Configure Android signing and disable iOS builds

- Add optional Android signing for build workflow (unsigned for testing)
- Require Android signing for release workflow
- Disable iOS builds (commented out) until Apple Developer Account is available
This commit is contained in:
2025-11-01 15:06:56 +01:00
parent 7c3af10938
commit 3490de2f51
2 changed files with 135 additions and 116 deletions

View File

@ -165,10 +165,19 @@ jobs:
- name: Install frontend dependencies - name: Install frontend dependencies
run: pnpm install --frozen-lockfile run: pnpm install --frozen-lockfile
- name: Build Android APK - name: Setup Keystore (if secrets available)
if: ${{ secrets.ANDROID_KEYSTORE != '' }}
run: |
echo "${{ secrets.ANDROID_KEYSTORE }}" | base64 -d > $HOME/keystore.jks
echo "ANDROID_KEYSTORE_PATH=$HOME/keystore.jks" >> $GITHUB_ENV
echo "ANDROID_KEYSTORE_PASSWORD=${{ secrets.ANDROID_KEYSTORE_PASSWORD }}" >> $GITHUB_ENV
echo "ANDROID_KEY_ALIAS=${{ secrets.ANDROID_KEY_ALIAS }}" >> $GITHUB_ENV
echo "ANDROID_KEY_PASSWORD=${{ secrets.ANDROID_KEY_PASSWORD }}" >> $GITHUB_ENV
- name: Build Android APK (unsigned if no keystore)
run: pnpm tauri android build --apk run: pnpm tauri android build --apk
- name: Build Android AAB - name: Build Android AAB (unsigned if no keystore)
run: pnpm tauri android build --aab run: pnpm tauri android build --aab
- name: Upload Android artifacts - name: Upload Android artifacts
@ -179,57 +188,58 @@ jobs:
src-tauri/gen/android/app/build/outputs/apk/**/*.apk src-tauri/gen/android/app/build/outputs/apk/**/*.apk
src-tauri/gen/android/app/build/outputs/bundle/**/*.aab src-tauri/gen/android/app/build/outputs/bundle/**/*.aab
build-ios: # iOS builds are disabled - uncomment when you have an Apple Developer Account
runs-on: macos-latest # build-ios:
steps: # runs-on: macos-latest
- name: Checkout repository # steps:
uses: actions/checkout@v4 # - name: Checkout repository
# uses: actions/checkout@v4
- name: Setup Node.js #
uses: actions/setup-node@v4 # - name: Setup Node.js
with: # uses: actions/setup-node@v4
node-version: '20' # with:
# node-version: '20'
- name: Install pnpm #
uses: pnpm/action-setup@v4 # - name: Install pnpm
# uses: pnpm/action-setup@v4
- name: Setup Rust #
uses: dtolnay/rust-toolchain@stable # - name: Setup Rust
# uses: dtolnay/rust-toolchain@stable
- name: Install Rust iOS targets #
run: | # - name: Install Rust iOS targets
rustup target add aarch64-apple-ios # run: |
rustup target add x86_64-apple-ios # rustup target add aarch64-apple-ios
rustup target add aarch64-apple-ios-sim # rustup target add x86_64-apple-ios
# rustup target add aarch64-apple-ios-sim
- name: Get pnpm store directory #
shell: bash # - name: Get pnpm store directory
run: | # shell: bash
echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV # run: |
# echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
- name: Setup pnpm cache #
uses: actions/cache@v4 # - name: Setup pnpm cache
with: # uses: actions/cache@v4
path: ${{ env.STORE_PATH }} # with:
key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }} # path: ${{ env.STORE_PATH }}
restore-keys: | # key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
${{ runner.os }}-pnpm-store- # restore-keys: |
# ${{ runner.os }}-pnpm-store-
- name: Setup Rust cache #
uses: Swatinem/rust-cache@v2 # - name: Setup Rust cache
with: # uses: Swatinem/rust-cache@v2
workspaces: src-tauri # with:
# workspaces: src-tauri
- name: Install frontend dependencies #
run: pnpm install --frozen-lockfile # - name: Install frontend dependencies
# run: pnpm install --frozen-lockfile
- name: Build iOS app #
run: pnpm tauri ios build # - name: Build iOS app
# run: pnpm tauri ios build
- name: Upload iOS artifacts #
uses: actions/upload-artifact@v4 # - name: Upload iOS artifacts
with: # uses: actions/upload-artifact@v4
name: ios # with:
path: | # name: ios
src-tauri/gen/apple/build/Build/Products/**/*.app # path: |
src-tauri/gen/apple/build/Build/Products/**/*.ipa # src-tauri/gen/apple/build/Build/Products/**/*.app
# src-tauri/gen/apple/build/Build/Products/**/*.ipa

View File

@ -174,10 +174,18 @@ jobs:
- name: Install frontend dependencies - name: Install frontend dependencies
run: pnpm install --frozen-lockfile run: pnpm install --frozen-lockfile
- name: Build Android APK - name: Setup Keystore (required for release)
run: |
echo "${{ secrets.ANDROID_KEYSTORE }}" | base64 -d > $HOME/keystore.jks
echo "ANDROID_KEYSTORE_PATH=$HOME/keystore.jks" >> $GITHUB_ENV
echo "ANDROID_KEYSTORE_PASSWORD=${{ secrets.ANDROID_KEYSTORE_PASSWORD }}" >> $GITHUB_ENV
echo "ANDROID_KEY_ALIAS=${{ secrets.ANDROID_KEY_ALIAS }}" >> $GITHUB_ENV
echo "ANDROID_KEY_PASSWORD=${{ secrets.ANDROID_KEY_PASSWORD }}" >> $GITHUB_ENV
- name: Build Android APK (signed)
run: pnpm tauri android build --apk run: pnpm tauri android build --apk
- name: Build Android AAB - name: Build Android AAB (signed)
run: pnpm tauri android build --aab run: pnpm tauri android build --aab
- name: Upload to Release - name: Upload to Release
@ -188,69 +196,70 @@ jobs:
src-tauri/gen/android/app/build/outputs/bundle/**/*.aab src-tauri/gen/android/app/build/outputs/bundle/**/*.aab
draft: true draft: true
build-ios: # iOS builds are disabled - uncomment when you have an Apple Developer Account
needs: create-release # build-ios:
permissions: # needs: create-release
contents: write # permissions:
runs-on: macos-latest # contents: write
steps: # runs-on: macos-latest
- name: Checkout repository # steps:
uses: actions/checkout@v4 # - name: Checkout repository
# uses: actions/checkout@v4
- name: Setup Node.js #
uses: actions/setup-node@v4 # - name: Setup Node.js
with: # uses: actions/setup-node@v4
node-version: '20' # with:
# node-version: '20'
- name: Install pnpm #
uses: pnpm/action-setup@v4 # - name: Install pnpm
# uses: pnpm/action-setup@v4
- name: Setup Rust #
uses: dtolnay/rust-toolchain@stable # - name: Setup Rust
# uses: dtolnay/rust-toolchain@stable
- name: Install Rust iOS targets #
run: | # - name: Install Rust iOS targets
rustup target add aarch64-apple-ios # run: |
rustup target add x86_64-apple-ios # rustup target add aarch64-apple-ios
rustup target add aarch64-apple-ios-sim # rustup target add x86_64-apple-ios
# rustup target add aarch64-apple-ios-sim
- name: Get pnpm store directory #
shell: bash # - name: Get pnpm store directory
run: | # shell: bash
echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV # run: |
# echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
- name: Setup pnpm cache #
uses: actions/cache@v4 # - name: Setup pnpm cache
with: # uses: actions/cache@v4
path: ${{ env.STORE_PATH }} # with:
key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }} # path: ${{ env.STORE_PATH }}
restore-keys: | # key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
${{ runner.os }}-pnpm-store- # restore-keys: |
# ${{ runner.os }}-pnpm-store-
- name: Setup Rust cache #
uses: Swatinem/rust-cache@v2 # - name: Setup Rust cache
with: # uses: Swatinem/rust-cache@v2
workspaces: src-tauri # with:
# workspaces: src-tauri
- name: Install frontend dependencies #
run: pnpm install --frozen-lockfile # - name: Install frontend dependencies
# run: pnpm install --frozen-lockfile
- name: Build iOS app #
run: pnpm tauri ios build # - name: Build iOS app
# run: pnpm tauri ios build
- name: Upload to Release #
uses: softprops/action-gh-release@v2 # - name: Upload to Release
with: # uses: softprops/action-gh-release@v2
files: | # with:
src-tauri/gen/apple/build/Build/Products/**/*.app # files: |
src-tauri/gen/apple/build/Build/Products/**/*.ipa # src-tauri/gen/apple/build/Build/Products/**/*.app
draft: true # src-tauri/gen/apple/build/Build/Products/**/*.ipa
# draft: true
publish-release: publish-release:
permissions: permissions:
contents: write contents: write
runs-on: ubuntu-22.04 runs-on: ubuntu-22.04
needs: [create-release, build-desktop, build-android, build-ios] needs: [create-release, build-desktop, build-android]
steps: steps:
- name: Publish release - name: Publish release