PlumeImpactor/.github/workflows/build.yml at main · BoardTM/PlumeImpactor · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
name: "Build & Bundle"
on:
  push:
    branches:
      - main
    paths:
      - "crates/**"
      - "Cargo.toml"
      - "Cargo.lock"
      - "apps/**"
      - "package/**"
      - ".github/workflows/build.yml"
  workflow_dispatch:

env:
  BINARY_NAME: plumeimpactor
  BINARY_NAME_CLI: plumesign
  BUNDLE_NAME: Impactor

jobs:
  build-linux:
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: true
      matrix:
        include:
          - os: ubuntu-22.04
            arch: x86_64
          - os: ubuntu-22.04-arm
            arch: aarch64
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: snok/install-poetry@v1
      - uses: actions/setup-python@v6
        with:
          python-version: "3.14"

      - name: Install and cache apt pkgs
        uses: awalsh128/cache-apt-pkgs-action@latest
        with:
          packages: flatpak flatpak-builder libglib2.0-dev libsecret-1-dev libgtk-3-dev libpng-dev libjpeg-dev libgl1-mesa-dev libglu1-mesa-dev libxkbcommon-dev libexpat1-dev libtiff-dev
          version: 1.0

      - name: Build binaries
        run: |
          make linux PROFILE=release APPIMAGE=1

      - name: Upload binaries
        uses: actions/upload-artifact@v4
        with:
          name: ${{ env.BINARY_NAME }}-linux-${{ matrix.arch }}
          path: dist/*

  build-windows:
    runs-on: windows-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: ilammy/msvc-dev-cmd@v1

      - name: Build binaries
        run: |
          choco install nsis.portable
          make windows PROFILE=release NSIS=1

      - name: Upload Bundles
        uses: actions/upload-artifact@v4
        with:
          name: ${{ env.BINARY_NAME }}-windows
          path: dist/*.exe

  build-macos-slices:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        include:
          - os: macos-latest
            target: aarch64-apple-darwin
            arch: arm
          - os: macos-15-intel
            target: x86_64-apple-darwin
            arch: intel
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable

      - name: Build binaries (${{ matrix.arch }})
        run: |
          make macos PROFILE=release

      - name: Upload ${{ matrix.arch }} Slice
        uses: actions/upload-artifact@v4
        with:
          name: ${{ env.BINARY_NAME }}-macos-slice-${{ matrix.arch }}
          path: dist/*

  build-macos-universal:
    runs-on: macos-latest
    needs: [build-macos-slices]
    steps:
      - uses: actions/checkout@v4

      - name: Get ARM Slice
        uses: actions/download-artifact@v4
        with:
          name: ${{ env.BINARY_NAME }}-macos-slice-arm
          path: dist/slices

      - name: Get Intel Slice
        uses: actions/download-artifact@v4
        with:
          name: ${{ env.BINARY_NAME }}-macos-slice-intel
          path: dist/slices

      - name: Setup Certificates
        uses: apple-actions/import-codesign-certs@v5
        with:
          p12-file-base64: ${{ secrets.DEV_ID_P12_BASE64 }}
          p12-password: ${{ secrets.DEV_ID_P12_PASSWORD }}

      - name: Download CreateDMG
        run: |
          brew install create-dmg

      - name: Create Universal Binary
        run: |
          make macos BIN1=dist/slices/${{ env.BINARY_NAME }}-macos-arm64 BIN2=dist/slices/${{ env.BINARY_NAME }}-macos-x86_64 BUNDLE=1 ARCH=universal
          make macos BIN1=dist/slices/${{ env.BINARY_NAME_CLI }}-macos-arm64 BIN2=dist/slices/${{ env.BINARY_NAME_CLI }}-macos-x86_64 ARCH=universal

      - name: Codesign
        run: |
          mkdir -p dist/dmg
          mv dist/${{ env.BUNDLE_NAME }}.app dist/dmg/
          codesign --deep --force --options runtime \
            --sign "${{ secrets.DEV_ID_IDENTITY_NAME }}" dist/dmg/${{ env.BUNDLE_NAME }}.app

      - name: Create DMG
        run: |
          mkdir -p dist/out
          create-dmg \
            --volname ${{ env.BUNDLE_NAME }} \
            --background "package/macos/background.png" \
            --window-pos 200 120 \
            --window-size 510 350 \
            --icon-size 100 \
            --icon ${{ env.BUNDLE_NAME }}.app 160 155 \
            --hide-extension "${{ env.BUNDLE_NAME }}.app" \
            --app-drop-link 350 155 \
            dist/${{ env.BUNDLE_NAME }}-macos-universal.dmg dist/dmg

      - name: Notarize DMG
        run: |
          xcrun notarytool submit dist/${{ env.BUNDLE_NAME }}-macos-universal.dmg --apple-id "${{ secrets.APPLE_ID_EMAIL }}" --password "${{ secrets.APPLE_ID_PASSWORD }}" --team-id "${{ secrets.APPLE_ID_TEAM }}" --wait
          xcrun stapler staple dist/${{ env.BUNDLE_NAME }}-macos-universal.dmg

      - name: Upload Universal DMG
        uses: actions/upload-artifact@v4
        with:
          name: ${{ env.BINARY_NAME }}-macos-universal
          path: |
            dist/${{ env.BUNDLE_NAME }}-macos-universal.dmg
            dist/${{ env.BINARY_NAME_CLI }}-macos-universal