Build #79
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Build | |
on: | |
workflow_dispatch: | |
push: | |
tags: | |
- v* | |
jobs: | |
build-windows: | |
runs-on: windows-latest | |
env: | |
VCPKG_BINARY_SOURCES: "clear;x-gha,readwrite" | |
permissions: | |
contents: write | |
steps: | |
- name: Checkout branch | |
uses: actions/checkout@v4 | |
- name: Setup Flutter | |
uses: subosito/flutter-action@v2 | |
with: | |
channel: "stable" | |
- name: Setup Rust toolchain | |
uses: dtolnay/rust-toolchain@stable | |
- uses: Swatinem/rust-cache@v2 | |
- name: Install Protoc | |
uses: arduino/setup-protoc@v3 | |
with: | |
version: "26.x" | |
repo-token: ${{ secrets.GITHUB_TOKEN }} | |
- name: Install the Rust dependencies | |
run: cargo install 'flutter_rust_bridge_codegen' rinf protoc-gen-prost | |
- name: Activate Protobuf | |
run: flutter pub global activate protoc_plugin | |
- name: Flutter pub get | |
run: flutter pub get | |
- name: Generate message files | |
run: rinf message | |
- name: Build Windows | |
run: flutter build windows --release --verbose | |
- uses: benjlevesque/[email protected] | |
id: short-sha | |
with: | |
length: 7 | |
- name: Upload artifact | |
uses: actions/upload-artifact@v4 | |
with: | |
path: build/windows/x64/runner/Release/ | |
name: Rune-${{ github.ref_name }}${{ github.event_name == 'workflow_dispatch' && format('-{0}', steps.short-sha.outputs.sha) || '' }}-windows | |
- name: Build Zip for Release | |
uses: thedoctor0/zip-release@master | |
if: startsWith(github.ref, 'refs/tags/v') | |
with: | |
type: "zip" | |
filename: Rune-${{ github.ref_name }}-windows-amd64.zip | |
directory: build/windows/x64/runner/Release/ | |
- name: Release | |
uses: ncipollo/release-action@v1 | |
if: startsWith(github.ref, 'refs/tags/v') | |
with: | |
artifacts: "build/windows/x64/runner/Release/Rune-${{ github.ref_name }}-windows-amd64.zip" | |
allowUpdates: true | |
replacesArtifacts: false | |
omitBodyDuringUpdate: true | |
makeLatest: true | |
build-windows-msix: | |
runs-on: windows-latest | |
env: | |
VCPKG_BINARY_SOURCES: "clear;x-gha,readwrite" | |
permissions: | |
contents: write | |
steps: | |
- name: Checkout branch | |
uses: actions/checkout@v4 | |
- name: Setup Flutter | |
uses: subosito/flutter-action@v2 | |
with: | |
channel: "stable" | |
- name: Setup Rust toolchain | |
uses: dtolnay/rust-toolchain@stable | |
- uses: Swatinem/rust-cache@v2 | |
- name: Install Protoc | |
uses: arduino/setup-protoc@v3 | |
with: | |
version: "26.x" | |
repo-token: ${{ secrets.GITHUB_TOKEN }} | |
- name: Install the Rust dependencies | |
run: cargo install 'flutter_rust_bridge_codegen' rinf protoc-gen-prost | |
- name: Activate Protobuf | |
run: flutter pub global activate protoc_plugin | |
- name: Flutter pub get | |
run: flutter pub get | |
- name: Generate message files | |
run: rinf message | |
- name: Build MSIX | |
run: dart run msix:create --release | |
- uses: benjlevesque/[email protected] | |
id: short-sha | |
with: | |
length: 7 | |
- name: Upload MSIX artifact | |
uses: actions/upload-artifact@v4 | |
with: | |
path: build/windows/x64/runner/Release/rune.msix | |
name: Rune-${{ github.ref_name }}${{ github.event_name == 'workflow_dispatch' && format('-{0}', steps.short-sha.outputs.sha) || '' }}-windows-msix | |
- name: Rename MSIX | |
if: startsWith(github.ref, 'refs/tags/v') | |
run: | | |
mv build/windows/x64/runner/Release/rune.msix "build/windows/x64/runner/Release/Rune-${{ github.ref_name }}-windows-amd64.msix" | |
- name: Release | |
uses: ncipollo/release-action@v1 | |
if: startsWith(github.ref, 'refs/tags/v') | |
with: | |
artifacts: "build/windows/x64/runner/Release/Rune-${{ github.ref_name }}-windows-amd64.msix" | |
allowUpdates: true | |
replacesArtifacts: false | |
omitBodyDuringUpdate: true | |
makeLatest: true | |
build-linux: | |
runs-on: ubuntu-latest | |
permissions: | |
contents: write | |
steps: | |
- name: Checkout branch | |
uses: actions/checkout@v4 | |
- name: Install dependencies | |
run: | | |
sudo apt-get update | |
sudo apt-get install -y liblmdb0 jq alsa-base alsa-source librust-alsa-sys-dev libasound2-dev liblmdb-dev clang cmake ninja-build pkg-config libgtk-3-dev dpkg-dev libayatana-appindicator3-dev libnotify-dev | |
- name: Setup Flutter | |
uses: subosito/flutter-action@v2 | |
with: | |
channel: "stable" | |
- name: Setup Rust toolchain | |
uses: dtolnay/rust-toolchain@stable | |
- uses: Swatinem/rust-cache@v2 | |
- name: Install Protoc | |
uses: arduino/setup-protoc@v3 | |
with: | |
version: "26.x" | |
repo-token: ${{ secrets.GITHUB_TOKEN }} | |
- name: Install the Rust dependencies | |
run: cargo install 'flutter_rust_bridge_codegen' rinf protoc-gen-prost | |
- name: Activate Protobuf | |
run: flutter pub global activate protoc_plugin | |
- name: Flutter pub get | |
run: flutter pub get | |
- name: Generate message files | |
run: rinf message | |
- name: Build linux | |
run: flutter build linux --release --verbose | |
- uses: benjlevesque/[email protected] | |
id: short-sha | |
with: | |
length: 7 | |
- name: Upload artifact | |
uses: actions/upload-artifact@v4 | |
with: | |
path: build/linux/x64/release/bundle/ | |
name: Rune-${{ github.ref_name }}${{ github.event_name == 'workflow_dispatch' && format('-{0}', steps.short-sha.outputs.sha) || '' }}-linux | |
- name: Build Zip for Release | |
uses: thedoctor0/zip-release@master | |
if: startsWith(github.ref, 'refs/tags/v') | |
with: | |
type: "zip" | |
filename: Rune-${{ github.ref_name }}-linux-amd64.zip | |
directory: build/linux/x64/release/bundle/ | |
- name: Release | |
uses: ncipollo/release-action@v1 | |
if: startsWith(github.ref, 'refs/tags/v') | |
with: | |
artifacts: "build/linux/x64/release/bundle/Rune-${{ github.ref_name }}-linux-amd64.zip" | |
allowUpdates: true | |
replacesArtifacts: false | |
omitBodyDuringUpdate: true | |
makeLatest: true | |
build-steam-sniper: | |
runs-on: ubuntu-latest | |
container: registry.gitlab.steamos.cloud/steamrt/sniper/sdk:beta | |
permissions: | |
contents: write | |
steps: | |
- name: Checkout branch | |
uses: actions/checkout@v4 | |
- name: Install dependencies | |
run: | | |
sudo apt-get update | |
sudo apt-get install -y liblmdb0 jq librust-alsa-sys-dev libasound2-dev liblmdb-dev clang cmake ninja-build pkg-config libgtk-3-dev dpkg-dev libayatana-appindicator3-dev libnotify-dev | |
- name: Patch Environment | |
run: | | |
# https://github.com/actions/runner/issues/2033 | |
chown -R $(id -u):$(id -g) $PWD | |
git config --global --add safe.directory '*' | |
- name: Setup Flutter | |
uses: subosito/flutter-action@v2 | |
with: | |
channel: "stable" | |
- name: Setup Rust toolchain | |
uses: dtolnay/rust-toolchain@stable | |
- uses: Swatinem/rust-cache@v2 | |
- name: Install Protoc | |
uses: arduino/setup-protoc@v3 | |
with: | |
version: "26.x" | |
repo-token: ${{ secrets.GITHUB_TOKEN }} | |
- name: Install the Rust dependencies | |
run: cargo install 'flutter_rust_bridge_codegen' rinf protoc-gen-prost | |
- name: Activate Protobuf | |
run: flutter pub global activate protoc_plugin | |
- name: Flutter pub get | |
run: flutter pub get | |
- name: Generate message files | |
run: rinf message | |
- name: Build linux | |
run: flutter build linux --release --verbose | |
- uses: benjlevesque/[email protected] | |
id: short-sha | |
with: | |
length: 7 | |
- name: Copy Steam Launch Scripts | |
run: | | |
chmod +x scripts/steam/* | |
cp -r scripts/steam/* build/linux/x64/release/bundle/ | |
- name: Upload artifact | |
uses: actions/upload-artifact@v4 | |
with: | |
path: build/linux/x64/release/bundle/ | |
name: Rune-${{ github.ref_name }}${{ github.event_name == 'workflow_dispatch' && format('-{0}', steps.short-sha.outputs.sha) || '' }}-steam-sniper | |
- name: Build Zip for Release | |
uses: thedoctor0/zip-release@master | |
if: startsWith(github.ref, 'refs/tags/v') | |
with: | |
type: "zip" | |
filename: Rune-${{ github.ref_name }}-steam-sniper-amd64.zip | |
directory: build/linux/x64/release/bundle/ | |
- name: Release | |
uses: ncipollo/release-action@v1 | |
if: startsWith(github.ref, 'refs/tags/v') | |
with: | |
artifacts: "build/linux/x64/release/bundle/Rune-${{ github.ref_name }}-steam-sniper-amd64.zip" | |
allowUpdates: true | |
replacesArtifacts: false | |
omitBodyDuringUpdate: true | |
makeLatest: true | |
build-macos: | |
runs-on: macos-latest | |
permissions: | |
contents: write | |
steps: | |
- name: Checkout repository | |
uses: actions/checkout@v4 | |
with: | |
lfs: true | |
- name: Setup Flutter | |
uses: subosito/flutter-action@v2 | |
with: | |
channel: "stable" | |
- name: Setup Rust toolchain | |
uses: dtolnay/rust-toolchain@stable | |
- uses: Swatinem/rust-cache@v2 | |
- name: Install Protoc | |
uses: arduino/setup-protoc@v3 | |
with: | |
version: "26.x" | |
repo-token: ${{ secrets.GITHUB_TOKEN }} | |
- uses: benjlevesque/[email protected] | |
id: short-sha | |
with: | |
length: 7 | |
- name: Install certificates | |
env: | |
DEVELOPER_ID_APPLICATION_P12_BASE64_MAC: ${{ secrets.DEVELOPER_ID_APPLICATION_P12_BASE64_MAC }} | |
P12_PASSWORD: ${{ secrets.P12_PASSWORD }} | |
KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }} | |
BUILD_NOTARIZED_PROVISION_PROFILE: ${{ secrets.BUILD_NOTARIZED_PROVISION_PROFILE }} | |
run: | | |
# create variables | |
DEVELOPER_ID_APPLICATION_CERTIFICATE_PATH=$RUNNER_TEMP/build_developerID_application_certificate.p12 | |
KEYCHAIN_PATH=$RUNNER_TEMP/rune-signing.keychain-db | |
PP_PATH=$RUNNER_TEMP/Rune_Notarized.provisionprofile | |
# import certificate and provisioning profile from secrets | |
echo -n "$DEVELOPER_ID_APPLICATION_P12_BASE64_MAC" | base64 --decode --output $DEVELOPER_ID_APPLICATION_CERTIFICATE_PATH | |
echo -n "$BUILD_NOTARIZED_PROVISION_PROFILE" | base64 --decode --output $PP_PATH | |
# create temporary keychain | |
security create-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH | |
# security default-keychain -s $KEYCHAIN_PATH | |
security set-keychain-settings -lut 21600 $KEYCHAIN_PATH | |
security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH | |
# import certificate to keychain | |
security import $DEVELOPER_ID_APPLICATION_CERTIFICATE_PATH -P "$P12_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH | |
security list-keychain -d user -s $KEYCHAIN_PATH | |
security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH | |
# apply provisioning profile | |
mkdir -p ~/Library/MobileDevice/Provisioning\ Profiles | |
cp $PP_PATH ~/Library/MobileDevice/Provisioning\ Profiles | |
- name: All | |
run: | | |
brew install just | |
just macos-ci-all | |
env: | |
DEVELOPER_ID_APPLICATION_SIGNING_IDENTITY: ${{ secrets.DEVELOPER_ID_APPLICATION_SIGNING_IDENTITY }} | |
P12_PASSWORD: ${{ secrets.P12_PASSWORD }} | |
KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }} | |
APPLE_ID: ${{ secrets.APPLE_ID }} | |
APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }} | |
APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }} | |
REF_NAME: ${{ github.ref_name }} | |
SHA: ${{ steps.short-sha.outputs.sha }} | |
- name: Replace System Dylib | |
run: | | |
otool -L Rune.app/Contents/MacOS/Rune | grep lmdb | |
install_name_tool -change /opt/homebrew/opt/lmdb/lib/liblmdb.dylib @executable_path/../Frameworks/liblmdb.dylib Rune.app/Contents/MacOS/Rune | |
working-directory: build/macos/Build/Products/Release | |
- name: Rename DMG | |
run: | | |
mv temp_macos/*.dmg "temp_macos/Rune-${{ github.ref_name }}${{ github.event_name == 'workflow_dispatch' && format('-{0}', steps.short-sha.outputs.sha) || '' }}-macOS.dmg" | |
- name: Rename ZIP | |
run: | | |
mv temp_macos/*.zip "temp_macos/Rune-${{ github.ref_name }}${{ github.event_name == 'workflow_dispatch' && format('-{0}', steps.short-sha.outputs.sha) || '' }}-macOS.zip" | |
- name: Upload artifact macOS DMG | |
uses: actions/upload-artifact@v4 | |
with: | |
path: temp_macos/Rune-${{ github.ref_name }}${{ github.event_name == 'workflow_dispatch' && format('-{0}', steps.short-sha.outputs.sha) || '' }}-macOS.dmg | |
name: Rune-${{ github.ref_name }}${{ github.event_name == 'workflow_dispatch' && format('-{0}', steps.short-sha.outputs.sha) || '' }}-macOS.dmg | |
- name: Upload artifact macOS ZIP | |
continue-on-error: true | |
uses: actions/upload-artifact@v4 | |
with: | |
path: temp_macos/Rune-${{ github.ref_name }}${{ github.event_name == 'workflow_dispatch' && format('-{0}', steps.short-sha.outputs.sha) || '' }}-macOS.zip | |
name: Rune-${{ github.ref_name }}${{ github.event_name == 'workflow_dispatch' && format('-{0}', steps.short-sha.outputs.sha) || '' }}-macOS.zip | |
- name: Release DMG | |
uses: ncipollo/release-action@v1 | |
if: startsWith(github.ref, 'refs/tags/v') | |
with: | |
artifacts: "temp_macos/Rune-${{ github.ref_name }}-macOS.dmg" | |
allowUpdates: true | |
replacesArtifacts: false | |
omitBodyDuringUpdate: true | |
makeLatest: true | |
- name: Release ZIP | |
uses: ncipollo/release-action@v1 | |
if: startsWith(github.ref, 'refs/tags/v') | |
with: | |
artifacts: "temp_macos/Rune-${{ github.ref_name }}-macOS.zip" | |
allowUpdates: true | |
replacesArtifacts: false | |
omitBodyDuringUpdate: true | |
makeLatest: true | |
- name: Clean up | |
if: ${{ always() }} | |
run: | | |
just macos-ci-clean | |
if [ -f "$RUNNER_TEMP/rune-signing.keychain-db" ]; then | |
echo "$RUNNER_TEMP/rune-signing.keychain-db" | |
security delete-keychain $RUNNER_TEMP/rune-signing.keychain-db | |
fi | |
rm -f .env | |
build-and-release-mac-app-store: | |
runs-on: macos-latest | |
if: startsWith(github.ref, 'refs/tags/v') | |
steps: | |
- name: Checkout repository | |
uses: actions/checkout@v4 | |
with: | |
lfs: true | |
- name: Setup Flutter | |
uses: subosito/flutter-action@v2 | |
with: | |
channel: "stable" | |
- name: Setup Rust toolchain | |
uses: dtolnay/rust-toolchain@stable | |
- uses: Swatinem/rust-cache@v2 | |
- name: Install Protoc | |
uses: arduino/setup-protoc@v3 | |
with: | |
version: "26.x" | |
repo-token: ${{ secrets.GITHUB_TOKEN }} | |
- uses: benjlevesque/[email protected] | |
id: short-sha | |
with: | |
length: 7 | |
- name: Install certificates | |
env: | |
APPLE_DISTRIBUTION_CERTIFICATE: ${{ secrets.APPLE_DISTRIBUTION_CERTIFICATE }} | |
APPLE_DISTRIBUTION_PASSWORD: ${{ secrets.APPLE_DISTRIBUTION_PASSWORD }} | |
APPLE_DISTRIBUTION_SIGNING_IDENTITY: ${{ secrets.APPLE_DISTRIBUTION_SIGNING_IDENTITY }} | |
MAC_DEVELOPER_INSTALLER_CERTIFICATE: ${{ secrets.MAC_DEVELOPER_INSTALLER_CERTIFICATE }} | |
MAC_DEVELOPER_INSTALLER_PASSWORD: ${{ secrets.MAC_DEVELOPER_INSTALLER_PASSWORD }} | |
MAC_DEVELOPER_INSTALLER_SIGNING_IDENTITY: ${{ secrets.MAC_DEVELOPER_INSTALLER_SIGNING_IDENTITY }} | |
APP_STORE_CONNECT_API_KEY: ${{ secrets.APP_STORE_CONNECT_API_KEY }} | |
APP_STORE_CONNECT_APP_APPLE_ID: ${{ secrets.APP_STORE_CONNECT_APP_APPLE_ID }} | |
APP_STORE_CONNECT_ISSUER: ${{ secrets.APP_STORE_CONNECT_ISSUER }} | |
APP_STORE_CONNECT_PUBLIC_ID: ${{ secrets.APP_STORE_CONNECT_PUBLIC_ID }} | |
APP_STORE_CONNECT_KEYID: ${{ secrets.APP_STORE_CONNECT_KEYID }} | |
KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }} | |
BUILD_APP_STORE_PROVISION_PROFILE: ${{ secrets.BUILD_APP_STORE_PROVISION_PROFILE }} | |
run: | | |
# create variables | |
APPLE_DISTRIBUTION_CERTIFICATE_PATH=$RUNNER_TEMP/build_apple_distribution_certificate.p12 | |
MAC_DEVELOPER_INSTALLER_CERTIFICATE_PATH=$RUNNER_TEMP/build_mac_developer_installer_certificate.p12 | |
KEYCHAIN_PATH=$RUNNER_TEMP/rune-signing.keychain-db | |
PP_PATH=$RUNNER_TEMP/Rune_App_Store.provisionprofile | |
# import certificate and provisioning profile from secrets | |
echo -n "$APPLE_DISTRIBUTION_CERTIFICATE" | base64 --decode --output $APPLE_DISTRIBUTION_CERTIFICATE_PATH | |
echo -n "$MAC_DEVELOPER_INSTALLER_CERTIFICATE" | base64 --decode --output $MAC_DEVELOPER_INSTALLER_CERTIFICATE_PATH | |
echo -n "$BUILD_APP_STORE_PROVISION_PROFILE" | base64 --decode --output $PP_PATH | |
# create temporary keychain | |
security create-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH | |
# security default-keychain -s $KEYCHAIN_PATH | |
security set-keychain-settings -lut 21600 $KEYCHAIN_PATH | |
security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH | |
# import certificate to keychain | |
security import $APPLE_DISTRIBUTION_CERTIFICATE_PATH -P "$APPLE_DISTRIBUTION_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH | |
security import $MAC_DEVELOPER_INSTALLER_CERTIFICATE_PATH -P "$MAC_DEVELOPER_INSTALLER_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH | |
security list-keychain -d user -s $KEYCHAIN_PATH | |
security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH | |
# import App Store Connect API Key | |
echo "$APP_STORE_CONNECT_API_KEY" | base64 --decode --output $RUNNER_TEMP/AuthKey_$APP_STORE_CONNECT_KEYID.p8 | |
# apply provisioning profile | |
mkdir -p ~/Library/MobileDevice/Provisioning\ Profiles | |
cp $PP_PATH ~/Library/MobileDevice/Provisioning\ Profiles | |
- name: All | |
run: | | |
export RUNE_APPSTORE_BUILD_VERSION=$(echo "$REF_NAME" | sed -E 's/^v([0-9]+\.[0-9]+\.[0-9]+).*/\1/') | |
brew install just | |
just macos-ci-all-appstore | |
env: | |
APPLE_DISTRIBUTION_SIGNING_IDENTITY: ${{ secrets.APPLE_DISTRIBUTION_SIGNING_IDENTITY }} | |
MAC_DEVELOPER_INSTALLER_SIGNING_IDENTITY: ${{ secrets.MAC_DEVELOPER_INSTALLER_SIGNING_IDENTITY }} | |
APP_STORE_CONNECT_APP_APPLE_ID: ${{ secrets.APP_STORE_CONNECT_APP_APPLE_ID }} | |
APP_STORE_CONNECT_ISSUER: ${{ secrets.APP_STORE_CONNECT_ISSUER }} | |
APP_STORE_CONNECT_PUBLIC_ID: ${{ secrets.APP_STORE_CONNECT_PUBLIC_ID }} | |
APP_STORE_CONNECT_KEYID: ${{ secrets.APP_STORE_CONNECT_KEYID }} | |
KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }} | |
REF_NAME: ${{ github.ref_name }} | |
SHA: ${{ steps.short-sha.outputs.sha }} | |
RUNE_APPSTORE_BUILD_NUMBER: ${{ github.run_number }} | |
- name: Clean up | |
if: ${{ always() }} | |
run: | | |
just macos-ci-clean | |
if [ -f "$RUNNER_TEMP/rune-signing.keychain-db" ]; then | |
echo "$RUNNER_TEMP/rune-signing.keychain-db" | |
security delete-keychain $RUNNER_TEMP/rune-signing.keychain-db | |
fi | |
rm -f .env | |
rm -f $RUNNER_TEMP/*.p8 |