build-github #125
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: build-github | |
| on: [workflow_dispatch] | |
| env: | |
| WIN_ONEAPI: https://registrationcenter-download.intel.com/akdlm/IRC_NAS/18723/w_onemkl_p_2022.1.0.192_offline.exe | |
| MXO_GLOB: -e mxo | |
| jobs: | |
| deploy-win: | |
| runs-on: windows-2019 | |
| steps: | |
| - name: Install oneMKL | |
| shell: bash | |
| run: | | |
| mkdir install | |
| cd install | |
| curl $WIN_ONEAPI --output oneapi_install.exe | |
| ./oneapi_install.exe -s -x -f webimage_extracted --log extract.log | |
| ./webimage_extracted/bootstrapper.exe -s --action install --eula accept -p=NEED_VS2022_INTEGRATION=1 | |
| - name: Add msbuild to PATH | |
| uses: microsoft/[email protected] | |
| - name: Checkout max-sdk-base | |
| uses: actions/checkout@v3 | |
| with: | |
| repository: 'Cycling74/max-sdk-base' | |
| path: "max-sdk-base" | |
| - name: Checkout main repo | |
| uses: actions/checkout@v3 | |
| with: | |
| path: "ah-externals" | |
| - name: Build windows externals | |
| run: msbuild "ah-externals/AH Externals.sln" /p:configuration="Release" /p:platform=x64 /v:q /clp:ErrorsOnly /nologo /m | |
| - name: Upload windows builds | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: deploy-win | |
| path: "ah-externals/AH_Externals_Package/AHarker_Externals/externals/" | |
| deploy-mac: | |
| runs-on: macos-latest | |
| needs: deploy-win | |
| steps: | |
| - name: Get current date | |
| id: date | |
| run: echo "::set-output name=date::$(date +'%Y-%m-%d')" | |
| - name: Checkout max-sdk-base | |
| uses: actions/checkout@v3 | |
| with: | |
| repository: 'Cycling74/max-sdk-base' | |
| path: "max-sdk-base" | |
| - name: Checkout main repo | |
| uses: actions/checkout@v3 | |
| with: | |
| path: "ah-externals" | |
| - name: Download windows builds | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: deploy-win | |
| path: "ah-externals/AH_Externals_Package/AHarker_Externals/externals/" | |
| - name: Build mac externals | |
| run: xcodebuild -project 'ah-externals/AH Externals.xcodeproj' -scheme 'AH Externals' -destination 'platform=OS X,arch=x86_64' -configuration Deployment -quiet build CODE_SIGNING_ALLOWED=YES | |
| - name: Setup keychain and identities | |
| shell: bash | |
| env: | |
| TEAM_ID: ${{ secrets.TEAM_ID }} | |
| APPLE_ID: ${{ secrets.APPLE_ID }} | |
| APP_SPECIFIC_PWD: ${{ secrets.APP_SPECIFIC_PWD }} | |
| CERT_PWD: ${{ secrets.CERT_PWD }} | |
| CERT_BASE64: ${{ secrets.CERT_BASE64}} | |
| CERTPATH: ${{ runner.temp }}/certificate.p12 | |
| KEYCHAINPWD: temporarykeychainpassword | |
| KEYCHAINPATH: ${{ runner.temp }}/app-signing.keychain-db | |
| # create and setup a temporary keychain, then decode the certificate and setup creditials for codesigning and notarization | |
| run: | | |
| security create-keychain -p "$KEYCHAINPWD" "$KEYCHAINPATH" | |
| security list-keychain -d user -s "$KEYCHAINPATH" | |
| security set-keychain-settings "$KEYCHAINPATH" | |
| security unlock-keychain -p "$KEYCHAINPWD" "$KEYCHAINPATH" | |
| echo -n "$CERT_BASE64" | base64 --decode --output $CERTPATH | |
| security import "$CERTPATH" -P "$CERT_PWD" -A -t cert -f pkcs12 -k "$KEYCHAINPATH" -T /usr/bin/codesign | |
| security set-key-partition-list -S apple-tool:,apple:, -s -k "$KEYCHAINPATH" -D "$CERT_BASE64" -t private "$KEYCHAINPATH" | |
| xcrun notarytool store-credentials "AJH-NOTARIZE" --apple-id $APPLE_ID --team-id $TEAM_ID --password $APP_SPECIFIC_PWD | |
| - name: Mac builds notarization | |
| shell: bash | |
| # install fd /cd to package make temp folder with mxos / sign mxos / copy to folder / zip / notarize upload / deleete temps / staple | |
| run: | | |
| brew install fd | |
| cd ah-externals/AH_Externals_Package | |
| mkdir -p Notarization | |
| fd $MXO_GLOB -E .git -I | |
| fd $MXO_GLOB -E .git -I -x codesign --force --timestamp --sign "Developer ID Application" {} | |
| fd $MXO_GLOB -E .git -I -x ditto {} Notarization/{/} | |
| /usr/bin/ditto -c -k --keepParent Notarization Notarization.zip | |
| xcrun notarytool submit Notarization.zip --keychain-profile "AJH-NOTARIZE" --wait | |
| rm -rf Notarization Notarization.zip | |
| fd $MXO_GLOB -E .git -I -x xcrun stapler staple {} | |
| - name: Make zip | |
| run: | | |
| mkdir build/ | |
| cd ah-externals/AH_Externals_Package/ | |
| zip -r ../../build/AHarker_Externals.zip AHarker_Externals | |
| - name: Make release | |
| uses: "softprops/action-gh-release@v1" | |
| with: | |
| prerelease: true | |
| fail_on_unmatched_files: true | |
| files: build/AHarker_Externals.zip | |
| target_commitish: ${{ github.sha }} | |
| tag_name: latest-sse-${{ steps.date.outputs.date }} | |
| body: This is an automated build of AHarker Externals. Releases are currently in an alpha stage whilst some aspects of interface are finalised and for a small number of objects may not correspond exactly in behaviour to earlier public versions. | |
| generate_release_notes: true | |