223 lines
8.5 KiB
YAML
223 lines
8.5 KiB
YAML
name: Main
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
build:
|
|
runs-on: ${{ matrix.os }}
|
|
|
|
strategy:
|
|
matrix:
|
|
include:
|
|
- os: ubuntu-latest
|
|
arch: [ arm64, amd64 ]
|
|
- os: macos-latest
|
|
arch: [ arm64, amd64 ]
|
|
- os: windows-latest
|
|
arch: [ arm64, amd64 ]
|
|
|
|
steps:
|
|
- name: Checkout Code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Git clone repo
|
|
if: runner.os == 'Linux' || runner.os == 'macOS'
|
|
env:
|
|
GIT_USER: ${{ secrets.GIT_USER }}
|
|
GIT_PASS: ${{ secrets.GIT_PASS }}
|
|
GIT_REPO_BASE: ${{ secrets.GIT_REPO_BASE }}
|
|
GIT_HOST: ${{ secrets.GIT_HOST }}
|
|
run: |
|
|
git clone -b main "https://${GIT_USER}:${GIT_PASS}@${GIT_HOST}/${GIT_REPO_BASE}/aigcpanel-pro.git" code
|
|
|
|
- name: Git clone repo
|
|
if: runner.os == 'Windows'
|
|
env:
|
|
GIT_USER: ${{ secrets.GIT_USER }}
|
|
GIT_PASS: ${{ secrets.GIT_PASS }}
|
|
GIT_REPO_BASE: ${{ secrets.GIT_REPO_BASE }}
|
|
GIT_HOST: ${{ secrets.GIT_HOST }}
|
|
shell: pwsh
|
|
run: |
|
|
git clone -b main "https://${env:GIT_USER}:${env:GIT_PASS}@${env:GIT_HOST}/${env:GIT_REPO_BASE}/aigcpanel-pro.git" code
|
|
|
|
- name: Setup Node.js
|
|
uses: actions/setup-node@v4
|
|
with:
|
|
node-version: 20
|
|
|
|
- name: Build Prepare (Linux)
|
|
if: runner.os == 'Linux'
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get install -y build-essential pkg-config
|
|
|
|
- name: Build Prepare (macOS)
|
|
if: runner.os == 'macOS'
|
|
run: |
|
|
brew install python-setuptools
|
|
|
|
|
|
- name: Cert Prepare (macOS)
|
|
if: runner.os == 'macOS'
|
|
env:
|
|
MACOS_CERTIFICATE: ${{ secrets.CORP_MACOS_CERTIFICATE }}
|
|
MACOS_CERTIFICATE_PASSWORD: ${{ secrets.CORP_MACOS_CERTIFICATE_PASSWORD }}
|
|
run: |
|
|
echo "find-identity"
|
|
security find-identity -p codesigning
|
|
echo "$MACOS_CERTIFICATE" | base64 --decode > certificate.p12
|
|
security create-keychain -p "" build.keychain
|
|
security import certificate.p12 -k build.keychain -P "$MACOS_CERTIFICATE_PASSWORD" -T /usr/bin/codesign
|
|
security list-keychains -s build.keychain
|
|
security set-keychain-settings -t 3600 -u build.keychain
|
|
security unlock-keychain -p "" build.keychain
|
|
echo "find-identity"
|
|
security find-identity -v -p codesigning build.keychain
|
|
echo "find-identity"
|
|
security find-identity -p codesigning
|
|
echo "set-key-partition-list"
|
|
security set-key-partition-list -S apple-tool:,apple: -s -k "" -l "Mac Developer ID Application: Xi'an Yanyi Information Technology Co., Ltd" -t private build.keychain
|
|
echo "export"
|
|
security export -k build.keychain -t certs -f x509 -p -o certificate.cer
|
|
echo "add-trusted-cert"
|
|
sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain certificate.cer
|
|
echo "find-identity"
|
|
security find-identity -p codesigning
|
|
|
|
- name: Install Dependencies (Linux/macOS)
|
|
if: runner.os == 'Linux' || runner.os == 'macOS'
|
|
working-directory: code
|
|
run: npm install
|
|
|
|
- name: Install Dependencies (Windows)
|
|
if: runner.os == 'Windows'
|
|
working-directory: code
|
|
shell: pwsh
|
|
run: npm install
|
|
|
|
- name: init ( Windows )
|
|
if: runner.os == 'Windows'
|
|
working-directory: code
|
|
shell: pwsh
|
|
run: bash ./scripts/init.sh
|
|
|
|
- name: init ( Linux/osx )
|
|
if: runner.os == 'Linux' || runner.os == 'macOS'
|
|
working-directory: code
|
|
run: bash ./scripts/init.sh
|
|
|
|
- name: Build Release Files
|
|
working-directory: code
|
|
run: npm run build
|
|
env:
|
|
DEBUG: "electron-notarize:*"
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
APPLE_ID: ${{ secrets.APPLE_ID }}
|
|
APPLE_ID_PASSWORD: ${{ secrets.APPLE_ID_PASSWORD }}
|
|
APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_ID_PASSWORD }}
|
|
APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
|
|
|
|
- name: Set Build Name ( Linux / macOS )
|
|
if: runner.os == 'Linux' || runner.os == 'macOS'
|
|
run: |
|
|
DIST_FILE_NAME=${{ runner.os }}-${{ runner.arch }}-v$(date +%Y%m%d_%H%M%S)-${RANDOM}
|
|
echo ::add-mask::$DIST_FILE_NAME
|
|
echo DIST_FILE_NAME=$DIST_FILE_NAME >> $GITHUB_ENV
|
|
|
|
- name: Set Build Name ( Windows )
|
|
if: runner.os == 'Windows'
|
|
shell: pwsh
|
|
run: |
|
|
$randomNumber = Get-Random -Minimum 10000 -Maximum 99999
|
|
$DIST_FILE_NAME = "Windows-X64-v$(Get-Date -Format 'yyyyMMdd_HHmmss')-$randomNumber"
|
|
Write-Host "::add-mask::$DIST_FILE_NAME"
|
|
echo "DIST_FILE_NAME=$DIST_FILE_NAME" >> $env:GITHUB_ENV
|
|
|
|
- name: Rename output files (Linux/macOS)
|
|
if: runner.os == 'Linux' || runner.os == 'macOS'
|
|
run: |
|
|
find code/dist-release/ -type f -name 'AigcPanelPro-*' -exec bash -c 'f="{}"; mv "$f" "${f/AigcPanelPro-/AigcPanel-}"' \;
|
|
|
|
- name: Upload Sourcemaps
|
|
if: runner.os == 'Linux'
|
|
working-directory: code
|
|
env:
|
|
GROW_URL: ${{ secrets.GROW_URL }}
|
|
GROW_APP_NAME: ${{ secrets.GROW_APP_NAME }}
|
|
GROW_ADMIN_API_TOKEN: ${{ secrets.GROW_ADMIN_API_TOKEN }}
|
|
run: |
|
|
BUILD_ID=$(node -p "require('./dist/build.json').buildId")
|
|
echo "Uploading sourcemaps for buildId=${BUILD_ID} ..."
|
|
find dist dist-electron/main -name "*.map" | while read f; do
|
|
echo " uploading $f"
|
|
RESP=$(curl -s -X POST "${GROW_URL}/api/admin/grow/buildUpload" \
|
|
-H "Authorization: Bearer ${GROW_ADMIN_API_TOKEN}" \
|
|
-F "appName=${GROW_APP_NAME}" \
|
|
-F "buildId=${BUILD_ID}" \
|
|
-F "file=@${f}" \
|
|
-F "name=${f}")
|
|
echo " response: ${RESP}"
|
|
done
|
|
echo "Sourcemap upload done."
|
|
|
|
- name: Rename output files (Windows)
|
|
if: runner.os == 'Windows'
|
|
shell: pwsh
|
|
run: |
|
|
Get-ChildItem code\dist-release\AigcPanelPro-* | Rename-Item -NewName { $_.Name -replace 'AigcPanelPro-','AigcPanel-' }
|
|
|
|
- name: Upload
|
|
if: github.event_name == 'workflow_dispatch'
|
|
uses: modstart/github-oss-action@master
|
|
with:
|
|
title: ${{ github.event.head_commit.message }}
|
|
key-id: ${{ secrets.OSS_2_KEY_ID }}
|
|
key-secret: ${{ secrets.OSS_2_KEY_SECRET }}
|
|
region: ${{ secrets.OSS_2_REGION }}
|
|
bucket: ${{ secrets.OSS_2_BUCKET }}
|
|
callbackTitle: ✅AIGCPanel-${{ runner.os }}-打包成功
|
|
callback: ${{ github.event_name == 'workflow_dispatch' && secrets.REPORT_URL || secrets.REPORT_URL_ME }}
|
|
assets: |
|
|
code/dist-release/*.exe:apps/aigcpanel-${{ env.DIST_FILE_NAME }}/{random}.bin:{name}
|
|
code/dist-release/*.dmg:apps/aigcpanel-${{ env.DIST_FILE_NAME }}/{random}.bin:{name}
|
|
code/dist-release/*.AppImage:apps/aigcpanel-${{ env.DIST_FILE_NAME }}/{random}.bin:{name}
|
|
code/dist-release/*.deb:apps/aigcpanel-${{ env.DIST_FILE_NAME }}/{random}.bin:{name}
|
|
|
|
- name: Release Assets
|
|
if: github.event_name == 'push'
|
|
uses: softprops/action-gh-release@v2
|
|
with:
|
|
draft: true
|
|
prerelease: false
|
|
fail_on_unmatched_files: false
|
|
overwrite_files: true
|
|
files: |
|
|
code/dist-release/*.exe
|
|
code/dist-release/*.dmg
|
|
code/dist-release/*.AppImage
|
|
code/dist-release/*.deb
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
|
|
|
|
# ── Notify ────────────────────────────────────────────────────────────────────
|
|
notify:
|
|
name: Notify
|
|
needs: [build]
|
|
runs-on: ubuntu-latest
|
|
if: success()
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- name: Notify Webhook
|
|
run: |
|
|
NAME="${{ github.event.repository.name }}"
|
|
TYPE=$(echo "${{ github.workflow }}" | tr '[:upper:]' '[:lower:]')
|
|
VERSION=$(node -p "require('./package.json').version")
|
|
curl -X POST "${{ secrets.HOOK_URL }}" \
|
|
-H "Content-Type: application/json" \
|
|
-d "{\"event\":\"${NAME}\",\"param\":{\"name\":\"${NAME}\",\"type\":\"${TYPE}\",\"version\":\"${VERSION}\"},\"data\":{\"name\":\"${NAME}\",\"type\":\"${TYPE}\",\"version\":\"${VERSION}\"}}"
|