mirror of
https://github.com/rmcrackan/Libation.git
synced 2026-02-18 14:56:25 -05:00
9f6d08fc1f
- Simplify workflows build commands - Don't build ReadyToRun on validate - Move get-version into it's own job in build.yml - Split macOS into it's own reusable workflow - Add app bundle code signing - Add notarization
100 lines
3.3 KiB
YAML
100 lines
3.3 KiB
YAML
# build-mac.yml
|
|
# Reusable workflow that builds the MacOS (x64 and arm64) versions of Libation.
|
|
---
|
|
name: build
|
|
|
|
on:
|
|
workflow_call:
|
|
inputs:
|
|
libation-version:
|
|
type: string
|
|
required: true
|
|
dotnet-version:
|
|
type: string
|
|
required: true
|
|
run-unit-tests:
|
|
type: boolean
|
|
publish-r2r:
|
|
type: boolean
|
|
retention-days:
|
|
type: number
|
|
architecture:
|
|
type: string
|
|
description: "CPU architecture targeted by the build."
|
|
required: true
|
|
|
|
env:
|
|
WAIT_FOR_NOTARIZE: true
|
|
|
|
jobs:
|
|
build:
|
|
name: "macOS-${{ inputs.architecture }}"
|
|
runs-on: macos-latest
|
|
env:
|
|
RUNTIME_ID: "osx-${{ inputs.architecture }}"
|
|
CAN_SIGN: ${{ secrets.APPLE_TEAM_ID != '' && vars.APPLE_DEV_EMAIL != '' && secrets.APPLE_DEV_PASSWORD != '' }}
|
|
steps:
|
|
- uses: apple-actions/import-codesign-certs@v3
|
|
if: ${{ env.CAN_SIGN == 'true' }}
|
|
with:
|
|
p12-file-base64: ${{ secrets.DISTRIBUTION_SIGNING_CERT }}
|
|
p12-password: ${{ secrets.DISTRIBUTION_SIGNING_CERT_PW }}
|
|
|
|
- uses: actions/checkout@v5
|
|
|
|
- uses: actions/setup-dotnet@v5
|
|
with:
|
|
dotnet-version: ${{ inputs.dotnet-version }}
|
|
dotnet-quality: "ga"
|
|
|
|
- name: Unit test
|
|
if: ${{ inputs.run-unit-tests }}
|
|
working-directory: ./Source
|
|
run: dotnet test
|
|
|
|
- name: Publish
|
|
id: publish
|
|
working-directory: ./Source
|
|
run: |
|
|
PUBLISH_ARGS=(
|
|
'--runtime' '${{ env.RUNTIME_ID }}'
|
|
'--configuration' 'Release'
|
|
'--output' '../bin'
|
|
'-p:PublishProtocol=FileSystem'
|
|
"-p:PublishReadyToRun=${{ inputs.publish-r2r }}"
|
|
'-p:SelfContained=true')
|
|
|
|
dotnet publish LibationAvalonia/LibationAvalonia.csproj "${PUBLISH_ARGS[@]}"
|
|
dotnet publish LoadByOS/MacOSConfigApp/MacOSConfigApp.csproj "${PUBLISH_ARGS[@]}"
|
|
dotnet publish LibationCli/LibationCli.csproj "${PUBLISH_ARGS[@]}"
|
|
dotnet publish HangoverAvalonia/HangoverAvalonia.csproj "${PUBLISH_ARGS[@]}"
|
|
|
|
- name: Build bundle
|
|
id: bundle
|
|
run: |
|
|
SCRIPT=./Scripts/Bundle_MacOS.sh
|
|
chmod +rx ${SCRIPT}
|
|
${SCRIPT} ./bin "${{ inputs.libation-version }}" "${{ inputs.architecture }}" ${{ env.CAN_SIGN }}
|
|
artifact=$(ls ./bundle)
|
|
echo "artifact=${artifact}" >> "${GITHUB_OUTPUT}"
|
|
|
|
- name: Notarize bundle
|
|
if: ${{ env.CAN_SIGN == 'true' }}
|
|
run: |
|
|
if [ ${{ env.WAIT_FOR_NOTARIZE }} ]; then
|
|
WAIT="--wait"
|
|
fi
|
|
|
|
xcrun notarytool submit ./bundle/${{ steps.bundle.outputs.artifact }} $WAIT --no-progress --apple-id ${{ vars.APPLE_DEV_EMAIL }} --password ${{ secrets.APPLE_DEV_PASSWORD }} --team-id ${{ secrets.APPLE_TEAM_ID }}
|
|
|
|
if [ ${{ env.WAIT_FOR_NOTARIZE }} ]; then
|
|
xcrun stapler staple "./bundle/${{ steps.bundle.outputs.artifact }}"
|
|
fi
|
|
|
|
- uses: actions/upload-artifact@v5
|
|
with:
|
|
name: ${{ steps.bundle.outputs.artifact }}
|
|
path: ./bundle/${{ steps.bundle.outputs.artifact }}
|
|
if-no-files-found: error
|
|
retention-days: ${{ inputs.retention-days }}
|