mirror of
https://github.com/outbackdingo/firezone.git
synced 2026-01-27 10:18:54 +00:00
102 lines
4.8 KiB
YAML
102 lines
4.8 KiB
YAML
name: Swift
|
|
on:
|
|
workflow_call:
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
build:
|
|
name: ${{ matrix.job_name }}
|
|
runs-on: macos-15
|
|
permissions:
|
|
contents: write # for attaching the build artifacts to the release
|
|
id-token: write
|
|
env:
|
|
XCODE_VERSION: "16.2"
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
include:
|
|
- job_name: build-ios
|
|
rust-targets: aarch64-apple-ios
|
|
build-script: scripts/build/ios-appstore.sh
|
|
upload-script: scripts/upload/app-store-connect.sh
|
|
artifact-file: "Firezone.ipa"
|
|
platform: iOS
|
|
|
|
- job_name: build-macos-appstore
|
|
rust-targets: aarch64-apple-darwin x86_64-apple-darwin
|
|
build-script: scripts/build/macos-appstore.sh
|
|
upload-script: scripts/upload/app-store-connect.sh
|
|
artifact-file: "Firezone.pkg"
|
|
platform: macOS
|
|
|
|
- job_name: build-macos-standalone
|
|
rust-targets: aarch64-apple-darwin x86_64-apple-darwin
|
|
build-script: scripts/build/macos-standalone.sh
|
|
upload-script: scripts/upload/github-release.sh
|
|
# mark:next-apple-version
|
|
artifact-file: "firezone-macos-client-1.4.0.dmg"
|
|
# mark:next-apple-version
|
|
release-name: macos-client-1.4.0
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
fetch-tags: true # Otherwise we cannot embed the correct version into the build.
|
|
- uses: ./.github/actions/setup-rust
|
|
with:
|
|
targets: ${{ matrix.rust-targets }}
|
|
- uses: actions/cache/restore@v4
|
|
name: Restore Swift DerivedData Cache
|
|
id: cache
|
|
with:
|
|
path: ~/Library/Developer/Xcode/DerivedData
|
|
key: ${{ runner.os }}-${{ hashFiles('swift/*', 'rust/**/*.rs', 'rust/**/*.toml', 'rust/**/*.lock}') }}
|
|
- run: ${{ matrix.build-script }}
|
|
env:
|
|
IOS_APP_PROVISIONING_PROFILE: "${{ secrets.APPLE_IOS_APP_PROVISIONING_PROFILE }}"
|
|
IOS_NE_PROVISIONING_PROFILE: "${{ secrets.APPLE_IOS_NE_PROVISIONING_PROFILE }}"
|
|
MACOS_APP_PROVISIONING_PROFILE: "${{ secrets.APPLE_MACOS_APP_PROVISIONING_PROFILE }}"
|
|
MACOS_NE_PROVISIONING_PROFILE: "${{ secrets.APPLE_MACOS_NE_PROVISIONING_PROFILE }}"
|
|
STANDALONE_MACOS_APP_PROVISIONING_PROFILE: "${{ secrets.APPLE_STANDALONE_MACOS_APP_PROVISIONING_PROFILE }}"
|
|
STANDALONE_MACOS_NE_PROVISIONING_PROFILE: "${{ secrets.APPLE_STANDALONE_MACOS_NE_PROVISIONING_PROFILE }}"
|
|
BUILD_CERT: "${{ secrets.APPLE_BUILD_CERTIFICATE_BASE64 }}"
|
|
BUILD_CERT_PASS: "${{ secrets.APPLE_BUILD_CERTIFICATE_P12_PASSWORD }}"
|
|
INSTALLER_CERT: "${{ secrets.APPLE_MAC_INSTALLER_CERTIFICATE_BASE64 }}"
|
|
INSTALLER_CERT_PASS: "${{ secrets.APPLE_MAC_INSTALLER_CERTIFICATE_P12_PASSWORD }}"
|
|
STANDALONE_BUILD_CERT: "${{ secrets.APPLE_STANDALONE_BUILD_CERTIFICATE_BASE64 }}"
|
|
STANDALONE_BUILD_CERT_PASS: "${{ secrets.APPLE_STANDALONE_BUILD_CERTIFICATE_P12_PASSWORD }}"
|
|
ARTIFACT_PATH: "${{ runner.temp }}/${{ matrix.artifact-file }}"
|
|
NOTARIZE: "${{ (github.event_name == 'workflow_dispatch' || github.ref == 'refs/heads/main') }}"
|
|
ISSUER_ID: "${{ secrets.APPLE_APP_STORE_CONNECT_ISSUER_ID }}"
|
|
API_KEY_ID: "${{ secrets.APPLE_APP_STORE_CONNECT_API_KEY_ID }}"
|
|
API_KEY: "${{ secrets.APPLE_APP_STORE_CONNECT_API_KEY }}"
|
|
RUNNER_TEMP: "${{ runner.temp }}"
|
|
- run: ${{ matrix.upload-script }}
|
|
if: "${{ github.event_name == 'workflow_dispatch' }}"
|
|
env:
|
|
ARTIFACT_PATH: "${{ runner.temp }}/${{ matrix.artifact-file }}"
|
|
ISSUER_ID: "${{ secrets.APPLE_APP_STORE_CONNECT_ISSUER_ID }}"
|
|
API_KEY_ID: "${{ secrets.APPLE_APP_STORE_CONNECT_API_KEY_ID }}"
|
|
API_KEY: "${{ secrets.APPLE_APP_STORE_CONNECT_API_KEY }}"
|
|
GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
|
|
RELEASE_NAME: "${{ matrix.release-name }}"
|
|
PLATFORM: "${{ matrix.platform }}"
|
|
- name: Setup sentry CLI
|
|
if: ${{ github.ref_name == 'main' }}
|
|
uses: matbour/setup-sentry-cli@v2
|
|
with:
|
|
token: ${{ secrets.SENTRY_AUTH_TOKEN }}
|
|
organization: firezone-inc
|
|
- name: Upload debug symbols to Sentry
|
|
if: ${{ github.ref_name == 'main' }}
|
|
run: |
|
|
sentry-cli debug-files upload --log-level info --project apple-client --include-sources ${{ runner.temp }}
|
|
- uses: actions/cache/save@v4
|
|
if: ${{ steps.cache.outputs.cache-hit != 'true'}}
|
|
name: Save Swift DerivedData Cache
|
|
with:
|
|
path: ~/Library/Developer/Xcode/DerivedData
|
|
# Swift benefits heavily from build cache, so aggressively write a new one
|
|
# on each build on `main` and attempt to restore it in PR builds with broader restore-key.
|
|
key: ${{ steps.cache.outputs.cache-primary-key }}
|