Exebuild

A command-line utility for creating Windows executables for software distribution. Exebuild simplifies the process of signing executables using Azure Trusted Code Signing and helps create software installers using NSIS.

Description

Exebuild streamlines the tedious process of signing Windows executables with signtool.exe by combining multiple steps into a single, efficient command.

This project was created to address the complexity of signing executables on Windows and to provide a reusable solution for all the projects we develop at IKUS Software.

Installation

Install Exebuild via PyPI:

pip install exebuild

Usage: signexe

Here’s an example of how to use Exebuild to quickly sign an executable.

First, create an Azure Certificate profile. Follow the documentation here: Code Signing on Windows with Azure Trusted Signing.

CLI:

set AZURE_TENANT_ID=your-tenant-id
set AZURE_CLIENT_ID=your-client-id
set AZURE_CLIENT_SECRET=your-client-secret
set AZURE_ENDPOINT=your-endpoint
set AZURE_CODE_SIGNING_NAME=your-code-signing-name
set AZURE_CERT_PROFILE_NAME=your-cert-profile-name
signexe.exe <path-to-exe>

Python:

from exebuild import signexe
signexe('c:/path/to/my.exe')

Usage: makensis

Exebuild also simplifies creating installers using NSIS. It supports the same command-line arguments as the original makensis, but Exebuild automatically installs NSIS via NuGet.

CLI:

makensis.exe -NOCD -INPUTCHARSET UTF8 -DOutFile=installer.exe <path-to-nsi-file>

Python:

from exebuild import makensis

makensis([
    '-NOCD',
    '-INPUTCHARSET', 'UTF8',
    '-DOutFile=installer.exe',
    'c:/path/to/file.nsi',
])

Roadmap

• Add support for installing .NET Runtime v6.0.
• Simplify the NSIS interface for easier usage.
• Expand signexe to support additional code-signing options (e.g., alternatives to Azure Code Signing).

Got more ideas? Submit a new issue.

Support

If you encounter any issues or need assistance, feel free to open a ticket on GitLab or GitHub.

License

This project is released under the MIT License.