor globally, Error -->
+    <Error Condition=" '$(_ToolListGlobalExitCode)' != '0' AND '$(_ToolListLocalExitCode)' != '0' "
+      Text="
+Kuinox.NupkgDeterministicator is unavailable. Run ONE of the following commands and try again:
+dotnet tool install -g Kuinox.NupkgDeterministicator
+dotnet tool install --create-manifest-if-needed Kuinox.NupkgDeterministicator
+" />
+
+    <PropertyGroup>
+      <_BaseCmd>NupkgDeterministicator</_BaseCmd>
+      <_BaseCmd Condition=" '$(_ToolListLocalExitCode)' == '0' ">dotnet tool run $(_BaseCmd)</_BaseCmd>
+    </PropertyGroup>
+
+    <Exec Command="dotnet tool restore" />
+
+    <!-- determinize the nupkg -->
+    <Exec
+      Command="$(_BaseCmd) $(_PackageFullPath)"
+      ConsoleToMsBuild="true"
+      IgnoreExitCode="true"
+      StandardErrorImportance="Low"
+      StandardOutputImportance="Low"
+    ><Output
+      TaskParameter="ConsoleOutput"
+      ItemName="_ConsoleOutput" />
+      <Output
+      TaskParameter="ExitCode"
+      PropertyName="_ExitCode" />
+    </Exec>
+
+    <CreateProperty Value="@(_ConsoleOutput, '
+')">
+      <Output TaskParameter="Value" PropertyName="_ConsoleOutput" />
+    </CreateProperty>
+    <CreateProperty Value="$(_ConsoleOutput.Contains('System.IO.Directory.Move'))">
+      <Output TaskParameter="Value" PropertyName="_IsAlreadyDeterministic" />
+    </CreateProperty>
+
+    <!-- Error 150 indicates that the .NET runtime required by this tool is unavailable (e.g. .NET runtime 6.0; Framework: 'Microsoft.NETCore.App', version '6.0.0' (x64)) -->
+    <!-- Error 135 indicates an unhandled exception. In the past, this was caused by an invalid path addressed by _PackageOutputPathIsFullyQualified. -->
+    <Error Condition=" '$(_ExitCode)' != '0' AND '$(_IsAlreadyDeterministic)' != 'true' "
+      Code="$(_ExitCode)"
+      Text="$(_ConsoleOutput)"
+    />
+
+    <!-- if success and exit code 0... -->
+    <Message
+      Condition=" '$(_ExitCode)' == '0' "
+      Text="Determinized package '$(_PackageFullPath)'"
+      Importance="High"
+    />
+    <!-- else if (System.IO.IOException: Source and destination path must be different.) -->
+    <Message
+      Condition=" '$(_IsAlreadyDeterministic)' == 'true' "
+      Text="Package up-to-date and deterministic ('$(_PackageFullPath)')"
+      Importance="High"
+    />
+
+    <!-- determinize the snupkg -->
+    <Exec
+      Command="$(_BaseCmd) $(_PackageSymbolsFullPath)"
+      Condition=" '$(IncludeSymbols)' == 'true' "
+      ConsoleToMsBuild="true"
+      IgnoreExitCode="true"
+      StandardErrorImportance="Low"
+      StandardOutputImportance="Low"
+    ><Output
+      TaskParameter="ConsoleOutput"
+      ItemName="ConsoleOutput" />
+      <Output
+      TaskParameter="ExitCode"
+      ItemName="ExitCode" />
+    </Exec>
+
+    <CreateProperty Value="@(_ConsoleOutput, '
+')">
+      <Output TaskParameter="Value" PropertyName="_ConsoleOutput" />
+    </CreateProperty>
+    <CreateProperty Value="$(_ConsoleOutput.Contains('System.IO.Directory.Move'))">
+      <Output TaskParameter="Value" PropertyName="_IsAlreadyDeterministic" />
+    </CreateProperty>
+
+    <Error Condition=" '$(_ExitCode)' != '0' AND '$(_IsAlreadyDeterministic)' != 'true' "
+      Code="$(_ExitCode)"
+      Text="$(_ConsoleOutput)"
+    />
+
+    <!-- if success and exit code 0... -->
+    <Message Condition=" '$(IncludeSymbols)' == 'true' AND '$(_ExitCode)' == '0' "
+      Text="Determinized package '$(_PackageSymbolsFullPath)'"
+      Importance="High"
+    />
+    <!-- else if success and exit code -532462766 (System.IO.IOException: Source and destination path must be different.) -->
+    <Message
+      Condition=" '$(IncludeSymbols)' == 'true' AND '$(_IsAlreadyDeterministic)' == 'true' "
+      Text="Package up-to-date and deterministic ('$(_PackageSymbolsFullPath)')"
+      Importance="High"
+    />
+  </Target>
+</Project>

package/dotnet/GitVersion.yml

@@ -1,6 +1,8 @@
 # yaml-language-server: $schema=https://raw.githubusercontent.com/GitTools/GitVersion/main/schemas/5.12/GitVersion.configuration.json
 # https://gitversion.net/docs/reference/configuration
 mode: Mainline
-major-version-bump-message: "^(build|chore|ci|docs|feat|fix|perf|refactor|revert|style|test)(\\([\\w\\s-]*\\))?(!:|:.*\\n\\n((.+\\n)+\\n)?BREAKING CHANGE:\\s.+)"
+major-version-bump-message:
+  "^(build|chore|ci|docs|feat|fix|perf|refactor|revert|style|test)(\\([\\w\\s-]*\\))?(!:|:.*\\n\\n((.+\\n)+\\n)?BREAKING
+  CHANGE:\\s.+)"
 minor-version-bump-message: "^(feat)(\\([\\w\\s-]*\\))?:"
 patch-version-bump-message: "^(build|chore|ci|docs|fix|perf|refactor|revert|style|test)(\\([\\w\\s-]*\\))?:"

package/dotnet/GitVersion6.0.yml

@@ -1,6 +1,8 @@
 # yaml-language-server: $schema=https://raw.githubusercontent.com/GitTools/GitVersion/main/schemas/6.0/GitVersion.configuration.json
 # https://gitversion.net/docs/reference/configuration
 workflow: TrunkBased/v1
-major-version-bump-message: "^(build|chore|ci|docs|feat|fix|perf|refactor|revert|style|test)(\\([\\w\\s-]*\\))?(!:|:.*\\n\\n((.+\\n)+\\n)?BREAKING CHANGE:\\s.+)"
+major-version-bump-message:
+  "^(build|chore|ci|docs|feat|fix|perf|refactor|revert|style|test)(\\([\\w\\s-]*\\))?(!:|:.*\\n\\n((.+\\n)+\\n)?BREAKING
+  CHANGE:\\s.+)"
 minor-version-bump-message: "^(feat)(\\([\\w\\s-]*\\))?:"
 patch-version-bump-message: "^(build|chore|ci|docs|fix|perf|refactor|revert|style|test)(\\([\\w\\s-]*\\))?:"

package/dotnet/HCE.Shared.sln

@@ -0,0 +1,34 @@
+
+Microsoft Visual Studio Solution File, Format Version 12.00
+# Visual Studio Version 17
+VisualStudioVersion = 17.0.31903.59
+MinimumVisualStudioVersion = 10.0.40219.1
+Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "samples", "samples", "{2E51AEEF-16E6-4514-9178-A28DE5B0EEC2}"
+EndProject
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "HCE.Shared.DeterministicNupkg", "samples\HCE.Shared.DeterministicNupkg\HCE.Shared.DeterministicNupkg.csproj", "{087A1847-2555-47E0-B6D0-FCD8BC100DC9}"
+EndProject
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "HCE.Shared.SignAfterPack", "samples\HCE.Shared.SignAfterPack\HCE.Shared.SignAfterPack.csproj", "{F7577073-D5A0-48AC-8D86-6AE193BE6274}"
+EndProject
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Release|Any CPU = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+	GlobalSection(ProjectConfigurationPlatforms) = postSolution
+		{087A1847-2555-47E0-B6D0-FCD8BC100DC9}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{087A1847-2555-47E0-B6D0-FCD8BC100DC9}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{087A1847-2555-47E0-B6D0-FCD8BC100DC9}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{087A1847-2555-47E0-B6D0-FCD8BC100DC9}.Release|Any CPU.Build.0 = Release|Any CPU
+		{F7577073-D5A0-48AC-8D86-6AE193BE6274}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{F7577073-D5A0-48AC-8D86-6AE193BE6274}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{F7577073-D5A0-48AC-8D86-6AE193BE6274}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{F7577073-D5A0-48AC-8D86-6AE193BE6274}.Release|Any CPU.Build.0 = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(NestedProjects) = preSolution
+		{087A1847-2555-47E0-B6D0-FCD8BC100DC9} = {2E51AEEF-16E6-4514-9178-A28DE5B0EEC2}
+		{F7577073-D5A0-48AC-8D86-6AE193BE6274} = {2E51AEEF-16E6-4514-9178-A28DE5B0EEC2}
+	EndGlobalSection
+EndGlobal

package/dotnet/HCE.Shared.targets

@@ -2,6 +2,7 @@
     Import all other .props and .targets in this directory
     If you import this, you don't need to import anything else. -->
 <Project Label="All HCE.Shared Properties and Targets">
+  <Import Project="./ExecNupkgDeterministicator.targets" />
   <Import Project="./HCE.Shared.CI.props" />
   <Import Project="./ZipPublishDir.targets" />
   <!-- Must be explicitly targeted via 'dotnet project.csproj -t:PublishAll'. May lead to incompatibility errors -->

package/dotnet/PublishAll.targets

@@ -13,6 +13,8 @@
       Multi-runtimes?
       Only useful if you need Self-Contained i.e. include the runtime with your project.
       If you want to publish Single-File, you don't *need* Self-Contained. Just inform users they must install a particular runtime/framework beforehand.
+
+      Note: "PlatformTarget" (CPU arch) is overridden by RuntimeIdentifier.
   -->
 <Project>
 

package/dotnet/SignAfterPack.targets

@@ -0,0 +1,104 @@
+<!-- Inputs:
+  bool   IncludeSymbols
+  string PackageId
+  string PackageOutputPath
+  string PackageVersion
+  /// formats: ["symbols.nupkg", "snupkg"]
+  string SymbolPackageFormat = "symbols.nupkg";
+
+  Also, see PropertyGroup 'DotnetNugetSign'
+-->
+<Project>
+  <PropertyGroup Condition=" '$(AssemblyName)' == '' ">
+    <AssemblyName>HCE.Shared.SignAfterPack</AssemblyName>
+    <PackageOutputPath>$(MSBuildThisFileDirectory)samples\HCE.Shared.SignAfterPack\bin\Release\</PackageOutputPath>
+    <PackageId>AssemblyName</PackageId>
+    <PackageVersion>1.0.0</PackageVersion>
+    <SymbolPackageFormat>symbols.nupkg</SymbolPackageFormat>
+  </PropertyGroup>
+
+  <PropertyGroup Label="DotnetNugetSign">
+    <!-- Directory where the signed package(s) should be saved. By default the original package is overwritten by the signed package. -->
+    <DotnetNugetSignOutput Condition=" '$(DotnetNugetSignOutput)' == '' "></DotnetNugetSignOutput>
+    <!-- File path to the certificate to be used while signing the package. -->
+    <DotnetNugetSignCertificatePath Condition=" '$(DotnetNugetSignCertificatePath)' == '' "></DotnetNugetSignCertificatePath>
+    <!-- (default: "My") Name of the X.509 certificate store to use to search for the certificate. Defaults to "My", the X.509 certificate store for personal certificates. This option should be used when specifying the certificate via $(DotnetNugetSignCertificateSubjectName) or $(DotnetNugetSignCertificateFingerprint). 
+        (values: ["AddressBook","AuthRoot","CertificateAuthority","Disallowed","My","Root","TrustedPeople","TrustedPublisher"])
+    -->
+    <DotnetNugetSignCertificateStoreName Condition=" '$(DotnetNugetSignCertificateStoreName)' == '' "></DotnetNugetSignCertificateStoreName>
+    <!-- (default: "CurrentUser") Name of the X.509 certificate store to use to search for the certificate. Defaults to "CurrentUser", the X.509 certificate store used by the current user. This option should be used when specifying the certificate via $(DotnetNugetSignCertificateSubjectName) or $(DotnetNugetSignCertificateFingerprint). -->
+    <DotnetNugetSignCertificateStoreLocation Condition=" '$(DotnetNugetSignCertificateStoreLocation)' == '' "></DotnetNugetSignCertificateStoreLocation>
+    <!-- (required if DotnetNugetSignCertificatePath unspecified) Subject name of the certificate used to search a local certificate store for the certificate. The search is a case-insensitive string comparison using the supplied value, which will find all certificates with the subject name containing that string, regardless of other subject values. The certificate store can be specified by $(DotnetNugetSignCertificateStoreName) and $(DotnetNugetSignCertificateStoreLocation) options. -->
+    <DotnetNugetSignCertificateSubjectName Condition=" '$(DotnetNugetSignCertificateSubjectName)' == '' "></DotnetNugetSignCertificateSubjectName>
+    <!-- (required if DotnetNugetSignCertificatePath unspecified) SHA-1 fingerprint of the certificate used to search a local certificate store for the certificate. The certificate store can be specified by $(DotnetNugetSignCertificateStoreName) and $(DotnetNugetSignCertificateStoreLocation) options. -->
+    <DotnetNugetSignCertificateFingerprint Condition=" '$(DotnetNugetSignCertificateFingerprint)' == '' "></DotnetNugetSignCertificateFingerprint>
+    <!-- Password for the certificate, if needed. This option can be used to specify the password for the certificate. The command will throw an error message if certificate is password protected but password is not provided as input. -->
+    <DotnetNugetSignCertificatePassword Condition=" '$(DotnetNugetSignCertificatePassword)' == '' "></DotnetNugetSignCertificatePassword>
+    <!-- (default: "SHA256") Hash algorithm to be used by the RFC 3161 timestamp server. Defaults to SHA256. -->
+    <DotnetNugetSignHashAlgorithm Condition=" '$(DotnetNugetSignHashAlgorithm)' == '' "></DotnetNugetSignHashAlgorithm>
+    <!-- URL to an RFC 3161 timestamping server. Signed packages should include a timestamp to make sure the signature remains valid when the signing certificate has expired. Else the sign operation will produce a warning. See NU3002 (https://learn.microsoft.com/en-us/nuget/reference/errors-and-warnings/nu3002)
+         (Noah Sherwin: for the sake of convenience, I have set the default value of this property to https://rfc3161.ai.moda/) -->
+    <DotnetNugetSignTimestamper Condition=" '$(DotnetNugetSignTimestamper)' == '' ">https://rfc3161.ai.moda/</DotnetNugetSignTimestamper>
+    <!-- (default: "SHA256") Hash algorithm to be used by the RFC 3161 timestamp server. Defaults to SHA256. -->
+    <DotnetNugetSignTimestampHashAlgorithm Condition=" '$(DotnetNugetSignTimestampHashAlgorithm)' == '' "></DotnetNugetSignTimestampHashAlgorithm>
+    <!-- (default: false) Switch to indicate if the current signature should be overwritten. By default the command will fail if the package already has a signature. -->
+    <DotnetNugetSignOverwrite Condition=" '$(DotnetNugetSignOverwrite)' == '' "></DotnetNugetSignOverwrite>
+  </PropertyGroup>
+
+  <Target Name="SignAfterPack" AfterTargets="Pack">
+    <PropertyGroup>
+    
+      <_PackageFileName>$(PackageId).$(PackageVersion).nupkg</_PackageFileName>
+      <_PackageFullPath>$([MSBuild]::NormalizePath($(PackageOutputPath), $(_PackageFileName)))</_PackageFullPath>
+      <_PackageFullPath>$([System.IO.Path]::GetRelativePath($(MSBuildProjectDirectory), $(_PackageFullPath)))</_PackageFullPath>
+
+      <_SymbolPackageFileName>$(PackageId).$(PackageVersion).$(SymbolPackageFormat)</_SymbolPackageFileName>
+      <_SymbolPackageFullPath>$([MSBuild]::NormalizePath($(PackageOutputPath), $(_SymbolPackageFileName)))</_SymbolPackageFullPath>
+      <_SymbolPackageFullPath>$([System.IO.Path]::GetRelativePath($(MSBuildProjectDirectory), $(_SymbolPackageFullPath)))</_SymbolPackageFullPath>
+
+      <!-- If a value contains a Space and is not enclosed by Double-Quotes, enclose it -->
+      <_space>$([MSBuild]::Escape(' '))</_space>
+      <_dquote>"</_dquote>
+      <_PackageFullPath Condition=" '$(_PackageFullPath.Contains($(_space)))' == 'true' AND '$(_PackageFullPath.StartsWith($(_dquote)))' == 'false' AND '$(_PackageFullPath.EndsWith($(_dquote)))' == 'false' ">"$(_PackageFullPath)"</_PackageFullPath>
+      <_SymbolPackageFullPath Condition=" '$(_SymbolPackageFullPath.Contains($(_space))' == 'true' AND '$(_SymbolPackageFullPath.StartsWith($(_dquote)))' == 'false' AND '$(_SymbolPackageFullPath.EndsWith($(_dquote)))' == 'false' ">"$(_SymbolPackageFullPath)"</_SymbolPackageFullPath>
+      <DotnetNugetSignOutput Condition=" '$(DotnetNugetSignOutput.Contains($(_space))' == 'true' AND '$(DotnetNugetSignOutput.StartsWith($(_dquote))' == 'false' AND '$(DotnetNugetSignOutput.EndsWith($(_dquote))' == 'false' ">"$(DotnetNugetSignOutput)</DotnetNugetSignOutput>
+      <DotnetNugetSignCertificatePath Condition=" '$(DotnetNugetSignCertificatePath.Contains($(_space))' == 'true' AND '$(DotnetNugetSignCertificatePath.StartsWith($(_dquote))' == 'false' AND '$(DotnetNugetSignCertificatePath.EndsWith($(_dquote))' == 'false' ">"$(DotnetNugetSignCertificatePath)"</DotnetNugetSignCertificatePath>
+      <DotnetNugetSignCertificateStoreName Condition=" '$(DotnetNugetSignCertificateStoreName.Contains($(_space))' == 'true' AND '$(DotnetNugetSignCertificateStoreName.StartsWith($(_dquote))' == 'false' AND '$(DotnetNugetSignCertificateStoreName.EndsWith($(_dquote))' == 'false' ">"$(DotnetNugetSignCertificateStoreName)"</DotnetNugetSignCertificateStoreName>
+      <DotnetNugetSignCertificateStoreLocation Condition=" '$(DotnetNugetSignCertificateStoreLocation.Contains($(_space))' == 'true' AND '$(DotnetNugetSignCertificateStoreLocation.StartsWith($(_dquote))' == 'false' AND '$(DotnetNugetSignCertificateStoreLocation.EndsWith($(_dquote))' == 'false' ">"$(DotnetNugetSignCertificateStoreLocation)"</DotnetNugetSignCertificateStoreLocation>
+      <DotnetNugetSignCertificateSubjectName Condition=" '$(DotnetNugetSignCertificateSubjectName.Contains($(_space))' == 'true' AND '$(DotnetNugetSignCertificateSubjectName.StartsWith($(_dquote))' == 'false' AND '$(DotnetNugetSignCertificateSubjectName.EndsWith($(_dquote))' == 'false' ">"$(DotnetNugetSignCertificateSubjectName)"</DotnetNugetSignCertificateSubjectName>
+      <DotnetNugetSignCertificateFingerprint Condition=" '$(DotnetNugetSignCertificateFingerprint.Contains($(_space))' == 'true' AND '$(DotnetNugetSignCertificateFingerprint.StartsWith($(_dquote))' == 'false' AND '$(DotnetNugetSignCertificateFingerprint.EndsWith($(_dquote))' == 'false' ">"$(DotnetNugetSignCertificateFingerprint)"</DotnetNugetSignCertificateFingerprint>
+      <DotnetNugetSignCertificatePassword Condition=" '$(DotnetNugetSignCertificatePassword.Contains($(_space))' == 'true' AND '$(DotnetNugetSignCertificatePassword.StartsWith($(_dquote))' == 'false' AND '$(DotnetNugetSignCertificatePassword.EndsWith($(_dquote))' == 'false' ">"$(DotnetNugetSignCertificatePassword)"</DotnetNugetSignCertificatePassword>
+      <DotnetNugetSignHashAlgorithm Condition=" '$(DotnetNugetSignHashAlgorithm.Contains($(_space))' == 'true' AND '$(DotnetNugetSignHashAlgorithm.StartsWith($(_dquote))' == 'false' AND '$(DotnetNugetSignHashAlgorithm.EndsWith($(_dquote))' == 'false' ">"$(DotnetNugetSignHashAlgorithm)"</DotnetNugetSignHashAlgorithm>
+      <DotnetNugetSignTimestamper Condition=" '$(DotnetNugetSignTimestamper.Contains($(_space))' == 'true' AND '$(DotnetNugetSignTimestamper.StartsWith($(_dquote))' == 'false' AND '$(DotnetNugetSignTimestamper.EndsWith($(_dquote))' == 'false' ">"$(DotnetNugetSignTimestamper)"</DotnetNugetSignTimestamper>
+      <DotnetNugetSignTimestampHashAlgorithm Condition=" '$(DotnetNugetSignTimestampHashAlgorithm.Contains($(_space))' == 'true' AND '$(DotnetNugetSignTimestampHashAlgorithm.StartsWith($(_dquote))' == 'false' AND '$(DotnetNugetSignTimestampHashAlgorithm.EndsWith($(_dquote))' == 'false' ">"$(DotnetNugetSignTimestampHashAlgorithm)"</DotnetNugetSignTimestampHashAlgorithm>
+      <DotnetNugetSignOverwrite Condition=" '$(DotnetNugetSignOverwrite.Contains($(_space))' == 'true' AND '$(DotnetNugetSignOverwrite.StartsWith($(_dquote))' == 'false' AND '$(DotnetNugetSignOverwrite.EndsWith($(_dquote))' == 'false' ">"$(DotnetNugetSignOverwrite)"</DotnetNugetSignOverwrite>
+      
+      <!-- _argsDotnetNugetSign -->
+      
+      <_argsDotnetNugetSignOutput Condition=" '$(DotnetNugetSignOutput)' != '' ">--output $(DotnetNugetSignOutput)</_argsDotnetNugetSignOutput>
+      <_argsDotnetNugetSignCertificatePath Condition=" '$(DotnetNugetSignCertificatePath)' != '' ">--certificate-path $(DotnetNugetSignCertificatePath.Trim())</_argsDotnetNugetSignCertificatePath>
+      <_argsDotnetNugetSignCertificateStoreName Condition=" '$(DotnetNugetSignCertificateStoreName)' != '' ">--certificate-store-name $(DotnetNugetSignCertificateStoreName)</_argsDotnetNugetSignCertificateStoreName>
+      <_argsDotnetNugetSignCertificateStoreLocation Condition=" '$(DotnetNugetSignCertificateStoreLocation)' != '' ">--certificate-store-location $(DotnetNugetSignCertificateStoreLocation)</_argsDotnetNugetSignCertificateStoreLocation>
+      <_argsDotnetNugetSignCertificateSubjectName Condition=" '$(DotnetNugetSignCertificateSubjectName)' != '' ">--certificate-subject-name $(DotnetNugetSignCertificateSubjectName)</_argsDotnetNugetSignCertificateSubjectName>
+      <_argsDotnetNugetSignCertificateFingerprint Condition=" '$(DotnetNugetSignCertificateFingerprint)' != '' ">--certificate-fingerprint $(DotnetNugetSignCertificateFingerprint)</_argsDotnetNugetSignCertificateFingerprint>
+      <_argsDotnetNugetSignCertificatePassword Condition=" '$(DotnetNugetSignCertificatePassword)' != '' ">--certificate-password $(DotnetNugetSignCertificatePassword)</_argsDotnetNugetSignCertificatePassword>
+      <_argsDotnetNugetSignHashAlgorithm Condition=" '$(DotnetNugetSignHashAlgorithm)' != '' ">--hash-algorithm $(DotnetNugetSignHashAlgorithm)</_argsDotnetNugetSignHashAlgorithm>
+      <_argsDotnetNugetSignTimestamper Condition=" '$(DotnetNugetSignTimestamper)' != '' ">--timestamper $(DotnetNugetSignTimestamper)</_argsDotnetNugetSignTimestamper>
+      <_argsDotnetNugetSignTimestampHashAlgorithm Condition=" '$(DotnetNugetSignTimestampHashAlgorithm)' != '' ">--timestamp-hash-algorithm $(DotnetNugetSignTimestampHashAlgorithm)</_argsDotnetNugetSignTimestampHashAlgorithm>
+      <_argsDotnetNugetSignOverwrite Condition=" '$(DotnetNugetSignOverwrite)' == 'true' ">--overwrite</_argsDotnetNugetSignOverwrite>
+    </PropertyGroup>
+
+    <ItemGroup>
+      <_args Include="$(_argsDotnetNugetSignOutput);$(_argsDotnetNugetSignCertificatePath)$(_argsDotnetNugetSignCertificateStoreName);$(_argsDotnetNugetSignCertificateStoreLocation);$(_argsDotnetNugetSignCertificateSubjectName);$(_argsDotnetNugetSignCertificateFingerprint);$(_argsDotnetNugetSignCertificatePassword);$(_argsDotnetNugetSignHashAlgorithm);$(_argsDotnetNugetSignTimestamper);$(_argsDotnetNugetSignTimestampHashAlgorithm);$(_argsDotnetNugetSignOverwrite)" />      <_PackageOutputs Include="$(_PackageFullPath)" />
+      <_PackageOutputs Condition=" '$(IncludeSymbols)' == 'true' " Include="$(_SymbolPackageFullPath)" />
+    </ItemGroup>
+
+    <Exec Condition=" '$(_SignAfterPackVerbose)' == 'true' "
+      Command="echo dotnet nuget sign @(_PackageOutputs, ' ') @(_args, ' ')" />
+    <Exec Command="dotnet nuget sign @(_PackageOutputs, ' ') @(_args, ' ')" />
+  </Target>
+
+  <!-- 
+  Todo: explore potential use of Nuget.Packaging's Signing namespace. See https://www.nuget.org/packages/NuGet.Packaging, https://github.com/NuGet/NuGet.Client/tree/dev/src/NuGet.Core/NuGet.Packaging/Signing
+  -->
+</Project>

package/dotnet/samples/HCE.Shared.DeterministicNupkg/Dummy.cs

@@ -0,0 +1,6 @@
+namespace HCE.Shared.SamplePackage
+{
+    public interface IDummy
+    {
+    }
+}

package/dotnet/samples/HCE.Shared.DeterministicNupkg/HCE.Shared.DeterministicNupkg.csproj

@@ -0,0 +1,21 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <Description>A sample project for use by https://github.com/HaloSPV3/HCE.Shared. This package is published to test MSBuild Targets and other .NET/MSBuild capabilities.</Description>
+    <RepositoryUrl>https://github.com/HaloSPV3/HCE.Shared</RepositoryUrl>
+    <DevelopmentDependency>true</DevelopmentDependency>
+    <GenerateFullPaths>true</GenerateFullPaths>
+    <IncludeSymbols>true</IncludeSymbols>
+    <PackageOutputPath>packages</PackageOutputPath>
+    <SymbolPackageFormat>snupkg</SymbolPackageFormat>
+    <TargetFramework>netstandard2.0</TargetFramework>
+    <Version>0.0.1-DUMMY</Version>
+  </PropertyGroup>
+
+  <!--
+  Executes Kuinox.NupkgDeterministicator after Pack to make the nupkg
+  (and symbols package, if applicable) deterministic.
+  See the targets file for its usage -->
+  <Import Project="../../ExecNupkgDeterministicator.targets" />
+
+</Project>

package/dotnet/samples/HCE.Shared.SignAfterPack/Class1.cs

@@ -0,0 +1,6 @@
+namespace HCE.Shared.SignAfterPack;
+
+public class Class1
+{
+
+}

package/dotnet/samples/HCE.Shared.SignAfterPack/HCE.Shared.SignAfterPack.csproj

@@ -0,0 +1,21 @@
+<Project Sdk="Microsoft.NET.Sdk">
+  <PropertyGroup>
+    <Description>A sample project for use by https://github.com/HaloSPV3/HCE.Shared. This package is published to test MSBuild Targets and other .NET/MSBuild capabilities.</Description>
+    <RepositoryUrl>https://github.com/HaloSPV3/HCE.Shared</RepositoryUrl>
+    <DevelopmentDependency>true</DevelopmentDependency>
+    <TargetFramework>net8.0</TargetFramework>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <Nullable>enable</Nullable>
+    <IncludeSymbols>true</IncludeSymbols>
+    <SymbolPackageFormat>snupkg</SymbolPackageFormat>
+  </PropertyGroup>
+
+  <PropertyGroup>
+    <!-- This is a throwaway certificate used only for test-signing this project's nupkg.
+    Never `git add *.pfx` nor `git add` a password. -->
+    <DotnetNugetSignCertificatePassword>0</DotnetNugetSignCertificatePassword>
+    <DotnetNugetSignCertificatePath>./sampleCert.samplepfx</DotnetNugetSignCertificatePath>
+    <DotnetNugetSignOverwrite>true</DotnetNugetSignOverwrite>
+  </PropertyGroup>
+  <Import Project="../../SignAfterPack.targets" />
+</Project>

package/dotnet/samples/README.md

@@ -0,0 +1,7 @@
+# HCE.Shared/dotnet/samples
+
+.NET projects for unit tests and usage examples.
+
+Note to contributors: if a sample project is added, add it to the destructured
+object exported by
+[MSBuildProject.test.ts](../../tests/dotnet/MSBuildProject.test.ts).