init CI #14
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build Launcher | |
| on: | |
| pull_request: | |
| push: | |
| branches: | |
| - "main" | |
| workflow_dispatch: | |
| jobs: | |
| build: | |
| # both Windows and Linux builds run on Ubuntu | |
| runs-on: ${{ matrix.build == 'macos' && 'macos' || 'ubuntu' }}-latest | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| build: [macos, windows, linux] | |
| include: | |
| - build: linux | |
| target-bin: 'cusf_launcher.x86_64' | |
| - build: macos | |
| target-bin: 'cusf_launcher.dmg' | |
| - build: windows | |
| target-bin: 'cusf_launcher.exe' | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: chickensoft-games/setup-godot@v1 | |
| with: | |
| version: 4.3.0 | |
| use-dotnet: false | |
| include-templates: true | |
| - name: Verify Setup | |
| run: godot --version | |
| - name: Import certificate to Keychain | |
| if: ${{ matrix.build == 'macos' }} | |
| run: | | |
| echo "${{ secrets.MACOS_CERTIFICATE }}" | base64 --decode > certificate.p12 | |
| KEYCHAIN_PASSWORD=$(uuidgen) | |
| security create-keychain -p "$KEYCHAIN_PASSWORD" build.keychain | |
| security default-keychain -s build.keychain | |
| security unlock-keychain -p "$KEYCHAIN_PASSWORD" build.keychain | |
| security import ./certificate.p12 -k ~/Library/Keychains/build.keychain -P ${{ secrets.MACOS_CERTIFICATE_PASSWORD }} -T /usr/bin/codesign | |
| security set-key-partition-list -S apple-tool:,apple: -s -k "$KEYCHAIN_PASSWORD" ~/Library/Keychains/build.keychain | |
| env: | |
| MACOS_CERTIFICATE_PASSWORD: ${{ secrets.MACOS_CERTIFICATE_PASSWORD }} | |
| - name: Setup notarization credentials | |
| if: ${{ matrix.build == 'macos' }} | |
| run: | | |
| echo ${{ secrets.GODOT_MACOS_NOTARIZATION_API_KEY }} | base64 --decode > notarization_api_key.p8 | |
| # MUST be run before build | |
| - name: Initialize godot cache | |
| run: python3 .github/scripts/godot_ci_cache.py | |
| - name: Export build | |
| run: | | |
| name="${{fromJSON('{"windows": "Windows", "macos": "Mac", "linux": "Linux"}')[matrix.build] }}" | |
| godot --path "./cusf_launcher/" --headless --export-release "$name" "${{ matrix.target-bin }}" --verbose 2>&1 | tee build.log | |
| env: | |
| GODOT_MACOS_NOTARIZATION_API_KEY_ID: | |
| ${{ secrets.GODOT_MACOS_NOTARIZATION_API_KEY_ID }} | |
| GODOT_MACOS_NOTARIZATION_API_KEY: ./notarization_api_key.p8 | |
| GODOT_MACOS_NOTARIZATION_API_UUID: | |
| ${{ secrets.GODOT_MACOS_NOTARIZATION_API_UUID }} | |
| - name: tree | |
| run: | | |
| ls | |
| tree artifacts | |
| tree cusf_launcher | |
| - name: Upload build | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: cusf_launcher_${{ matrix.build }} | |
| if-no-files-found: error | |
| path: cusf_launcher/${{ matrix.target-bin }} | |
| - name: Wait for notarization to finish | |
| if: ${{ matrix.build == 'macos' }} | |
| run: | | |
| request_id=$(grep 'Notarization request UUID' build.log | rev | cut -d ' ' -f 1 | rev | tr -d '"') | |
| xcrun notarytool wait $request_id \ | |
| --issuer ${{ secrets.GODOT_MACOS_NOTARIZATION_API_UUID }} \ | |
| --key-id ${{ secrets.GODOT_MACOS_NOTARIZATION_API_KEY_ID }} \ | |
| --key ./notarization_api_key.p8 | |
| upload-artifacts-to-releases-drivechain-info: | |
| name: Upload artifacts to releases.drivechain.info | |
| runs-on: ubuntu-latest | |
| needs: [build] | |
| # avoid uploading on PRs! | |
| if: github.event_name == 'push' && github.repository_owner == 'LayerTwo-Labs' | |
| steps: | |
| - name: Download artifacts | |
| uses: actions/download-artifact@v4 | |
| - name: Create zip files for releases.drivechain.info | |
| run: | | |
| mv cusf_launcher_linux cusf-launcher-latest-x86_64-unknown-linux-gnu | |
| zip -r cusf-launcher-latest-x86_64-unknown-linux-gnu.zip cusf-launcher-latest-x86_64-unknown-linux-gnu/* | |
| mv cusf_launcher_macos cusf-launcher-latest-x86_64-apple-darwin | |
| zip -r cusf-launcher-latest-x86_64-apple-darwin.zip cusf-launcher-latest-x86_64-apple-darwin/* | |
| mv cusf_launcher_windows cusf-launcher-latest-x86_64-w64 | |
| zip -r cusf-launcher-latest-x86_64-w64.zip cusf-launcher-latest-x86_64-w64/* | |
| - name: Upload release assets to releases.drivechain.info | |
| uses: cross-the-world/ssh-scp-ssh-pipelines@latest | |
| with: | |
| host: 45.33.96.47 | |
| user: root | |
| pass: ${{ secrets.RELEASES_SERVER_PW }} | |
| port: 22 | |
| scp: | | |
| 'cusf-launcher-latest-*.zip' => '/var/www/html/' |