feat: app child key derived from wallet master key #1280
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Wails build - all platforms | |
| on: | |
| push: | |
| branches: | |
| - master | |
| pull_request: | |
| types: [opened, synchronize] | |
| workflow_call: | |
| inputs: | |
| build-release: | |
| description: "Build full-featured release (codesigning, notarization, etc.)" | |
| type: boolean | |
| secrets: | |
| APPLE_DEVELOPER_CERTIFICATE_P12_BASE64: | |
| required: true | |
| APPLE_DEVELOPER_CERTIFICATE_PASSWORD: | |
| required: true | |
| APPLE_PASSWORD: | |
| required: true | |
| APPLE_TEAM_ID: | |
| required: true | |
| APPLE_USERNAME: | |
| required: true | |
| jobs: | |
| build: | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| build: | |
| [ | |
| { platform: linux/amd64, os: ubuntu-20.04 }, | |
| { platform: windows/amd64, os: windows-2019 }, | |
| { platform: darwin/universal, os: macos-12 }, | |
| ] | |
| runs-on: ${{ matrix.build.os }} | |
| env: | |
| TAG: ${{ github.ref_name }} | |
| steps: | |
| - name: Setup | |
| shell: bash | |
| run: | | |
| echo "EXEC_NAME=Alby Hub" >> $GITHUB_ENV | |
| echo "PACKAGE_NAME=albyhub-Desktop-${{ runner.os }}" >> $GITHUB_ENV | |
| - uses: actions/checkout@v4 | |
| with: | |
| submodules: recursive | |
| - name: Install dependencies | |
| if: runner.os == 'Linux' | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install -y patchelf | |
| - name: Setup GoLang | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version-file: "./go.mod" | |
| - name: Get dependencies | |
| run: go get -v -t -d ./... | |
| - name: Setup NodeJS | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: "20.x" | |
| - name: Install Wails | |
| run: go install github.com/wailsapp/wails/v2/cmd/[email protected] | |
| shell: bash | |
| - name: Install Linux Wails deps | |
| if: runner.os == 'Linux' | |
| run: sudo apt-get update && sudo apt-get install libgtk-3-0 libwebkit2gtk-4.0-dev gcc-aarch64-linux-gnu | |
| shell: bash | |
| - name: Install macOS Wails deps | |
| if: runner.os == 'macOS' | |
| run: | | |
| brew install create-dmg | |
| brew install Bearer/tap/gon | |
| shell: bash | |
| - name: Wails Doctor | |
| working-directory: . | |
| run: wails doctor | |
| shell: bash | |
| # On Windows, we need the shared libraries to be found in the same directory | |
| # as the executable. Wails build will fail otherwise. | |
| - name: Copy shared libraries | |
| if: runner.os == 'Windows' | |
| run: | | |
| cp `go list -m -f "{{.Dir}}" github.com/breez/breez-sdk-go`/breez_sdk/lib/windows-amd64/breez_sdk_bindings.dll ./ | |
| cp `go list -m -f "{{.Dir}}" github.com/getAlby/glalby-go`/glalby/x86_64-pc-windows-msvc/glalby_bindings.dll ./ | |
| cp `go list -m -f "{{.Dir}}" github.com/getAlby/ldk-node-go`/ldk_node/x86_64-pc-windows-msvc/ldk_node.dll ./ | |
| shell: bash | |
| - name: Copy appicon in place | |
| run: mkdir -p build && cp appicon.png build | |
| shell: bash | |
| - name: Build App | |
| if: runner.os == 'macOS' | |
| run: wails build --platform darwin/universal -webview2 embed -o "${{ env.EXEC_NAME }}" -tags "wails" -ldflags "-X 'github.com/getAlby/hub/version.Tag=${{ env.TAG }}'" | |
| shell: bash | |
| - name: Build App | |
| if: runner.os == 'Linux' | |
| run: wails build --platform linux/amd64 -webview2 embed -o "${{ env.EXEC_NAME }}" -tags "wails" -ldflags "-X 'github.com/getAlby/hub/version.Tag=${{ env.TAG }}'" | |
| shell: bash | |
| - name: Build Windows App | |
| if: runner.os == 'Windows' | |
| run: wails build --platform windows/amd64 -webview2 embed -o "${{ env.EXEC_NAME }}.exe" -tags "wails" -ldflags "-X 'github.com/getAlby/hub/version.Tag=${{ env.TAG }}'" | |
| shell: bash | |
| - name: Import Code-Signing Certificates for macOS | |
| if: runner.os == 'macOS' | |
| uses: Apple-Actions/import-codesign-certs@v3 | |
| with: | |
| # The certificates in a PKCS12 file encoded as a base64 string | |
| p12-file-base64: ${{ secrets.APPLE_DEVELOPER_CERTIFICATE_P12_BASE64 }} | |
| # The password used to import the PKCS12 file. | |
| p12-password: ${{ secrets.APPLE_DEVELOPER_CERTIFICATE_PASSWORD }} | |
| - name: Copy DLLs to the output directory | |
| if: runner.os == 'Windows' | |
| run: | | |
| cp breez_sdk_bindings.dll ./build/bin/ | |
| cp glalby_bindings.dll ./build/bin/ | |
| cp ldk_node.dll ./build/bin/ | |
| shell: bash | |
| - name: Copy shared libraries to the output directory and adjust directory structure | |
| if: runner.os == 'Linux' | |
| run: | | |
| mkdir -p ./build/bin/${{ env.PACKAGE_NAME }}/lib | |
| cp `go list -m -f "{{.Dir}}" github.com/breez/breez-sdk-go`/breez_sdk/lib/linux-amd64/libbreez_sdk_bindings.so ./build/bin/${{ env.PACKAGE_NAME }}/lib/ | |
| cp `go list -m -f "{{.Dir}}" github.com/getAlby/glalby-go`/glalby/x86_64-unknown-linux-gnu/libglalby_bindings.so ./build/bin/${{ env.PACKAGE_NAME }}/lib/ | |
| cp `go list -m -f "{{.Dir}}" github.com/getAlby/ldk-node-go`/ldk_node/x86_64-unknown-linux-gnu/libldk_node.so ./build/bin/${{ env.PACKAGE_NAME }}/lib/ | |
| mkdir -p ./build/bin/${{ env.PACKAGE_NAME }}/bin | |
| mv "./build/bin/${{ env.EXEC_NAME }}" ./build/bin/${{ env.PACKAGE_NAME }}/bin/ | |
| shell: bash | |
| - name: Patch executable RPATH | |
| if: runner.os == 'Linux' | |
| run: | | |
| patchelf --force-rpath --set-rpath '$ORIGIN/../lib' "./build/bin/${{ env.PACKAGE_NAME }}/bin/${{ env.EXEC_NAME }}" | |
| - name: Copy shared libraries to the output directory | |
| if: runner.os == 'macOS' | |
| run: | | |
| mkdir -p "./build/bin/${{ env.EXEC_NAME }}.app/Contents/Frameworks" | |
| lipo -create -output "./build/bin/${{ env.EXEC_NAME }}.app/Contents/Frameworks/libbreez_sdk_bindings.dylib" `go list -m -f "{{.Dir}}" github.com/breez/breez-sdk-go`/breez_sdk/lib/darwin-aarch64/libbreez_sdk_bindings.dylib `go list -m -f "{{.Dir}}" github.com/breez/breez-sdk-go`/breez_sdk/lib/darwin-amd64/libbreez_sdk_bindings.dylib | |
| cp `go list -m -f "{{.Dir}}" github.com/getAlby/glalby-go`/glalby/universal-macos/libglalby_bindings.dylib "./build/bin/${{ env.EXEC_NAME }}.app/Contents/Frameworks/" | |
| cp `go list -m -f "{{.Dir}}" github.com/getAlby/ldk-node-go`/ldk_node/universal-macos/libldk_node.dylib "./build/bin/${{ env.EXEC_NAME }}.app/Contents/Frameworks/" | |
| shell: bash | |
| - name: Patch executable RPATH | |
| if: runner.os == 'macOS' | |
| run: | | |
| install_name_tool -add_rpath @executable_path/../Frameworks "./build/bin/${{ env.EXEC_NAME }}.app/Contents/MacOS/${{ env.EXEC_NAME }}" | |
| - name: Add macOS perms | |
| if: runner.os == 'macOS' | |
| run: chmod +x "build/bin/${{ env.EXEC_NAME }}.app/Contents/MacOS/${{ env.EXEC_NAME }}" | |
| shell: bash | |
| - name: Add Linux perms | |
| if: runner.os == 'Linux' | |
| run: chmod +x "build/bin/${{ env.PACKAGE_NAME }}/bin/${{ env.EXEC_NAME }}" | |
| shell: bash | |
| # Store everything in a tar archive to preserve permissions | |
| # (specifically, the executable bit on the app executable). | |
| - name: Make output tar archive | |
| if: runner.os == 'Linux' | |
| run: | | |
| mkdir -p ./build/out | |
| tar -cjf ./build/out/${{ env.PACKAGE_NAME }}.tar.bz2 -C ./build/bin . | |
| rm -Rf ./build/bin/* | |
| mv ./build/out/${{ env.PACKAGE_NAME }}.tar.bz2 ./build/bin/ | |
| - name: Sign the macOS binary | |
| if: runner.os == 'macOS' | |
| run: | | |
| echo "Signing Package" | |
| /usr/bin/codesign -s "Developer ID Application: Alby Inc." -f -v --deep --timestamp --options runtime --entitlements ./build/darwin/entitlements.plist "./build/bin/${{ env.EXEC_NAME }}.app" | |
| env: | |
| AC_USERNAME: ${{ secrets.APPLE_USERNAME }} | |
| AC_PASSWORD: ${{ secrets.APPLE_PASSWORD }} | |
| AC_PROVIDER: ${{ secrets.APPLE_TEAM_ID }} | |
| - name: Make DMG image for macOS | |
| if: runner.os == 'macOS' | |
| run: | | |
| mkdir -p ./build/out | |
| create-dmg --volname "Alby Hub" --background "./build/darwin/dmgcover.png" --window-pos 200 120 --window-size 800 400 --icon-size 80 --icon "${{ env.EXEC_NAME }}.app" 200 160 --hide-extension "${{ env.EXEC_NAME }}.app" --app-drop-link 600 160 "./build/out/${{ env.PACKAGE_NAME }}.dmg" "./build/bin/${{ env.EXEC_NAME }}.app" | |
| rm -Rf ./build/bin/* | |
| mv ./build/out/${{ env.PACKAGE_NAME }}.dmg ./build/bin/ | |
| - name: Generate gon-notarize.json | |
| if: runner.os == 'macOS' | |
| run: | | |
| cat > ./build/darwin/gon-notarize.json << EOF | |
| { | |
| "notarize": [ | |
| { | |
| "path": "./build/bin/${PACKAGE_NAME}.dmg", | |
| "bundle_id": "com.getalby.AlbyHub" | |
| } | |
| ] | |
| } | |
| EOF | |
| - name: Notarize the DMG image | |
| if: runner.os == 'macOS' | |
| run: | | |
| echo "Notarizing Zip Files" | |
| gon -log-level=info -log-json ./build/darwin/gon-notarize.json | |
| env: | |
| AC_USERNAME: ${{ secrets.APPLE_USERNAME }} | |
| AC_PASSWORD: ${{ secrets.APPLE_PASSWORD }} | |
| AC_PROVIDER: ${{ secrets.APPLE_TEAM_ID }} | |
| - name: Make Windows ZIP archive | |
| if: runner.os == 'Windows' | |
| run: | | |
| mkdir -p ./build/out | |
| 7z a -tzip ./build/out/${{ env.PACKAGE_NAME }}.zip ./build/bin/* | |
| rm -Rf ./build/bin/* | |
| mv ./build/out/${{ env.PACKAGE_NAME }}.zip ./build/bin/ | |
| shell: bash | |
| - uses: actions/upload-artifact@v4 | |
| if: runner.os == 'Linux' | |
| with: | |
| name: ${{ env.PACKAGE_NAME }} | |
| path: | | |
| ./build/bin/${{ env.PACKAGE_NAME }}.tar.bz2 | |
| if-no-files-found: error | |
| - uses: actions/upload-artifact@v4 | |
| if: runner.os == 'macOS' | |
| with: | |
| name: ${{ env.PACKAGE_NAME }} | |
| path: | | |
| ./build/bin/${{ env.PACKAGE_NAME }}.dmg | |
| if-no-files-found: error | |
| - uses: actions/upload-artifact@v4 | |
| if: runner.os == 'Windows' | |
| with: | |
| name: ${{ env.PACKAGE_NAME }} | |
| path: | | |
| ./build/bin/${{ env.PACKAGE_NAME }}.zip | |
| if-no-files-found: error |