sevenhill
b22654b99f
Build Android (FCM) / build-android-fcm (push) Canceled after 0s
Build Android / build-android (push) Canceled after 0s
Build iOS / build-ios (push) Canceled after 0s
Build Linux / build-linux (push) Canceled after 0s
Build macOS / build-macos (push) Canceled after 0s
Build Windows / build-windows (push) Canceled after 0s
Native crypto / native-crypto (push) Canceled after 0s
Release (main) / android (oneme) (push) Canceled after 0s
Release (main) / android (qlyra) (push) Canceled after 0s
Release (main) / windows (push) Canceled after 0s
Release (main) / linux (push) Canceled after 0s
Release (main) / macos (push) Canceled after 0s
Release (main) / ios (push) Canceled after 0s
Release (main) / release (push) Canceled after 0s
350 lines
14 KiB
YAML
350 lines
14 KiB
YAML
name: Release (main)
|
||
|
||
on:
|
||
workflow_dispatch:
|
||
push:
|
||
branches:
|
||
- main
|
||
|
||
permissions:
|
||
contents: write
|
||
|
||
env:
|
||
FLUTTER_VERSION: '3.44.3'
|
||
|
||
jobs:
|
||
android:
|
||
runs-on: ubuntu-latest
|
||
strategy:
|
||
fail-fast: false
|
||
matrix:
|
||
flavor: [qlyra, oneme]
|
||
steps:
|
||
- uses: actions/checkout@v3
|
||
with:
|
||
submodules: recursive
|
||
|
||
- name: Setup Java
|
||
uses: actions/setup-java@v4
|
||
with:
|
||
distribution: 'temurin'
|
||
java-version: '17'
|
||
cache: 'gradle'
|
||
- name: Setup Flutter
|
||
uses: subosito/flutter-action@v2
|
||
with:
|
||
flutter-version: ${{ env.FLUTTER_VERSION }}
|
||
channel: 'stable'
|
||
cache: true
|
||
|
||
- name: Setup Rust
|
||
uses: ./.github/actions/setup-rust
|
||
with:
|
||
targets: aarch64-linux-android,armv7-linux-androideabi,x86_64-linux-android
|
||
|
||
- name: Get dependencies
|
||
run: flutter pub get
|
||
|
||
- name: Verify native crypto and message delivery
|
||
run: |
|
||
cargo test --locked --manifest-path native/qlyra_crypto/rust/Cargo.toml
|
||
cargo build --locked --manifest-path native/qlyra_crypto/rust/Cargo.toml
|
||
flutter test --no-pub test/chat_crypto_roundtrip_test.dart test/outbox_queue_test.dart test/message_persistence_test.dart test/messages_delivery_test.dart
|
||
|
||
- name: Configure Gradle
|
||
run: |
|
||
mkdir -p ~/.gradle
|
||
echo "org.gradle.jvmargs=-Xmx4096m -XX:MaxMetaspaceSize=1024m" >> ~/.gradle/gradle.properties
|
||
echo "kotlin.daemon.jvmargs=-Xmx1536m" >> ~/.gradle/gradle.properties
|
||
echo "org.gradle.caching=true" >> ~/.gradle/gradle.properties
|
||
echo "org.gradle.parallel=true" >> ~/.gradle/gradle.properties
|
||
echo "org.gradle.configureondemand=true" >> ~/.gradle/gradle.properties
|
||
|
||
- name: Setup release signing
|
||
env:
|
||
KEYSTORE_BASE64: ${{ secrets.KEYSTORE_BASE64 }}
|
||
KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
|
||
KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
|
||
KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
|
||
run: |
|
||
if [ -z "$KEYSTORE_BASE64" ]; then
|
||
echo "Release signing secrets are required."
|
||
exit 1
|
||
fi
|
||
echo "$KEYSTORE_BASE64" | base64 -d > android/app/qlyra-release.jks
|
||
{
|
||
echo "storePassword=$KEYSTORE_PASSWORD"
|
||
echo "keyPassword=$KEY_PASSWORD"
|
||
echo "keyAlias=$KEY_ALIAS"
|
||
echo "storeFile=qlyra-release.jks"
|
||
} > android/key.properties
|
||
echo "Release signing configured."
|
||
|
||
- name: Build APKs and App Bundle (${{ matrix.flavor }})
|
||
run: |
|
||
flutter build apk --release --flavor ${{ matrix.flavor }} --obfuscate --split-debug-info=build/symbols
|
||
flutter build apk --release --split-per-abi --flavor ${{ matrix.flavor }} --obfuscate --split-debug-info=build/symbols
|
||
flutter build appbundle --release --flavor ${{ matrix.flavor }} --obfuscate --split-debug-info=build/symbols
|
||
|
||
- name: Collect Android artifacts (${{ matrix.flavor }})
|
||
run: |
|
||
F=${{ matrix.flavor }}
|
||
mkdir -p dist
|
||
cp build/app/outputs/flutter-apk/app-$F-release.apk dist/Qlyra-android-$F-universal.apk
|
||
cp build/app/outputs/flutter-apk/app-arm64-v8a-$F-release.apk dist/Qlyra-android-$F-arm64-v8a.apk
|
||
cp build/app/outputs/flutter-apk/app-armeabi-v7a-$F-release.apk dist/Qlyra-android-$F-armeabi-v7a.apk
|
||
cp build/app/outputs/flutter-apk/app-x86_64-$F-release.apk dist/Qlyra-android-$F-x86_64.apk
|
||
cp build/app/outputs/bundle/${F}Release/app-$F-release.aab dist/Qlyra-android-$F.aab
|
||
tar -czf dist/Qlyra-android-$F-symbols.tar.gz -C build/symbols .
|
||
|
||
- name: Verify APK release certificates
|
||
env:
|
||
KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
|
||
KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
|
||
run: bash scripts/verify_android_signing.sh
|
||
|
||
- name: Upload Android artifacts (${{ matrix.flavor }})
|
||
uses: actions/upload-artifact@v4
|
||
with:
|
||
name: android-${{ matrix.flavor }}
|
||
path: dist/*
|
||
if-no-files-found: error
|
||
retention-days: 7
|
||
|
||
windows:
|
||
runs-on: windows-latest
|
||
steps:
|
||
- uses: actions/checkout@v3
|
||
with:
|
||
submodules: recursive
|
||
- name: Setup Flutter
|
||
uses: subosito/flutter-action@v2
|
||
with:
|
||
flutter-version: ${{ env.FLUTTER_VERSION }}
|
||
channel: 'stable'
|
||
- name: Setup Rust
|
||
uses: ./.github/actions/setup-rust
|
||
with:
|
||
targets: x86_64-pc-windows-msvc
|
||
- name: Get dependencies
|
||
run: flutter pub get
|
||
- name: Build Windows
|
||
run: flutter build windows --release
|
||
- name: Package Windows
|
||
shell: pwsh
|
||
run: |
|
||
New-Item -ItemType Directory -Force -Path dist | Out-Null
|
||
Compress-Archive -Path build/windows/x64/runner/Release/* -DestinationPath dist/Qlyra-windows-x64.zip
|
||
- name: Upload Windows artifact
|
||
uses: actions/upload-artifact@v4
|
||
with:
|
||
name: windows
|
||
path: dist/*
|
||
if-no-files-found: error
|
||
retention-days: 7
|
||
|
||
linux:
|
||
runs-on: ubuntu-latest
|
||
steps:
|
||
- uses: actions/checkout@v3
|
||
with:
|
||
submodules: recursive
|
||
- name: Setup Flutter
|
||
uses: subosito/flutter-action@v2
|
||
with:
|
||
flutter-version: ${{ env.FLUTTER_VERSION }}
|
||
channel: 'stable'
|
||
- name: Install Linux desktop dependencies
|
||
run: |
|
||
sudo apt-get update
|
||
sudo apt-get install -y clang cmake ninja-build pkg-config libgtk-3-dev libsecret-1-dev libjsoncpp-dev
|
||
- name: Setup Rust
|
||
uses: ./.github/actions/setup-rust
|
||
with:
|
||
targets: x86_64-unknown-linux-gnu
|
||
- name: Get dependencies
|
||
run: flutter pub get
|
||
- name: Build Linux
|
||
run: flutter build linux --release
|
||
- name: Package Linux
|
||
run: |
|
||
mkdir -p dist
|
||
tar -C build/linux/x64/release/bundle -czf dist/Qlyra-linux-x64.tar.gz .
|
||
- name: Upload Linux artifact
|
||
uses: actions/upload-artifact@v4
|
||
with:
|
||
name: linux
|
||
path: dist/*
|
||
if-no-files-found: error
|
||
retention-days: 7
|
||
|
||
macos:
|
||
runs-on: macos-latest
|
||
steps:
|
||
- uses: actions/checkout@v3
|
||
with:
|
||
submodules: recursive
|
||
- name: Setup Flutter
|
||
uses: subosito/flutter-action@v2
|
||
with:
|
||
flutter-version: ${{ env.FLUTTER_VERSION }}
|
||
channel: 'stable'
|
||
- name: Setup Rust
|
||
uses: ./.github/actions/setup-rust
|
||
with:
|
||
targets: aarch64-apple-darwin,x86_64-apple-darwin
|
||
- name: Get dependencies
|
||
run: flutter pub get
|
||
- name: Build macOS
|
||
run: flutter build macos --release
|
||
- name: Package macOS
|
||
run: |
|
||
mkdir -p dist
|
||
APP=$(find build/macos/Build/Products/Release -maxdepth 1 -name "*.app" | head -1)
|
||
ditto -c -k --keepParent "$APP" dist/Qlyra-macos.zip
|
||
- name: Upload macOS artifact
|
||
uses: actions/upload-artifact@v4
|
||
with:
|
||
name: macos
|
||
path: dist/*
|
||
if-no-files-found: error
|
||
retention-days: 7
|
||
|
||
ios:
|
||
runs-on: macos-latest
|
||
steps:
|
||
- uses: actions/checkout@v3
|
||
with:
|
||
submodules: recursive
|
||
- name: Setup Flutter
|
||
uses: subosito/flutter-action@v2
|
||
with:
|
||
flutter-version: ${{ env.FLUTTER_VERSION }}
|
||
channel: 'stable'
|
||
- name: Setup Rust
|
||
uses: ./.github/actions/setup-rust
|
||
with:
|
||
targets: aarch64-apple-ios,aarch64-apple-ios-sim,x86_64-apple-ios
|
||
- name: Get dependencies
|
||
run: flutter pub get
|
||
- name: Build iOS (no codesign)
|
||
run: |
|
||
flutter config --no-enable-swift-package-manager
|
||
flutter build ios --release --no-codesign
|
||
- name: Install ldid
|
||
run: brew install ldid
|
||
- name: Pseudo-sign with ldid
|
||
run: |
|
||
set -euo pipefail
|
||
APP="build/ios/iphoneos/Runner.app"
|
||
ENT="$(mktemp -t ent).plist"
|
||
cat > "$ENT" <<'PLIST'
|
||
<?xml version="1.0" encoding="UTF-8"?>
|
||
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
||
<plist version="1.0">
|
||
<dict>
|
||
<key>platform-application</key><true/>
|
||
<key>get-task-allow</key><true/>
|
||
<key>application-identifier</key><string>ru.qlyra.app</string>
|
||
<key>keychain-access-groups</key>
|
||
<array><string>ru.qlyra.app</string></array>
|
||
<key>com.apple.private.security.no-container</key><true/>
|
||
</dict>
|
||
</plist>
|
||
PLIST
|
||
if [ -d "$APP/Frameworks" ]; then
|
||
find "$APP/Frameworks" -type f -name "*.dylib" -print0 | xargs -0 -I{} ldid -S "{}"
|
||
find "$APP/Frameworks" -type d -name "*.framework" | while read -r fw; do
|
||
bin="$fw/$(basename "$fw" .framework)"
|
||
[ -f "$bin" ] && ldid -S "$bin"
|
||
done
|
||
fi
|
||
if [ -d "$APP/PlugIns" ]; then
|
||
find "$APP/PlugIns" -type d -name "*.appex" | while read -r ext; do
|
||
bin="$ext/$(basename "$ext" .appex)"
|
||
[ -f "$bin" ] && ldid -S"$ENT" "$bin"
|
||
done
|
||
fi
|
||
ldid -S"$ENT" "$APP/Runner"
|
||
- name: Package IPA
|
||
run: |
|
||
mkdir -p dist build/ios/Payload
|
||
cp -R build/ios/iphoneos/Runner.app build/ios/Payload/
|
||
(cd build/ios && zip -qr ../../dist/Qlyra-ios-pseudosigned.ipa Payload)
|
||
- name: Upload iOS artifact
|
||
uses: actions/upload-artifact@v4
|
||
with:
|
||
name: ios
|
||
path: dist/*
|
||
if-no-files-found: error
|
||
retention-days: 7
|
||
|
||
release:
|
||
needs: [android, windows, linux, macos, ios]
|
||
runs-on: ubuntu-latest
|
||
steps:
|
||
- uses: actions/checkout@v3
|
||
with:
|
||
submodules: recursive
|
||
|
||
- name: Download all artifacts
|
||
uses: actions/download-artifact@v4
|
||
with:
|
||
path: dist
|
||
merge-multiple: true
|
||
|
||
- name: Compute version
|
||
id: ver
|
||
run: |
|
||
PUBSPEC_VERSION=$(grep '^version:' pubspec.yaml | awk '{print $2}' | cut -d'+' -f1)
|
||
echo "tag=v${PUBSPEC_VERSION}+${GITHUB_RUN_NUMBER}" >> "$GITHUB_OUTPUT"
|
||
echo "name=Qlyra ${PUBSPEC_VERSION} (сборка ${GITHUB_RUN_NUMBER})" >> "$GITHUB_OUTPUT"
|
||
|
||
- name: List artifacts
|
||
run: ls -lhR dist
|
||
|
||
- name: Create release
|
||
uses: softprops/action-gh-release@v2
|
||
with:
|
||
tag_name: ${{ steps.ver.outputs.tag }}
|
||
name: ${{ steps.ver.outputs.name }}
|
||
target_commitish: ${{ github.sha }}
|
||
prerelease: false
|
||
generate_release_notes: true
|
||
fail_on_unmatched_files: true
|
||
body: |
|
||
Автоматическая сборка из ветки `${{ github.ref_name }}` @ `${{ github.sha }}`.
|
||
|
||
## Какой файл качать
|
||
|
||
### Android — версия Qlyra (без push-уведомлений)
|
||
- **`Qlyra-android-qlyra-arm64-v8a.apk`** — рекомендуется для большинства современных телефонов (64-битный ARM).
|
||
- `Qlyra-android-qlyra-universal.apk` — универсальный APK, работает везде, но весит больше.
|
||
- `Qlyra-android-qlyra-armeabi-v7a.apk` — для старых 32-битных устройств.
|
||
- `Qlyra-android-qlyra-x86_64.apk` — для эмуляторов и редких x86-устройств.
|
||
- `Qlyra-android-qlyra.aab` — App Bundle для публикации в Google Play (не для ручной установки).
|
||
|
||
### Android — версия OneMe (с push-уведомлениями через Firebase)
|
||
- **`Qlyra-android-oneme-arm64-v8a.apk`** — рекомендуется для большинства современных телефонов.
|
||
- `Qlyra-android-oneme-universal.apk` — универсальный APK.
|
||
- `Qlyra-android-oneme-armeabi-v7a.apk` — для старых 32-битных устройств.
|
||
- `Qlyra-android-oneme-x86_64.apk` — для эмуляторов и x86-устройств.
|
||
- `Qlyra-android-oneme.aab` — App Bundle для Google Play.
|
||
|
||
### Windows
|
||
- **`Qlyra-windows-x64.zip`** — портативная сборка для Windows 10/11 (x64). Распаковать и запустить `Qlyra.exe`.
|
||
|
||
### Linux
|
||
- **`Qlyra-linux-x64.tar.gz`** — сборка для 64-битного Linux. Требуются `libgtk-3`, `libsecret-1`, `libjsoncpp`. Распаковать и запустить бинарник.
|
||
|
||
### macOS
|
||
- **`Qlyra-macos.zip`** — `.app` для macOS. Распаковать и перетащить в `/Applications`. Приложение не нотаризовано — при первом запуске разрешите через «Системные настройки → Защита и безопасность».
|
||
|
||
### iOS
|
||
- **`Qlyra-ios-pseudosigned.ipa`** — IPA с псевдо-подписью (ldid).
|
||
⚠️ Не устанавливается через App Store. Подходит для:
|
||
- jailbreak (Filza, rootless),
|
||
- TrollStore,
|
||
- сайдлоада через AltStore / Sideloadly (потребуется ваш Apple ID для повторной подписи).
|
||
files: dist/*
|