add windows signature

LiterMC · Mar 9, 2024 · 5c74e03 · 5c74e03
1 parent a9a4687
commit 5c74e03
Show file tree

Hide file tree

Showing 15 changed files with 397 additions and 96 deletions.
diff --git a/.github/workflows/build-tag-docker.yml b/.github/workflows/build-tag-docker.yml
@@ -0,0 +1,42 @@
+
+name: Create tagged release on Docker
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  build-docker:
+    runs-on: ubuntu-latest
+    steps:
+      -
+        name: Action Checkout
+        uses: actions/checkout@v3
+      -
+        name: Get current tag
+        run: echo "TAG=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV
+      -
+        name: Set up QEMU
+        uses: docker/setup-qemu-action@v2
+      -
+        name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v2
+      -
+        name: Login to Docker Hub
+        uses: docker/login-action@v2
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      -
+        name: Build and push
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          push: true
+          tags: |
+            craftmine/go-openbmclapi:latest
+            craftmine/go-openbmclapi:${{env.TAG}}
+          platforms: linux/amd64,linux/arm64
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
diff --git a/.github/workflows/build-tag.yml b/.github/workflows/build-tag.yml
@@ -7,7 +7,7 @@ on:
       - 'v*'
 
 jobs:
-  build:
+  test:
     runs-on: ubuntu-latest
     steps:
       -
@@ -25,9 +25,22 @@ jobs:
       -
         name: Test
         run: go test -v ./...
+
+  create_release:
+    runs-on: ubuntu-latest
+    needs:
+      - test
+    outputs:
+      upload_url: ${{ steps.create_release.outputs.upload_url }}
+      tag: ${{ steps.tag.outputs.tag }}
+    steps:
       -
-        name: Build
-        run: bash ./build.sh
+        name: Output TAG
+        id: tag
+        run: |
+          export RELEASE_VERSION="${GITHUB_REF#refs/*/}"
+          echo "tag=${RELEASE_VERSION}"
+          echo "tag=${RELEASE_VERSION}" >> "$GITHUB_OUTPUT"
       -
         name: Create Release
         id: create_release
@@ -37,47 +50,75 @@ jobs:
         with:
           tag_name: ${{ github.ref }}
           release_name: Release ${{ github.ref }}
-          draft: false
-          prerelease: true
+          draft: true
+          prerelease: false
+
+  build:
+    runs-on: ubuntu-latest
+    needs:
+      - create_release
+    steps:
+      -
+        name: Action Checkout
+        uses: actions/checkout@v3
+      -
+        name: Setup Golang
+        uses: actions/setup-go@v4
+        with:
+          go-version-file: ./go.mod
+          cache-dependency-path: ./go.sum
+      -
+        name: Import codesign key
+        run: |
+          cat <<EOF >./private/LiterMC-CodeSign.key
+          ${{ secrets.CODE_SIGN_KEY }}
+          EOF
+      -
+        name: Generate
+        run: go generate .
+      -
+        name: Build
+        env:
+          TAG: ${{ needs.create_release.outputs.tag }}
+        run: bash ./scripts/build.sh
       -
         name: Upload Release Assets
         uses: zyxkad/upload-release-asset-dir@v1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
-          upload_url: ${{ steps.create_release.outputs.upload_url }}
+          upload_url: ${{ needs.create_release.outputs.upload_url }}
           asset_dir: ./output
 
-  build-docker:
-    runs-on: ubuntu-latest
+  build-windows:
+    runs-on: windows-2022
+    needs:
+      - create_release
     steps:
       -
         name: Action Checkout
         uses: actions/checkout@v3
       -
-        name: Get current tag
-        run: echo "TAG=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV
-      -
-        name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
+        name: Setup Golang
+        uses: actions/setup-go@v4
+        with:
+          go-version-file: ./go.mod
+          cache-dependency-path: ./go.sum
       -
-        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        name: Generate
+        run: go generate .
       -
-        name: Login to Docker Hub
-        uses: docker/login-action@v2
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
+        name: Build
+        env:
+          TAG: ${{ needs.create_release.outputs.tag }}
+          CODE_SIGN_PFX: ${{ secrets.CODE_SIGN_PFX }}
+          CODE_SIGN_PFX_PASSWORD: ${{ secrets.CODE_SIGN_PFX_PASSWORD }}
+        run: go run ./scripts/build-windows.go
       -
-        name: Build and push
-        uses: docker/build-push-action@v5
+        name: Upload Release Assets
+        uses: zyxkad/upload-release-asset-dir@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
-          context: .
-          push: true
-          tags: |
-            craftmine/go-openbmclapi:latest
-            craftmine/go-openbmclapi:${{env.TAG}}
-          platforms: linux/amd64,linux/arm64
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
+          upload_url: ${{ needs.create_release.outputs.upload_url }}
+          asset_dir: ./output
diff --git a/.gitignore b/.gitignore
@@ -13,7 +13,7 @@
 /__hijack
 /oss_mirror
 
-# binarys
+# binaries
 /output
 /build
 /build-all.sh

diff --git a/cert/LiterMC-CodeSign.cer b/cert/LiterMC-CodeSign.cer
@@ -0,0 +1,28 @@
+-----BEGIN CERTIFICATE-----
+MIIExTCCAq2gAwIBAgIBATANBgkqhkiG9w0BAQsFADB+MQswCQYDVQQGEwJDQTEQ
+MA4GA1UECAwHQWxiZXJ0YTEQMA4GA1UEBwwHQ2FsZ2FyeTEQMA4GA1UECgwHTGl0
+ZXJNQzEYMBYGA1UEAwwPTGl0ZXJNQyBSb290IENBMR8wHQYJKoZIhvcNAQkBFhB6
+eXhrYWRAZ21haWwuY29tMB4XDTI0MDMwOTAzMTYwOVoXDTM0MDMwNzAzMTYwOVow
+LTEQMA4GA1UECgwHTGl0ZXJNQzEZMBcGA1UEAwwQTGl0ZXJNQy1Db2RlU2lnbjCC
+ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK4t/VVosA9qFg9gj1gFpY5k
+VRGun5dulQ20VE6eVmlDt6HnF9PadpYvdD5kIfROEzChb+H6K564dQG8lMI4dcwJ
+jNvRk8sma1tMXMc6geh5TZ3Y1w0hqa2Stmv0msf7nNQ5oMTZXYmhWhZMBsiPtELf
+WHTNC4G3SAaID9Rj+RKfd4blB9RK+2JdexVmEnDTzYUbZess+RK0CaOW1/hM+cBE
+s8TMQ8dRer/38oUiBzpZmuZQ0X1IJnHqWV2Ybu49MTcxfCMEjggM9/dMxqGKA2NH
+pGC/poHNDE63VNcvU0Oz1LA0PYeYN6SzQ1LbmD0M0bsWqj39CuOCUsxcO0bk9/kC
+AwEAAaOBnjCBmzAdBgNVHQ4EFgQUUiwjy3V0g76N4+fjrhCn+SeSBcMwHwYDVR0j
+BBgwFoAUvfVU+FJ5Ku+/vnEYigsbUEGOeZIwCQYDVR0TBAIwADALBgNVHQ8EBAMC
+BaAwEwYDVR0lBAwwCgYIKwYBBQUHAwMwLAYJYIZIAYb4QgENBB8WHU9wZW5TU0wg
+R2VuZXJhdGVkIENlcnRpZmljYXRlMA0GCSqGSIb3DQEBCwUAA4ICAQAM5LM297Dq
+IVSYE/HDhKHVCyxdNFxW0wSFK0o5rynKSejy8Umm0SOWX36BPcb3fPTKbYl8m5RK
+E6MpNH1xqtGo64jQ3l2YyAqy6urtBL6MaV4xiPfFiwZb4JGNJx/2rc7HsTjnRcvu
+/+YqWY/78/lubnGFYIZYb4i+QQNfr0qUPMCpJ/EEe9r8QJoh/sAH/VtMqLWirdZj
++tR0o24r1QzNgH87RoTyJO0EE+qOYwYWuvbtvfYCXsQlG0h+XzF54dTXiofmRLcg
+o+tSfwomPJ1DngUCMwGgZpKbBnc/17xMjGuS/AC/Wmc4LqbGNMUclDKmunnQHPJV
+8Q8eNBP7OTdiEliEy5lhy2pjIg/7Gq8hzYTKfJ3bzh72WTut5JD0JSfaMC4jN6n1
+0vtMHHJ9LShck2hM9ZDFKIF8vbBdpFrlQCWA3Y+uCNmXEsQXNj/7KA7PcOVOUD7O
+yeT1PMDgGTl+H+szH3o4CeEMiT7kR+rQJ2yHrqHEMN8KCx8pLa4nae4TTPf9R2+U
+VMbEn3uk6ZEUT//L2ajPL1wzTtiobAhbVAxAu2Loomq1UhbUt3EiCD7nyNayIX5t
+zinpNEeNWka9SxERD63j8dEUekRnKDSqFyaz2+/+cO24uY/kS/ANeHJ4/E2UKHi0
+hiMMmkXhSD62TA4JLN3jrW/Lkzw632IO1A==
+-----END CERTIFICATE-----
diff --git a/cert/LiterMC-RootCA.cer b/cert/LiterMC-RootCA.cer
@@ -0,0 +1,34 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----