Use self-signed provisioning profile

maplibre · Oct 4, 2024 · 4cfcaa0 · 4cfcaa0
1 parent 38bc81b
commit 4cfcaa0
Show file tree

Hide file tree

Showing 7 changed files with 105 additions and 3 deletions.
diff --git a/.github/workflows/ios-ci.yml b/.github/workflows/ios-ci.yml
@@ -83,6 +83,9 @@ jobs:
             ${{ runner.os }}-bazel-
           path: ~/.cache/bazel
 
+      - name: Import self-signed certificate
+        run: security import codesign/MapLibre.cer
+
       - name: Build Example (Swift) App
         run: bazel build //platform/ios/app-swift:MapLibreApp --//:renderer=metal --//platform/ios:use_provisioning_profile=False
 
@@ -102,12 +105,18 @@ jobs:
       - name: Running iOS UI tests (Address+UB Sanitizer)
         run: bazel test //platform/ios/iosapp-UITests:uitest --test_output=errors --//:renderer=metal --features=include_clang_rt --copt=-fsanitize=undefined --linkopt=-fsanitize=undefined --copt=-fsanitize-recover=null --linkopt=-fsanitize-recover=null --//platform/ios:use_provisioning_profile=False
 
+      - name: Create Bazel config
+        working-directory: platform/darwin
+        run: |
+          grep -v APPLE_MOBILE_PROVISIONING_PROFILE_NAME bazel/example_config.bzl > bazel/config.bzl
+          echo 'APPLE_MOBILE_PROVISIONING_PROFILE_NAME = "Fake iOS Provisioning Profile"' >> bazel/config.bzl
+
       # render test
 
       - name: Build RenderTest .ipa and .xctest for AWS Device Farm
         run: |
           set -e
-          bazel run //platform/ios:xcodeproj --@rules_xcodeproj//xcodeproj:extra_common_flags="--//:renderer=metal --//platform/ios:use_provisioning_profile=False"
+          bazel run //platform/ios:xcodeproj --@rules_xcodeproj//xcodeproj:extra_common_flags="--//:renderer=metal
           build_dir="$(mktemp -d)"
           xcodebuild build-for-testing  -scheme RenderTest -project MapLibre.xcodeproj -derivedDataPath "$build_dir" CODE_SIGNING_ALLOWED=NO
           render_test_app_dir="$(dirname "$(find "$build_dir" -name RenderTestApp.app)")"
@@ -134,7 +143,7 @@ jobs:
       - name: Build CppUnitTests .ipa and .xctest for AWS Device Farm
         run: |
           set -e
-          bazel run //platform/ios:xcodeproj --@rules_xcodeproj//xcodeproj:extra_common_flags="--//:renderer=metal --//platform/ios:use_provisioning_profile=False"
+          bazel run //platform/ios:xcodeproj --@rules_xcodeproj//xcodeproj:extra_common_flags="--//:renderer=metal
           build_dir="$(mktemp -d)"
           xcodebuild build-for-testing  -scheme CppUnitTests -project MapLibre.xcodeproj -derivedDataPath "$build_dir" CODE_SIGNING_ALLOWED=NO
           ios_cpp_test_app_dir="$(dirname "$(find "$build_dir" -name CppUnitTestsApp.app)")"

diff --git a/MODULE.bazel b/MODULE.bazel
@@ -28,7 +28,9 @@ pnpm = use_extension("@aspect_rules_js//npm:extensions.bzl", "pnpm")
 use_repo(pnpm, "pnpm")
 
 provisioning_profile_repository = use_extension("@build_bazel_rules_apple//apple:apple.bzl", "provisioning_profile_repository_extension")
-provisioning_profile_repository.setup()
+provisioning_profile_repository.setup(
+    fallback_profiles = "//platform/ios/codesign:profiles"
+)
 
 http_file = use_repo_rule("@bazel_tools//tools/build_defs/repo:http.bzl", "http_file")
 

diff --git a/platform/ios/codesign/BUILD.bazel b/platform/ios/codesign/BUILD.bazel
@@ -0,0 +1,5 @@
+filegroup(
+    name = "profiles",
+    srcs = ["MapLibre.mobileprovision"],
+    visibility = ["//visibility:public"],
+)
diff --git a/platform/ios/codesign/MapLibre.cer b/platform/ios/codesign/MapLibre.cer
diff --git a/platform/ios/codesign/MapLibre.mobileprovision b/platform/ios/codesign/MapLibre.mobileprovision
diff --git a/platform/ios/codesign/MapLibre.plist b/platform/ios/codesign/MapLibre.plist
@@ -0,0 +1,78 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>AppIDName</key>
+  <string>selfsigned: any app</string>
+  <key>ApplicationIdentifierPrefix</key>
+  <array>
+  <string>QMC7N4BDVZ</string>
+  </array>
+  <key>CreationDate</key>
+  <date>2024-10-03T15:19:16Z</date>
+  <key>Platform</key>
+  <array>
+    <string>iOS</string>
+  </array>
+    <key>IsXcodeManaged</key>
+  <true/>
+  <key>DeveloperCertificates</key>
+  <array>
+    <data>MIIDqDCCApCgAwIBAgIBATANBgkqhkiG9w0BAQsFADBqMSkwJwYDVQQDDCBpT1Mg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+    </data>
+  </array>
+  <key>Entitlements</key>
+  <dict>
+    <key>keychain-access-groups</key>
+    <array>
+      <string>MapLibre.*</string>    
+    </array>
+    <key>get-task-allow</key>
+    <true/>
+    <key>application-identifier</key>
+    <string>QMC7N4BDVZ.*</string>
+    <key>com.apple.developer.team-identifier</key>
+    <string>MapLibre</string>
+  </dict>
+  <key>ExpirationDate</key>
+  <date>2034-10-04T09:54:14Z</date>
+  <key>Name</key>
+  <string>Fake iOS Provisioning Profile</string>
+  <key>ProvisionedDevices</key>
+  <array>
+  </array>
+  <key>LocalProvision</key>
+  <true/>
+  <key>TeamIdentifier</key>
+  <array>
+    <string>QMC7N4BDVZ</string>
+  </array>
+  <key>TeamName</key>
+  <string>MapLibre</string>
+  <key>TimeToLive</key>
+  <integer>3652</integer>
+  <key>UUID</key>
+  <string>CEC20DD6-95A4-40E4-B0D6-48108994172A</string>
+  <key>Version</key>
+  <integer>1</integer>
+</dict>
+</plist>
diff --git a/platform/ios/codesign/README.md b/platform/ios/codesign/README.md
@@ -0,0 +1,8 @@
+# Self-Signed Provisioning Profile
+
+This directory contains a self-signed provisioning profile.
+
+```
+security import MapLibre.cer
+security cms -S -N 'iOS Team Provisioning Profile: *' -i MapLibre.plist -o MapLibre.mobileprovision
+```