enricobuehler
48f980ebb1
Build/sign/install script for the wdk-sys/windows-drivers-rs driver in packaging/windows/drivers/ (the new tree lacked one). Like the old vdisplay-driver/deploy-dev.ps1 but adds the FORCE_INTEGRITY clear (this tree links /INTEGRITYCHECK) and a 9.9.MMdd.HHmm DriverVer (the vendored build is 9.5.*). Verified: deployed the rebuilt driver to the RTX box (.173). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
81 lines
4.0 KiB
PowerShell
81 lines
4.0 KiB
PowerShell
#requires -Version 5.1
|
|
<#
|
|
.SYNOPSIS
|
|
Build-stage-sign-install the NEW-tree pf-vdisplay UMDF IddCx driver (packaging/windows/drivers/) for
|
|
local dev/test on the RTX box. The wdk-sys / windows-drivers-rs analogue of the superseded
|
|
vdisplay-driver/deploy-dev.ps1.
|
|
|
|
.DESCRIPTION
|
|
Stages the freshly built pf_vdisplay.dll, CLEARS its FORCE_INTEGRITY PE bit (this tree's wdk-build links
|
|
/INTEGRITYCHECK, which a self-signed cert can't satisfy — the old wdf-umdf tree didn't), signs it with
|
|
the self-signed test cert, stamps a STRICTLY-INCREASING DriverVer into the INF, generates + signs the
|
|
catalog, and (with -Install) pnputil-installs it.
|
|
|
|
Build first: from packaging/windows/drivers/, in an MSVC dev shell with LIBCLANG_PATH +
|
|
Version_Number=10.0.26100.0, run `cargo build`.
|
|
|
|
Re-deploying needs a HIGHER DriverVer than the installed one or pnputil silently keeps the old binary —
|
|
hence the 9.9.MMdd.HHmm scheme (the vendored build is 9.5.*). If the host service is running it holds the
|
|
driver: `punktfunk-host service stop`, deploy, then start it, for a clean test.
|
|
.PARAMETER Install
|
|
Also add the driver package to the store + (if absent) create the Root\pf_vdisplay devnode via nefconc.
|
|
Needs an ELEVATED shell.
|
|
#>
|
|
[CmdletBinding()]
|
|
param(
|
|
[string]$Stage = 'C:\Users\Public\pfvd-stage-deploy',
|
|
[string]$Thumbprint = '6A52984E54376C45A1C236B1A2C8A746C5AB6131',
|
|
[string]$Nefconc = 'C:\Users\Public\virtual-display-rs\installer\files\nefconc.exe',
|
|
[switch]$Install
|
|
)
|
|
$ErrorActionPreference = 'Stop'
|
|
|
|
$root = Split-Path -Parent $MyInvocation.MyCommand.Path
|
|
$dll = Join-Path $root 'target\x86_64-pc-windows-msvc\debug\pf_vdisplay.dll'
|
|
$inx = Join-Path $root 'pf-vdisplay\pf_vdisplay.inx'
|
|
$clear = Join-Path $root '..\clear-force-integrity.ps1'
|
|
if (-not (Test-Path $dll)) { throw "driver not built: $dll (cargo build in packaging/windows/drivers first)" }
|
|
|
|
$kits = 'C:\Program Files (x86)\Windows Kits\10\bin'
|
|
function Find-Tool([string]$name, [string]$arch) {
|
|
(Get-ChildItem "$kits\*\$arch\$name" -EA SilentlyContinue | Sort-Object FullName | Select-Object -Last 1).FullName
|
|
}
|
|
$signtool = Find-Tool 'signtool.exe' 'x64'
|
|
$stampinf = Find-Tool 'stampinf.exe' 'x64'
|
|
$inf2cat = Find-Tool 'Inf2Cat.exe' 'x86'
|
|
foreach ($t in @($signtool, $stampinf, $inf2cat)) { if (-not $t) { throw 'a WDK tool (signtool/stampinf/Inf2Cat) was not found' } }
|
|
|
|
if (Test-Path $Stage) { Remove-Item $Stage -Recurse -Force }
|
|
New-Item -ItemType Directory -Force -Path $Stage | Out-Null
|
|
$stagedDll = Join-Path $Stage 'pf_vdisplay.dll'
|
|
$stagedInf = Join-Path $Stage 'pf_vdisplay.inf'
|
|
$stagedCat = Join-Path $Stage 'pf_vdisplay.cat'
|
|
Copy-Item $dll $stagedDll -Force
|
|
Copy-Item $inx $stagedInf -Force # stampinf rewrites this copy in place
|
|
|
|
# Clear FORCE_INTEGRITY BEFORE signing (the clear edits the PE, which invalidates any signature).
|
|
& $clear -Path $stagedDll | Out-Null
|
|
|
|
# DriverVer must strictly increase. Installed is 9.5.* — 9.9.MMdd.HHmm always wins on the same day.
|
|
$now = Get-Date
|
|
$ver = '9.9.{0}.{1}' -f $now.ToString('MMdd'), $now.ToString('HHmm')
|
|
|
|
& $signtool sign /fd SHA256 /sha1 $Thumbprint $stagedDll | Out-Null
|
|
& $stampinf -f $stagedInf -d '*' -a 'amd64' -u '2.15.0' -v $ver | Out-Null
|
|
& $inf2cat /driver:$Stage /os:10_X64 /uselocaltime | Out-Null
|
|
& $signtool sign /fd SHA256 /sha1 $Thumbprint $stagedCat | Out-Null
|
|
Write-Host "staged + signed pf-vdisplay (new tree) DriverVer=$ver -> $Stage"
|
|
|
|
if ($Install) {
|
|
& pnputil /add-driver $stagedInf /install
|
|
$present = Get-PnpDevice -EA SilentlyContinue |
|
|
Where-Object { $_.InstanceId -match 'PF_VDISPLAY' -or $_.FriendlyName -match 'punktfunk Virtual Display' }
|
|
if (-not $present) {
|
|
if (-not (Test-Path $Nefconc)) { throw "nefconc not found: $Nefconc" }
|
|
& $Nefconc --create-device-node --hardware-id 'root\pf_vdisplay' --class-name Display --class-guid '{4d36e968-e325-11ce-bfc1-08002be10318}' | Out-Null
|
|
Start-Sleep 2
|
|
& pnputil /add-driver $stagedInf /install
|
|
}
|
|
Write-Host "installed pf-vdisplay DriverVer=$ver"
|
|
}
|