Skip to content
.github/workflows/ios.yml

feat: release regtest ios app on push to main #30

Sign in to view logs

feat: release regtest ios app on push to main

feat: release regtest ios app on push to main #30

Workflow file for this run

.github/workflows/ios.yml at 4834b0f
name: "Build and release ios app to TestFlight"
on:
workflow_call:
inputs:
coordinator_port_http:
required: true
type: string
esplora_endpoint:
required: true
type: string
coordinator_p2p_endpoint:
required: true
type: string
network:
required: true
type: string
description: "The target network for the release, e.g. mainnet/regtest"
tag:
required: true
description: "The branch, tag or SHA to checkout."
type: string
oracle_endpoint:
required: true
type: string
oracle_pubkey:
required: true
description: "The public key of the oracle. Must match with the public key returned at http://${oracle_endpoint}/oracle/publickey"
type: string
workflow_dispatch:
inputs:
coordinator_port_http:
required: true
type: string
esplora_endpoint:
required: true
type: string
coordinator_p2p_endpoint:
required: true
type: string
network:
required: true
type: string
description: "The target network for the release, e.g. mainnet/regtest"
tag:
required: true
description: "The branch, tag or SHA to checkout."
type: string
oracle_endpoint:
required: true
type: string
oracle_pubkey:
required: true
description: "The public key of the oracle. Must match with the public key returned at http://${oracle_endpoint}/oracle/publickey"
type: string
jobs:
build:
runs-on: macos-latest
steps:
- uses: actions/checkout@v3
with:
# fetch the complete history to correctly calculate build_number
fetch-depth: 0
ref: ${{ inputs.tag }}
- uses: maxim-lobanov/setup-xcode@v1
with:
xcode-version: "14.2"
- uses: subosito/flutter-action@v2
with:
channel: "stable"
flutter-version: ${{ env.FLUTTER_VERSION }}
architecture: x64
- uses: actions/cache@v3
id: cache-deps
with:
path: |
~/.cargo/bin/
~/.cargo/registry/index/
~/.cargo/registry/cache/
~/.cargo/git/db/
./rust/target
key: ${{ runner.os }}-cargo-build-release-ios-${{ hashFiles('**/Cargo.lock') }}
- name: Deploy iOS Beta to TestFlight via Fastlane
uses: maierj/[email protected]
with:
lane: closed_beta
env:

Check failure on line 92 in .github/workflows/ios.yml

View workflow run for this annotation

GitHub Actions / .github/workflows/ios.yml

Invalid workflow file 

You have an error in your yaml syntax on line 92
APP_STORE_CONNECT_TEAM_ID: '${{ secrets.APP_STORE_CONNECT_TEAM_ID }}'
DEVELOPER_APP_ID: '${{ secrets.DEVELOPER_APP_ID }}'
DEVELOPER_APP_IDENTIFIER: '${{ secrets.DEVELOPER_APP_IDENTIFIER }}'
DEVELOPER_PORTAL_TEAM_ID: '${{ secrets.DEVELOPER_PORTAL_TEAM_ID }}'
FASTLANE_APPLE_ID: '${{ secrets.FASTLANE_APPLE_ID }}'
FASTLANE_APPLE_APPLICATION_SPECIFIC_PASSWORD: '${{ secrets.FASTLANE_APPLE_APPLICATION_SPECIFIC_PASSWORD }}'
MATCH_PASSWORD: '${{ secrets.MATCH_PASSWORD }}'
GIT_AUTHORIZATION: '${{ secrets
PROVISIONING_PROFILE_SPECIFIER: '${{ secrets.PROVISIONING_PROFILE_SPECIFIER }}'
TEMP_KEYCHAIN_PASSWORD: '${{ secrets.TEMP_KEYCHAIN_PASSWORD }}'
TEMP_KEYCHAIN_USER: '${{ secrets.TEMP_KEYCHAIN_USER }}'
APPLE_KEY_ID: '${{ secrets.APPLE_KEY_ID }}'
APPLE_ISSUER_ID: '${{ secrets.APPLE_ISSUER_ID }}'
APPLE_KEY_CONTENT: '${{ secrets.APPLE_KEY_CONTENT }}'
# - name: Install Apple certificate and provisioning profile
# env:
# BUILD_CERTIFICATE_BASE64: ${{ secrets.APPSTORE_CERT_BASE64 }}
# BUILD_CERTIFICATE_REGTEST_BASE64: ${{ secrets.APPSTORE_REGTEST_CERT_BASE64 }}
# P12_PASSWORD: ${{ secrets.APPSTORE_CERT_PASSWORD }}
# BUILD_PROVISION_PROFILE_BASE64: ${{ secrets.MOBILEPROVISION_BASE64 }}
# BUILD_PROVISION_PROFILE_BASE64_REGTEST: ${{ secrets.MOBILEPROVISION_BASE64_REGTEST }}
# KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
# run: |
# echo test
# # create variables
# CERTIFICATE_PATH=$RUNNER_TEMP/build_certificate.p12
# CERTIFICATE_PATH_REGTEST=$RUNNER_TEMP/build_certificate_regtest.p12
# PP_PATH=$RUNNER_TEMP/build_pp.mobileprovision
# PP_PATH_REGTEST=$RUNNER_TEMP/build_pp_regtest.mobileprovision
# KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
#
# # import certificate and provisioning profile from secrets
# echo $BUILD_CERTIFICATE_BASE64 | base64 -d > $CERTIFICATE_PATH
# echo $BUILD_CERTIFICATE_REGTEST_BASE64 | base64 -d > $CERTIFICATE_PATH_REGTEST
# echo $BUILD_PROVISION_PROFILE_BASE64 | base64 -d > $PP_PATH
# echo $BUILD_PROVISION_PROFILE_BASE64_REGTEST | base64 -d > $PP_PATH_REGTEST
#
# # create temporary keychain
# security create-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
# echo "Successfully created keychain"
#
# security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
# echo "Successfully set keychain settings"
#
# security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
# echo "Successfully unlocked keychain"
#
# # import certificate to keychain
# security import $CERTIFICATE_PATH -P "$P12_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
# echo "Successfully imported certificate"
# security import $CERTIFICATE_PATH_REGTEST -P "$P12_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
# echo "Successfully imported certificate regtest"
#
# security list-keychain -d user -s $KEYCHAIN_PATH
#
# # apply provisioning profile
# mkdir -p ~/Library/MobileDevice/Provisioning\ Profiles
# cp $PP_PATH ~/Library/MobileDevice/Provisioning\ Profiles
# cp $PP_PATH_REGTEST ~/Library/MobileDevice/Provisioning\ Profiles
#
# ls -la ~/Library/MobileDevice/Provisioning\ Profiles
- name: Install just
if: steps.cache-deps.outputs.cache-hit != 'true'
run: cargo install just
# - name: Install FFI bindings
# if: steps.cache-deps.outputs.cache-hit != 'true'
# run: just deps-gen
#
# - name: Install ios dependencies
# if: steps.cache-deps.outputs.cache-hit != 'true'
# run: cargo install cargo-lipo
#
# - name: Set rustup targets
# run: rustup target add aarch64-apple-ios x86_64-apple-ios
#
# - name: Generate FFI bindings
# run: just gen
#
# - name: Build iOS Rust lib in release mode
# run: just ios-release
- name: Parse version from pubspec.yaml
id: version
uses: jbutcher5/[email protected]
with:
file: "mobile/pubspec.yaml"
key-path: '["version"]'
- name: Build iOS Archive
id: build-ios
run: |
args=()
BUILD_NAME=${{ steps.version.outputs.data }}
BUILD_NUMBER=$(git rev-list HEAD --count)
cd mobile
flutter build ipa "${args[@]}" --export-options-plist=ios/exportOptions.plist \
--dart-define="ESPLORA_ENDPOINT=$ESPLORA_ENDPOINT" \
--dart-define="COORDINATOR_P2P_ENDPOINT=$COORDINATOR_P2P_ENDPOINT" \
--dart-define="NETWORK=$NETWORK" \
--dart-define="COMMIT=$(git rev-parse HEAD)" \
--dart-define="BRANCH=$(git rev-parse --abbrev-ref HEAD)" \
--dart-define="COORDINATOR_PORT_HTTP=$COORDINATOR_PORT_HTTP" \
--dart-define="ORACLE_ENDPOINT=$ORACLE_ENDPOINT" \
--dart-define="ORACLE_PUBKEY=$ORACLE_PUBKEY" \
--build-name=$BUILD_NAME \
--build-number=$BUILD_NUMBER
env:
ESPLORA_ENDPOINT: ${{ inputs.esplora_endpoint }}
COORDINATOR_P2P_ENDPOINT: ${{ inputs.coordinator_p2p_endpoint }}
NETWORK: ${{ inputs.network }}
COORDINATOR_PORT_HTTP: ${{ inputs.coordinator_port_http }}
ORACLE_ENDPOINT: ${{ inputs.oracle_endpoint }}
ORACLE_PUBKEY: ${{ inputs.oracle_pubkey }}
- name: Release to TestFlight
env:
ALTOOL_API_KEY: ${{ secrets.ALTOOL_API_KEY }}
ALTOOL_API_ISSUER: ${{ secrets.ALTOOL_API_ISSUER }}
AUTH_KEY: ${{ secrets.AUTH_KEY }}
run: |
cd mobile
mkdir -p private_keys
echo $AUTH_KEY | base64 -d > private_keys/AuthKey_$ALTOOL_API_KEY.p8
xcrun altool --upload-app --type ios --file ./build/ios/ipa/10101.ipa --apiKey ${{ env.ALTOOL_API_KEY }} --apiIssuer ${{ env.ALTOOL_API_ISSUER }}
# Important! Cleanup: remove the certificate and provisioning profile from the runner!
- name: Clean up keychain and provisioning profile
if: ${{ always() }}
run: |
security delete-keychain $RUNNER_TEMP/app-signing.keychain-db
rm ~/Library/MobileDevice/Provisioning\ Profiles/build_pp.mobileprovision