fix: Add workarounds to prevent filesystem corruption on Apple Virtualization VMs. #2493
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build | |
| on: | |
| push: | |
| branches: | |
| - '**' | |
| tags-ignore: | |
| - '**' | |
| paths-ignore: | |
| - 'LICENSE' | |
| - '**.md' | |
| pull_request: | |
| release: | |
| types: [created] | |
| workflow_dispatch: | |
| inputs: | |
| test_release: | |
| description: 'Test release?' | |
| required: true | |
| default: 'false' | |
| rebuild_sysroot: | |
| description: 'Force rebuild sysroot?' | |
| required: true | |
| default: 'false' | |
| env: | |
| BUILD_XCODE_PATH: /Applications/Xcode_15.3.app | |
| RUNNER_IMAGE: macos-14 | |
| jobs: | |
| configuration: | |
| name: Setup configuration | |
| runs-on: ubuntu-latest | |
| outputs: | |
| runner: ${{ steps.checker.outputs.runners }} | |
| github-runner: ${{ steps.checker.outputs.github-runner }} | |
| steps: | |
| - name: Check for hosted runners | |
| id: checker | |
| shell: bash | |
| env: | |
| IS_SELF_HOSTED_RUNNER: ${{ vars.IS_SELF_HOSTED_RUNNER || (github.repository_owner == 'utmapp' && 'true') }} | |
| run: | | |
| echo "github-runner='$RUNNER_IMAGE'" >> $GITHUB_OUTPUT | |
| if [ "$IS_SELF_HOSTED_RUNNER" == "true" ]; then | |
| echo "runners=['self-hosted', 'macOS']" >> $GITHUB_OUTPUT | |
| else | |
| echo "runners='$RUNNER_IMAGE'" >> $GITHUB_OUTPUT | |
| fi | |
| build-sysroot: | |
| name: Build Sysroot | |
| runs-on: ${{ fromJSON(needs.configuration.outputs.runner) }} | |
| needs: configuration | |
| strategy: | |
| matrix: | |
| arch: [arm64] | |
| platform: [ios, ios_simulator, ios-tci, ios_simulator-tci, macos, visionos, visionos_simulator, visionos-tci, visionos_simulator-tci] | |
| include: | |
| # x86_64 supported only for macOS and simulators | |
| - arch: x86_64 | |
| platform: macos | |
| - arch: x86_64 | |
| platform: ios_simulator | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| with: | |
| submodules: recursive | |
| - name: Setup Xcode | |
| shell: bash | |
| run: | | |
| [[ "$(xcode-select -p)" == "${{ env.BUILD_XCODE_PATH }}"* ]] || sudo xcode-select -s "${{ env.BUILD_XCODE_PATH }}" | |
| - name: Cache Sysroot | |
| id: cache-sysroot | |
| uses: osy/actions-cache@v3 | |
| with: | |
| path: sysroot-${{ matrix.platform }}-${{ matrix.arch }} | |
| key: ${{ matrix.platform }}-${{ matrix.arch }}-${{ hashFiles('scripts/build_dependencies.sh') }}-${{ hashFiles('patches/**') }} | |
| upload-chunk-size: 1048576 # 1 MiB | |
| - name: Setup Path | |
| shell: bash | |
| run: | | |
| echo "/usr/local/opt/bison/bin:/opt/homebrew/opt/bison/bin" >> $GITHUB_PATH | |
| - name: Install Requirements | |
| if: (steps.cache-sysroot.outputs.cache-hit != 'true' || github.event.inputs.rebuild_sysroot == 'true') && needs.configuration.outputs.runner == env.RUNNER_IMAGE | |
| run: | | |
| brew uninstall cmake | |
| brew install bison pkg-config gettext glib-utils libgpg-error nasm make meson | |
| pip3 install --user six pyparsing | |
| rm -f /usr/local/lib/pkgconfig/*.pc | |
| - name: Build Sysroot | |
| if: steps.cache-sysroot.outputs.cache-hit != 'true' || github.event.inputs.rebuild_sysroot == 'true' | |
| run: ./scripts/build_dependencies.sh -p ${{ matrix.platform }} -a ${{ matrix.arch }} | |
| env: | |
| NCPU: ${{ endsWith(matrix.platform, '-tci') && '1' || '0' }} # limit 1 CPU for TCI build due to memory issues, 0 = unlimited for other builds | |
| - name: Compress Sysroot | |
| if: steps.cache-sysroot.outputs.cache-hit != 'true' || github.event_name == 'release' || github.event.inputs.test_release == 'true' | |
| run: tar -acf sysroot.tgz sysroot* | |
| - name: Upload Sysroot | |
| if: steps.cache-sysroot.outputs.cache-hit != 'true' || github.event_name == 'release' || github.event.inputs.test_release == 'true' | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: Sysroot-${{ matrix.platform }}-${{ matrix.arch }} | |
| path: sysroot.tgz | |
| build-sysroot-universal: | |
| name: Build Sysroot (Universal Mac) | |
| runs-on: ${{ fromJSON(needs.configuration.outputs.github-runner) }} | |
| needs: [configuration, build-sysroot] | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| - name: Cache Sysroot (Universal Mac) | |
| id: cache-sysroot-universal | |
| uses: osy/actions-cache@v3 | |
| with: | |
| path: sysroot-macOS-arm64_x86_64 | |
| key: macos-universal-${{ hashFiles('scripts/build_dependencies.sh', 'scripts/pack_dependencies.sh') }}-${{ hashFiles('patches/**') }} | |
| - name: Cache Sysroot (arm64) | |
| if: steps.cache-sysroot-universal.outputs.cache-hit != 'true' | |
| id: cache-sysroot-arm64 | |
| uses: osy/actions-cache@v3 | |
| with: | |
| path: sysroot-macos-arm64 | |
| key: macos-arm64-${{ hashFiles('scripts/build_dependencies.sh') }}-${{ hashFiles('patches/**') }} | |
| - name: Cache Sysroot (x86_64) | |
| if: steps.cache-sysroot-universal.outputs.cache-hit != 'true' | |
| id: cache-sysroot-x86_64 | |
| uses: osy/actions-cache@v3 | |
| with: | |
| path: sysroot-macos-x86_64 | |
| key: macos-x86_64-${{ hashFiles('scripts/build_dependencies.sh') }}-${{ hashFiles('patches/**') }} | |
| - name: Check Cache | |
| if: steps.cache-sysroot-universal.outputs.cache-hit != 'true' && (steps.cache-sysroot-arm64.outputs.cache-hit != 'true' || steps.cache-sysroot-x86_64.outputs.cache-hit != 'true') | |
| uses: actions/github-script@v6 | |
| with: | |
| script: core.setFailed('Cached sysroot not found!') | |
| - name: Pack Universal Sysroot | |
| if: steps.cache-sysroot-universal.outputs.cache-hit != 'true' | |
| run: | | |
| ./scripts/pack_dependencies.sh . macos arm64 x86_64 | |
| - name: Compress Sysroot | |
| if: steps.cache-sysroot-universal.outputs.cache-hit != 'true' || github.event_name == 'release' || github.event.inputs.test_release == 'true' | |
| run: tar -acf sysroot.tgz sysroot-macOS-arm64_x86_64 | |
| - name: Upload Sysroot | |
| if: steps.cache-sysroot-universal.outputs.cache-hit != 'true' || github.event_name == 'release' || github.event.inputs.test_release == 'true' | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: Sysroot-macos-universal | |
| path: sysroot.tgz | |
| build-utm: | |
| name: Build UTM | |
| runs-on: ${{ fromJSON(needs.configuration.outputs.runner) }} | |
| needs: [configuration, build-sysroot] | |
| strategy: | |
| matrix: | |
| configuration: [ | |
| {arch: "arm64", sdk: "iphoneos", platform: "ios", scheme: "iOS"}, | |
| {arch: "arm64", sdk: "iphoneos", platform: "ios-tci", scheme: "iOS-SE"}, | |
| {arch: "arm64", sdk: "iphoneos", platform: "ios-tci", scheme: "iOS-Remote"}, | |
| {arch: "arm64", sdk: "xros", platform: "visionos", scheme: "iOS"}, | |
| {arch: "arm64", sdk: "xros", platform: "visionos-tci", scheme: "iOS-SE"}, | |
| {arch: "arm64", sdk: "xros", platform: "visionos-tci", scheme: "iOS-Remote"}, | |
| {arch: "arm64", sdk: "macosx", platform: "macos", scheme: "macOS"}, | |
| {arch: "x86_64", sdk: "macosx", platform: "macos", scheme: "macOS"}, | |
| ] | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| with: | |
| submodules: recursive | |
| - name: Cache Sysroot | |
| id: cache-sysroot | |
| uses: osy/actions-cache@v3 | |
| with: | |
| path: sysroot-${{ matrix.configuration.platform }}-${{ matrix.configuration.arch }} | |
| key: ${{ matrix.configuration.platform }}-${{ matrix.configuration.arch }}-${{ hashFiles('scripts/build_dependencies.sh') }}-${{ hashFiles('patches/**') }} | |
| - name: Check Cache | |
| if: steps.cache-sysroot.outputs.cache-hit != 'true' | |
| uses: actions/github-script@v6 | |
| with: | |
| script: core.setFailed('Cached sysroot not found!') | |
| - name: Setup Xcode | |
| shell: bash | |
| run: | | |
| [[ "$(xcode-select -p)" == "${{ env.BUILD_XCODE_PATH }}"* ]] || sudo xcode-select -s "${{ env.BUILD_XCODE_PATH }}" | |
| - name: Build UTM | |
| run: | | |
| ./scripts/build_utm.sh -k ${{ matrix.configuration.sdk }} -s ${{ matrix.configuration.scheme }} -a ${{ matrix.configuration.arch }} -o UTM | |
| tar -acf UTM.xcarchive.tgz UTM.xcarchive | |
| - name: Upload UTM | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: UTM-${{ matrix.configuration.scheme }}-${{ matrix.configuration.platform }}-${{ matrix.configuration.arch }} | |
| path: UTM.xcarchive.tgz | |
| build-universal: | |
| name: Build UTM (Universal Mac) | |
| runs-on: ${{ fromJSON(needs.configuration.outputs.runner) }} | |
| needs: [configuration, build-sysroot-universal] | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| with: | |
| submodules: recursive | |
| - name: Cache Sysroot | |
| id: cache-sysroot | |
| uses: osy/actions-cache@v3 | |
| with: | |
| path: sysroot-macOS-arm64_x86_64 | |
| key: macos-universal-${{ hashFiles('scripts/build_dependencies.sh', 'scripts/pack_dependencies.sh') }}-${{ hashFiles('patches/**') }} | |
| - name: Check Cache | |
| if: steps.cache-sysroot.outputs.cache-hit != 'true' | |
| uses: actions/github-script@v6 | |
| with: | |
| script: core.setFailed('Cached sysroot not found!') | |
| - name: Setup Xcode | |
| shell: bash | |
| run: | | |
| [[ "$(xcode-select -p)" == "${{ env.BUILD_XCODE_PATH }}"* ]] || sudo xcode-select -s "${{ env.BUILD_XCODE_PATH }}" | |
| - name: Build UTM | |
| run: | | |
| ./scripts/build_utm.sh -t "$SIGNING_TEAM_ID" -k macosx -s macOS -a "arm64 x86_64" -o UTM | |
| tar -acf UTM.xcarchive.tgz UTM.xcarchive | |
| env: | |
| SIGNING_TEAM_ID: ${{ vars.SIGNING_TEAM_ID }} | |
| - name: Upload UTM | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: UTM-macos-universal | |
| path: UTM.xcarchive.tgz | |
| package-ios: | |
| name: Package (iOS) | |
| runs-on: ${{ fromJSON(needs.configuration.outputs.github-runner) }} | |
| needs: [configuration, build-utm] | |
| strategy: | |
| matrix: | |
| configuration: [ | |
| {platform: "ios", scheme: "iOS", mode: "ipa", name: "UTM.ipa", path: "UTM.ipa"}, | |
| {platform: "ios-tci", scheme: "iOS-SE", mode: "ipa-se", name: "UTM-SE.ipa", path: "UTM SE.ipa"}, | |
| {platform: "ios", scheme: "iOS", mode: "ipa-hv", name: "UTM-HV.ipa", path: "UTM.ipa"}, | |
| {platform: "ios", scheme: "iOS", mode: "deb", name: "UTM.deb", path: "UTM.deb"}, | |
| {platform: "visionos", scheme: "iOS", mode: "ipa", name: "UTM-visionOS.ipa", path: "UTM.ipa"}, | |
| {platform: "visionos-tci", scheme: "iOS-SE", mode: "ipa-se", name: "UTM-SE-visionOS.ipa", path: "UTM SE.ipa"}, | |
| {platform: "ios-tci", scheme: "iOS-Remote", mode: "ipa-remote", name: "UTM-Remote.ipa", path: "UTM Remote.ipa"}, | |
| {platform: "visionos-tci", scheme: "iOS-Remote", mode: "ipa-remote", name: "UTM-Remote-visionOS.ipa", path: "UTM Remote.ipa"}, | |
| ] | |
| if: github.event_name == 'release' || github.event.inputs.test_release == 'true' | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| - name: Download Artifact | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: UTM-${{ matrix.configuration.scheme }}-${{ matrix.configuration.platform }}-arm64 | |
| - name: Install ldid + dpkg | |
| run: brew install ldid dpkg | |
| - name: Fakesign IPA | |
| run: | | |
| tar -xf UTM.xcarchive.tgz | |
| ./scripts/package.sh ${{ matrix.configuration.mode }} UTM.xcarchive . | |
| - name: Upload Artifact | |
| if: github.event_name != 'release' | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: ${{ matrix.configuration.name }} | |
| path: ${{ matrix.configuration.path }} | |
| - name: Upload Release Asset | |
| if: github.event_name == 'release' | |
| uses: actions/[email protected] | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| upload_url: ${{ github.event.release.upload_url }} | |
| asset_path: ${{ matrix.configuration.path }} | |
| asset_name: ${{ matrix.configuration.name }} | |
| asset_content_type: application/octet-stream | |
| dispatch-ios: | |
| name: Dispatch (iOS) | |
| runs-on: ubuntu-latest | |
| needs: package-ios | |
| if: github.event_name == 'release' | |
| steps: | |
| - name: Update AltStore Repository | |
| continue-on-error: true | |
| uses: peter-evans/repository-dispatch@v1 | |
| with: | |
| token: ${{ secrets.PERSONAL_ACCESS_TOKEN }} | |
| repository: ${{ vars.DISPATCH_ALTSTORE_REPO_NAME }} | |
| event-type: new-release | |
| - name: Update Cydia Repository | |
| continue-on-error: true | |
| uses: peter-evans/repository-dispatch@v1 | |
| with: | |
| token: ${{ secrets.PERSONAL_ACCESS_TOKEN }} | |
| repository: ${{ vars.DISPATCH_CYDIA_REPO_NAME }} | |
| event-type: new-release | |
| package-mac: | |
| name: Package (macOS) | |
| runs-on: ${{ fromJSON(needs.configuration.outputs.github-runner) }} | |
| needs: [configuration, build-universal] | |
| if: github.event_name == 'release' || github.event.inputs.test_release == 'true' | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| - name: Setup Xcode | |
| shell: bash | |
| run: | | |
| [[ "$(xcode-select -p)" == "${{ env.BUILD_XCODE_PATH }}"* ]] || sudo xcode-select -s "${{ env.BUILD_XCODE_PATH }}" | |
| - name: Import signing certificate into keychain | |
| uses: apple-actions/import-codesign-certs@v1 | |
| with: | |
| p12-file-base64: ${{ secrets.SIGNING_CERTIFICATE_P12_DATA }} | |
| p12-password: ${{ secrets.SIGNING_CERTIFICATE_PASSWORD }} | |
| - name: Import App Store Connect API Key | |
| run: | | |
| mkdir -p ~/.appstoreconnect/private_keys | |
| echo $AUTHKEY_API_KEY | base64 --decode -o ~/.appstoreconnect/private_keys/AuthKey_$API_KEY.p8 | |
| env: | |
| AUTHKEY_API_KEY: ${{ secrets.CONNECT_KEY }} | |
| API_KEY: ${{ vars.CONNECT_KEY_ID }} | |
| - name: Install Provisioning Profiles | |
| run: | | |
| mkdir -p ~/Library/MobileDevice/Provisioning\ Profiles | |
| echo $PROFILE_DATA | base64 --decode -o ~/Library/MobileDevice/Provisioning\ Profiles/$PROFILE_UUID.provisionprofile | |
| echo $HELPER_PROFILE_DATA | base64 --decode -o ~/Library/MobileDevice/Provisioning\ Profiles/$HELPER_PROFILE_UUID.provisionprofile | |
| echo $LAUNCHER_PROFILE_DATA | base64 --decode -o ~/Library/MobileDevice/Provisioning\ Profiles/$LAUNCHER_PROFILE_UUID.provisionprofile | |
| env: | |
| PROFILE_DATA: ${{ vars.PROFILE_DATA }} | |
| PROFILE_UUID: ${{ vars.PROFILE_UUID }} | |
| HELPER_PROFILE_DATA: ${{ vars.HELPER_PROFILE_DATA }} | |
| HELPER_PROFILE_UUID: ${{ vars.HELPER_PROFILE_UUID }} | |
| LAUNCHER_PROFILE_DATA: ${{ vars.LAUNCHER_PROFILE_DATA }} | |
| LAUNCHER_PROFILE_UUID: ${{ vars.LAUNCHER_PROFILE_UUID }} | |
| - name: Install appdmg | |
| run: npm install -g appdmg | |
| - name: Download Artifact | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: UTM-macos-universal | |
| - name: Package for Release | |
| run: | | |
| tar -xf UTM.xcarchive.tgz | |
| ./scripts/package_mac.sh developer-id UTM.xcarchive . "$SIGNING_TEAM_ID" "$PROFILE_UUID" "$HELPER_PROFILE_UUID" "$LAUNCHER_PROFILE_UUID" | |
| env: | |
| SIGNING_TEAM_ID: ${{ vars.SIGNING_TEAM_ID }} | |
| PROFILE_UUID: ${{ vars.PROFILE_UUID }} | |
| HELPER_PROFILE_UUID: ${{ vars.HELPER_PROFILE_UUID }} | |
| LAUNCHER_PROFILE_UUID: ${{ vars.LAUNCHER_PROFILE_UUID }} | |
| - name: Notarize app | |
| run: | | |
| xcrun notarytool submit --issuer "$ISSUER_UUID" --key-id "$API_KEY" --key "~/.appstoreconnect/private_keys/AuthKey_$API_KEY.p8" --team-id "$SIGNING_TEAM_ID" --wait "UTM.dmg" | |
| xcrun stapler staple "UTM.dmg" | |
| env: | |
| SIGNING_TEAM_ID: ${{ vars.SIGNING_TEAM_ID }} | |
| ISSUER_UUID: ${{ vars.CONNECT_ISSUER_ID }} | |
| API_KEY: ${{ vars.CONNECT_KEY_ID }} | |
| - name: Upload Artifact | |
| if: github.event_name != 'release' | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: UTM-dmg | |
| path: UTM.dmg | |
| - name: Upload Release Asset | |
| if: github.event_name == 'release' | |
| uses: actions/[email protected] | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| upload_url: ${{ github.event.release.upload_url }} | |
| asset_path: UTM.dmg | |
| asset_name: UTM.dmg | |
| asset_content_type: application/octet-stream | |
| submit-mac: | |
| name: Submit (macOS) | |
| runs-on: ${{ fromJSON(needs.configuration.outputs.github-runner) }} | |
| needs: [configuration, build-universal] | |
| if: github.event_name == 'release' || github.event.inputs.test_release == 'true' | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| - name: Setup Xcode | |
| shell: bash | |
| run: | | |
| [[ "$(xcode-select -p)" == "${{ env.BUILD_XCODE_PATH }}"* ]] || sudo xcode-select -s "${{ env.BUILD_XCODE_PATH }}" | |
| - name: Import signing certificate into keychain | |
| uses: apple-actions/import-codesign-certs@v1 | |
| with: | |
| p12-file-base64: ${{ secrets.SIGNING_CERTIFICATE_P12_DATA }} | |
| p12-password: ${{ secrets.SIGNING_CERTIFICATE_PASSWORD }} | |
| - name: Import App Store Connect API Key | |
| run: | | |
| mkdir -p ~/.appstoreconnect/private_keys | |
| echo $AUTHKEY_API_KEY | base64 --decode -o ~/.appstoreconnect/private_keys/AuthKey_$API_KEY.p8 | |
| env: | |
| AUTHKEY_API_KEY: ${{ secrets.CONNECT_KEY }} | |
| API_KEY: ${{ vars.CONNECT_KEY_ID }} | |
| - name: Install Provisioning Profiles | |
| run: | | |
| mkdir -p ~/Library/MobileDevice/Provisioning\ Profiles | |
| echo $PROFILE_DATA | base64 --decode -o ~/Library/MobileDevice/Provisioning\ Profiles/$PROFILE_UUID.provisionprofile | |
| echo $HELPER_PROFILE_DATA | base64 --decode -o ~/Library/MobileDevice/Provisioning\ Profiles/$HELPER_PROFILE_UUID.provisionprofile | |
| echo $LAUNCHER_PROFILE_DATA | base64 --decode -o ~/Library/MobileDevice/Provisioning\ Profiles/$LAUNCHER_PROFILE_UUID.provisionprofile | |
| env: | |
| PROFILE_DATA: ${{ vars.APP_STORE_PROFILE_DATA }} | |
| PROFILE_UUID: ${{ vars.APP_STORE_PROFILE_UUID }} | |
| HELPER_PROFILE_DATA: ${{ vars.APP_STORE_HELPER_PROFILE_DATA }} | |
| HELPER_PROFILE_UUID: ${{ vars.APP_STORE_HELPER_PROFILE_UUID }} | |
| LAUNCHER_PROFILE_DATA: ${{ vars.APP_STORE_LAUNCHER_PROFILE_DATA }} | |
| LAUNCHER_PROFILE_UUID: ${{ vars.APP_STORE_LAUNCHER_PROFILE_UUID }} | |
| - name: Download Artifact | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: UTM-macos-universal | |
| - name: Package for App Store | |
| run: | | |
| tar -xf UTM.xcarchive.tgz | |
| ./scripts/package_mac.sh app-store UTM.xcarchive . "$SIGNING_TEAM_ID" "$PROFILE_UUID" "$HELPER_PROFILE_UUID" "$LAUNCHER_PROFILE_UUID" | |
| env: | |
| SIGNING_TEAM_ID: ${{ vars.SIGNING_TEAM_ID }} | |
| PROFILE_UUID: ${{ vars.APP_STORE_PROFILE_UUID }} | |
| HELPER_PROFILE_UUID: ${{ vars.APP_STORE_HELPER_PROFILE_UUID }} | |
| LAUNCHER_PROFILE_UUID: ${{ vars.APP_STORE_LAUNCHER_PROFILE_UUID }} | |
| - name: Upload Artifact | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: UTM-pkg | |
| path: UTM.pkg | |
| - name: Upload app to App Store Connect | |
| if: github.event_name == 'release' | |
| run: | | |
| xcrun altool --upload-app -t macos -f "UTM.pkg" --apiKey "$API_KEY" --apiIssuer "$ISSUER_UUID" | |
| env: | |
| ISSUER_UUID: ${{ vars.CONNECT_ISSUER_ID }} | |
| API_KEY: ${{ vars.CONNECT_KEY_ID }} | |
| submit-ios: | |
| name: Submit (iOS) | |
| runs-on: ${{ fromJSON(needs.configuration.outputs.github-runner) }} | |
| needs: [configuration, build-utm] | |
| strategy: | |
| matrix: | |
| configuration: [ | |
| {platform: "ios-tci", scheme: "iOS-SE", mode: "ipa-se-signed", name: "UTM-SE-signed.ipa", path: "UTM SE.ipa", type: "ios"}, | |
| {platform: "visionos-tci", scheme: "iOS-SE", mode: "ipa-se-signed", name: "UTM-SE-visionOS-signed.ipa", path: "UTM SE.ipa", type: "visionos"}, | |
| {platform: "ios-tci", scheme: "iOS-Remote", mode: "ipa-remote-signed", name: "UTM-Remote-signed.ipa", path: "UTM Remote.ipa", type: "ios"}, | |
| {platform: "visionos-tci", scheme: "iOS-Remote", mode: "ipa-remote-signed", name: "UTM-Remote-visionOS-signed.ipa", path: "UTM Remote.ipa", type: "visionos"}, | |
| ] | |
| if: github.event_name == 'release' || github.event.inputs.test_release == 'true' | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| - name: Setup Xcode | |
| shell: bash | |
| run: | | |
| [[ "$(xcode-select -p)" == "${{ env.BUILD_XCODE_PATH }}"* ]] || sudo xcode-select -s "${{ env.BUILD_XCODE_PATH }}" | |
| - name: Import signing certificate into keychain | |
| uses: apple-actions/import-codesign-certs@v1 | |
| with: | |
| p12-file-base64: ${{ secrets.SIGNING_CERTIFICATE_P12_DATA }} | |
| p12-password: ${{ secrets.SIGNING_CERTIFICATE_PASSWORD }} | |
| - name: Import App Store Connect API Key | |
| run: | | |
| mkdir -p ~/.appstoreconnect/private_keys | |
| echo $AUTHKEY_API_KEY | base64 --decode -o ~/.appstoreconnect/private_keys/AuthKey_$API_KEY.p8 | |
| env: | |
| AUTHKEY_API_KEY: ${{ secrets.CONNECT_KEY }} | |
| API_KEY: ${{ vars.CONNECT_KEY_ID }} | |
| - name: Install Provisioning Profiles | |
| run: | | |
| mkdir -p ~/Library/MobileDevice/Provisioning\ Profiles | |
| echo $IOS_REMOTE_PROFILE_DATA | base64 --decode -o ~/Library/MobileDevice/Provisioning\ Profiles/$IOS_REMOTE_PROFILE_UUID.provisionprofile | |
| echo $IOS_SE_PROFILE_DATA | base64 --decode -o ~/Library/MobileDevice/Provisioning\ Profiles/$IOS_SE_PROFILE_UUID.provisionprofile | |
| echo $LAUNCHER_PROFILE_DATA | base64 --decode -o ~/Library/MobileDevice/Provisioning\ Profiles/$LAUNCHER_PROFILE_UUID.provisionprofile | |
| env: | |
| IOS_REMOTE_PROFILE_DATA: ${{ vars.IOS_REMOTE_PROFILE_DATA }} | |
| IOS_REMOTE_PROFILE_UUID: ${{ vars.IOS_REMOTE_PROFILE_UUID }} | |
| IOS_SE_PROFILE_DATA: ${{ vars.IOS_SE_PROFILE_DATA }} | |
| IOS_SE_PROFILE_UUID: ${{ vars.IOS_SE_PROFILE_UUID }} | |
| - name: Download Artifact | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: UTM-${{ matrix.configuration.scheme }}-${{ matrix.configuration.platform }}-arm64 | |
| - name: Package for App Store | |
| run: | | |
| tar -xf UTM.xcarchive.tgz | |
| ./scripts/package.sh ${{ matrix.configuration.mode }} UTM.xcarchive . "$SIGNING_TEAM_ID" "$PROFILE_UUID" app-store | |
| env: | |
| SIGNING_TEAM_ID: ${{ vars.SIGNING_TEAM_ID }} | |
| PROFILE_UUID: ${{ matrix.configuration.scheme == 'iOS-Remote' && vars.IOS_REMOTE_PROFILE_UUID || vars.IOS_SE_PROFILE_UUID }} | |
| - name: Upload Artifact | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: ${{ matrix.configuration.name }} | |
| path: ${{ matrix.configuration.path }} | |
| - name: Upload app to App Store Connect | |
| if: github.event_name == 'release' | |
| run: | | |
| xcrun altool --upload-app -t "$TYPE" -f "$FILE" --apiKey "$API_KEY" --apiIssuer "$ISSUER_UUID" | |
| env: | |
| FILE: ${{ matrix.configuration.path }} | |
| TYPE: ${{ matrix.configuration.type }} | |
| ISSUER_UUID: ${{ vars.CONNECT_ISSUER_ID }} | |
| API_KEY: ${{ vars.CONNECT_KEY_ID }} |