forked from ruffle-rs/ruffle
-
Notifications
You must be signed in to change notification settings - Fork 0
533 lines (460 loc) · 19.5 KB
/
release_nightly.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
name: Release Nightly
on:
# Run nightly
schedule:
- cron: "0 0 * * *"
# Allow for manual dispatch on GitHub
workflow_dispatch:
jobs:
create-nightly-release:
name: Create Nightly Release
runs-on: ubuntu-22.04
env:
GHA_REPO_ALIVE: "true"
outputs:
is_active: ${{ env.GHA_REPO_ALIVE }}
date: ${{ steps.current_time_underscores.outputs.formattedTime }}
upload_url: ${{ steps.create_release.outputs.upload_url }}
package_prefix: ruffle-nightly-${{ steps.current_time_underscores.outputs.formattedTime }}
# Only run the scheduled workflows on the main repo.
if: github.repository == 'ruffle-rs/ruffle'
steps:
- uses: actions/checkout@v2
- id: check_activity
continue-on-error: true
name: Check for repo activity
if: ${{ github.event_name == 'schedule' }}
run: test -z "$(git rev-list --after="24 hours" --date=local ${{ github.sha }})" && echo "GHA_REPO_ALIVE=false" >> $GITHUB_ENV
- name: Get current time with dashes
uses: 1466587594/[email protected]
id: current_time_dashes
with:
format: YYYY-MM-DD
- name: Get current time with underscores
uses: 1466587594/[email protected]
id: current_time_underscores
with:
format: YYYY_MM_DD
- name: Create release
if: env.GHA_REPO_ALIVE == 'true'
id: create_release
uses: actions/create-release@v1
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
tag_name: nightly-${{ steps.current_time_dashes.outputs.formattedTime }}
release_name: Nightly ${{ steps.current_time_dashes.outputs.formattedTime }}
prerelease: true
build:
name: Build ${{ matrix.build_name }}
needs: create-nightly-release
if: needs.create-nightly-release.outputs.is_active != 'false'
strategy:
fail-fast: false
matrix:
include:
- build_name: linux-x86_64
os: ubuntu-22.04
# Mac does two Rust builds to make a universal binary
- build_name: macos-x86_64
os: macos-latest
target: x86_64-apple-darwin
MACOSX_DEPLOYMENT_TARGET: 10.7
DESKTOP_FEATURES: sandbox
- build_name: macos-aarch64
os: macos-latest
target: aarch64-apple-darwin
MACOSX_DEPLOYMENT_TARGET: 11.0
DESKTOP_FEATURES: sandbox
- build_name: windows-x86_32
os: windows-latest
target: i686-pc-windows-msvc
RUSTFLAGS: -Ctarget-feature=+crt-static
- build_name: windows-x86_64
os: windows-latest
target: x86_64-pc-windows-msvc
RUSTFLAGS: -Ctarget-feature=+crt-static
env:
PACKAGE_FILE: ${{ needs.create-nightly-release.outputs.package_prefix }}-${{ matrix.build_name }}.${{ startsWith(matrix.build_name, 'win') && 'zip' || 'tar.gz' }}
CARGO_BUILD_DIR: target/${{ matrix.target }}/release
runs-on: ${{ matrix.os }}
steps:
- name: Clone Ruffle repo
uses: actions/checkout@v3
- name: Install Rust toolchain
uses: dtolnay/rust-toolchain@stable
with:
toolchain: stable
targets: ${{ matrix.target }}
- name: Install Linux dependencies
if: runner.os == 'Linux'
run: |
sudo apt-get update
sudo apt install -y libasound2-dev libxcb-shape0-dev libxcb-xfixes0-dev libgtk-3-dev
- name: Cargo build
run: cargo build --package ruffle_desktop --release ${{matrix.DESKTOP_FEATURES && '--features' }} ${{matrix.DESKTOP_FEATURES}} ${{ matrix.target && '--target' }} ${{ matrix.target }}
env:
RUSTFLAGS: ${{ matrix.RUSTFLAGS }}
MACOSX_DEPLOYMENT_TARGET: ${{ matrix.MACOSX_DEPLOYMENT_TARGET }}
- name: Package common
run: |
mkdir package
cp README.md package/README.md
cp LICENSE.md package/LICENSE.md
- name: Package Windows
if: runner.os == 'Windows'
run: |
cp ${{ env.CARGO_BUILD_DIR }}/ruffle_desktop.exe package/ruffle.exe
7z a ${{ env.PACKAGE_FILE }} ./package/*
- name: Package Linux
if: runner.os == 'Linux'
run: |
cp ${{ env.CARGO_BUILD_DIR }}/ruffle_desktop package/ruffle
# We must enter the package/ directory in order to create a flat tarball (i.e. without a directory in it).
cd package
tar -czvf ../${{ env.PACKAGE_FILE }} *
- name: Upload package
if: runner.os != 'macOS'
uses: actions/upload-release-asset@v1
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
upload_url: ${{ needs.create-nightly-release.outputs.upload_url }}
asset_path: ./${{ env.PACKAGE_FILE }}
asset_name: ${{ env.PACKAGE_FILE }}
asset_content_type: ${{ endsWith(env.PACKAGE_FILE, 'tar.gz') && 'application/gzip' || 'application/zip' }}
- name: Build Safari Web Extension stub binary
if: runner.os == 'macOS'
run: cargo build --package ruffle_web_safari --release ${{ matrix.target && '--target' }} ${{ matrix.target }}
env:
RUSTFLAGS: ${{ matrix.RUSTFLAGS }}
MACOSX_DEPLOYMENT_TARGET: ${{ matrix.MACOSX_DEPLOYMENT_TARGET }}
- name: Upload macOS build artifact
if: runner.os == 'macOS'
uses: actions/upload-artifact@v3
with:
name: ${{ matrix.build_name }}
path: |
${{ env.CARGO_BUILD_DIR }}/ruffle_desktop
${{ env.CARGO_BUILD_DIR }}/ruffle_web_safari
package
build-mac-universal-binary:
name: Build macOS universal binary
needs: [create-nightly-release, build, build-web]
runs-on: macos-latest
env:
PACKAGE_FILE: ${{ needs.create-nightly-release.outputs.package_prefix }}-macos-universal.tar.gz
steps:
- name: Clone Ruffle repo
uses: actions/checkout@v3
- name: Download aarch64 binary
uses: actions/download-artifact@v3
with:
name: macos-aarch64
- name: Download x86_64 binary
uses: actions/download-artifact@v3
with:
name: macos-x86_64
- name: Download Safari extension
uses: actions/download-artifact@v3
with:
name: macos-safari
- name: Make universal desktop binary
run: |
lipo -create -output package/ruffle target/x86_64-apple-darwin/release/ruffle_desktop target/aarch64-apple-darwin/release/ruffle_desktop
chmod +x package/ruffle
- name: Make universal Safari stub binary
continue-on-error: true
run: |
lipo -create -output package/ruffle_web_safari target/x86_64-apple-darwin/release/ruffle_web_safari target/aarch64-apple-darwin/release/ruffle_web_safari
chmod +x package/ruffle_web_safari
- name: Create app bundle
run: |
cp -r desktop/packages/macOS package/Ruffle.app
mkdir package/Ruffle.app/Contents/MacOS
mv package/ruffle package/Ruffle.app/Contents/MacOS/ruffle
- name: Compile asset catalog
run: |
mkdir package/Ruffle.app/Contents/Resources
xcrun actool --compile package/Ruffle.app/Contents/Resources desktop/assets/Assets.xcassets --minimum-deployment-target 10.0 --platform macosx --warnings --errors --notices --include-all-app-icons
- name: Create extension bundle
continue-on-error: true
run: |
mkdir package/Ruffle.app/Contents/PlugIns
cp -r web/packages/extension/safari/package package/Ruffle.app/Contents/PlugIns/Ruffle\ Web.appex
mkdir package/Ruffle.app/Contents/PlugIns/Ruffle\ Web.appex/Contents/Resources
mkdir package/Ruffle.app/Contents/PlugIns/Ruffle\ Web.appex/Contents/MacOS
mv package/ruffle_web_safari package/Ruffle.app/Contents/PlugIns/Ruffle\ Web.appex/Contents/MacOS/ruffle_web_safari
cp ruffle_extension.zip package/Ruffle.app/Contents/PlugIns/Ruffle\ Web.appex/Contents/Resources
cd package/Ruffle.app/Contents/PlugIns/Ruffle\ Web.appex/Contents/Resources
unzip ruffle_extension.zip
rm ruffle_extension.zip
cd ../../../../../../..
- name: Sign bundle
continue-on-error: true
env:
APPLE_DEVELOPER_KEY: ${{ secrets.APPLE_DEVELOPER_KEY }}
APPLE_DEVELOPER_KEY_PASSWORD: ${{ secrets.APPLE_DEVELOPER_KEY_PASSWORD }}
run: |
echo $APPLE_DEVELOPER_KEY | base64 --decode > certificate.p12
security create-keychain -p correct-horse-battery-staple build.keychain
security default-keychain -s build.keychain
security unlock-keychain -p correct-horse-battery-staple build.keychain
security import certificate.p12 -k build.keychain -P $APPLE_DEVELOPER_KEY_PASSWORD -T /usr/bin/codesign
security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k correct-horse-battery-staple build.keychain
codesign --deep -s ${{ secrets.APPLE_DEVELOPER_IDENTITY }} -f --entitlements desktop/assets/macOSEntitlements.plist --options runtime package/Ruffle.app
codesign --verify -vvvv package/Ruffle.app
- name: Notarize bundle
continue-on-error: true
run: |
xcrun notarytool store-credentials "Ruffle" --apple-id ${{ secrets.APPLE_ID }} --team-id ${{ secrets.APPLE_TEAM }} --password ${{ secrets.APPLE_APP_PASSWORD }}
cd package
zip -r Ruffle.zip Ruffle.app
mv Ruffle.zip ..
cd ..
xcrun notarytool submit Ruffle.zip --keychain-profile Ruffle --wait
xcrun stapler staple package/Ruffle.app
- name: Package macOS
run: |
# We must enter the package/ directory in order to create a flat tarball (i.e. without a directory in it).
cd package
tar -czvf ../${{ env.PACKAGE_FILE }} *
- name: Upload package
uses: actions/upload-release-asset@v1
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
upload_url: ${{ needs.create-nightly-release.outputs.upload_url }}
asset_path: ./${{ env.PACKAGE_FILE }}
asset_name: ${{ env.PACKAGE_FILE }}
asset_content_type: application/gzip
build-web:
name: Build web${{ matrix.demo && ' demo' || '' }}
needs: create-nightly-release
if: needs.create-nightly-release.outputs.is_active != 'false'
runs-on: ubuntu-22.04
strategy:
matrix:
demo: [false, true]
steps:
- name: Clone Ruffle repo
uses: actions/checkout@v3
- name: Install Rust toolchain
uses: dtolnay/rust-toolchain@stable
with:
toolchain: stable
targets: wasm32-unknown-unknown
- name: Setup Node.js
uses: actions/setup-node@v3
with:
node-version: "19"
registry-url: https://registry.npmjs.org
# wasm-bindgen-cli version must match wasm-bindgen crate version.
# Be sure to update in test_web.yml, web/Cargo.toml and web/README.md.
- name: Install wasm-bindgen
run: cargo install wasm-bindgen-cli --version 0.2.83
- name: Setup conda
uses: conda-incubator/setup-miniconda@v2
with:
activate-environment: binaryen
# conda is available only with "shell: bash -l {0}".
# See https://github.com/marketplace/actions/setup-miniconda.
- name: Install binaryen
shell: bash -l {0}
run: conda install -c conda-forge binaryen
- name: Install node packages
working-directory: web
shell: bash -l {0}
run: |
npm ci
- name: Seal version data
if: ${{ !matrix.demo }}
shell: bash -l {0}
working-directory: web
env:
ENABLE_VERSION_SEAL: "true"
run: node packages/core/tools/set_version.js
- name: Produce reproducible source archive
if: ${{ !matrix.demo }}
shell: bash -l {0}
run: zip -r reproducible-source.zip .
- name: Upload reproducible source archive
if: ${{ !matrix.demo }}
uses: actions/upload-release-asset@v1
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
upload_url: ${{ needs.create-nightly-release.outputs.upload_url }}
asset_path: ./reproducible-source.zip
asset_name: ${{ needs.create-nightly-release.outputs.package_prefix }}-reproducible-source.zip
asset_content_type: application/zip
- name: Build web
env:
BUILD_ID: ${{ github.run_number }}
# Build web demo with WebGPU support for testing in Chrome origin trial on ruffle.rs
CARGO_FEATURES: ${{ matrix.demo && 'webgpu' || '' }}
FIREFOX_EXTENSION_ID: ${{ secrets.FIREFOX_EXTENSION_ID }} # Needed to inject into manifest.json
working-directory: web
shell: bash -l {0}
run: |
npm run build:repro
npm run docs
- name: Publish Firefox extension
if: env.FIREFOX_EXTENSION_ID != '' && !matrix.demo
id: sign-firefox
continue-on-error: true
env:
FIREFOX_EXTENSION_ID: ${{ secrets.FIREFOX_EXTENSION_ID }}
MOZILLA_API_KEY: ${{ secrets.MOZILLA_API_KEY }}
MOZILLA_API_SECRET: ${{ secrets.MOZILLA_API_SECRET }}
working-directory: web/packages/extension
shell: bash -l {0}
run: npm run sign-firefox
- name: Publish npm package
if: ${{ !matrix.demo }}
# npm scoped packages are private by default, explicitly make public
run: npm publish --access public
continue-on-error: true
working-directory: web/packages/selfhosted/dist
env:
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
- name: Package selfhosted
if: ${{ !matrix.demo }}
run: zip -r release.zip .
working-directory: web/packages/selfhosted/dist
- name: Upload selfhosted
if: ${{ !matrix.demo }}
uses: actions/upload-release-asset@v1
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
upload_url: ${{ needs.create-nightly-release.outputs.upload_url }}
asset_path: ./web/packages/selfhosted/dist/release.zip
asset_name: ${{ needs.create-nightly-release.outputs.package_prefix }}-web-selfhosted.zip
asset_content_type: application/zip
- name: Upload generic extension
if: ${{ !matrix.demo }}
uses: actions/upload-release-asset@v1
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
upload_url: ${{ needs.create-nightly-release.outputs.upload_url }}
asset_path: ./web/packages/extension/dist/ruffle_extension.zip
asset_name: ${{ needs.create-nightly-release.outputs.package_prefix }}-web-extension.zip
asset_content_type: application/zip
- name: Upload Safari build artifact
uses: actions/upload-artifact@v3
with:
name: macos-safari
path: ./web/packages/extension/dist/ruffle_extension.zip
- name: Upload Firefox extension (unsigned)
if: steps.sign-firefox.outcome != 'success' && !matrix.demo
uses: actions/upload-release-asset@v1
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
upload_url: ${{ needs.create-nightly-release.outputs.upload_url }}
asset_path: ./web/packages/extension/dist/firefox_unsigned.xpi
asset_name: ${{ needs.create-nightly-release.outputs.package_prefix }}-web-extension-firefox-unsigned.xpi
asset_content_type: application/x-xpinstall
- name: Publish Chrome extension
if: env.CHROME_EXTENSION_ID != '' && !matrix.demo
id: publish-chrome-extension
continue-on-error: true
env:
CHROME_EXTENSION_ID: ${{ secrets.CHROME_EXTENSION_ID }}
uses: mnao305/[email protected]
with:
extension-id: ${{ secrets.CHROME_EXTENSION_ID }}
client-id: ${{ secrets.CHROME_CLIENT_ID }}
client-secret: ${{ secrets.CHROME_CLIENT_SECRET }}
refresh-token: ${{ secrets.CHROME_REFRESH_TOKEN }}
file-path: ./web/packages/extension/dist/ruffle_extension.zip
- name: Clone web demo
if: matrix.demo
uses: actions/checkout@v3
with:
repository: ruffle-rs/demo
path: demo
ref: master
fetch-depth: 0
persist-credentials: false # Needed to allow commit via RUFFLE_BUILD_TOKEN below
- name: Update web demo
if: matrix.demo
run: |
# Delete the old build.
rm -f *.js *.wasm *.html
# Copy the fresh build into this folder.
cp -f ../web/packages/demo/dist/* .
# Create git commit. Amend previous commit to avoid daily commit spam.
git config user.name "RuffleBuild"
git config user.email "[email protected]"
git add -A
git commit --amend -m "Nightly build ${{ needs.create-nightly-release.outputs.date }}"
working-directory: demo
- name: Push web demo
if: github.repository == 'ruffle-rs/ruffle' && matrix.demo
uses: ad-m/github-push-action@master
with:
repository: ruffle-rs/demo
github_token: ${{ secrets.RUFFLE_BUILD_TOKEN }}
directory: demo
force: true
- name: Clone JS docs
if: ${{ !matrix.demo }}
uses: actions/checkout@v3
with:
repository: ruffle-rs/js-docs
path: js-docs
ref: master
fetch-depth: 0
persist-credentials: false # Needed to allow commit via RUFFLE_BUILD_TOKEN below
- name: Update JS docs
if: ${{ !matrix.demo }}
run: |
# Delete the old docs
rm -rf master/
# Copy the fresh docs into this folder.
cp -r ../web/packages/core/docs master
# Create git commit. Amend previous commit to avoid daily commit spam.
git config user.name "RuffleBuild"
git config user.email "[email protected]"
git add -A
git commit --amend -m "Nightly build ${{ needs.create-nightly-release.outputs.date }}"
working-directory: js-docs
- name: Push JS docs
if: github.repository == 'ruffle-rs/ruffle' && !matrix.demo
uses: ad-m/github-push-action@master
with:
repository: ruffle-rs/js-docs
github_token: ${{ secrets.RUFFLE_BUILD_TOKEN }}
directory: js-docs
force: true
publish-aur-package:
name: Publish AUR package
needs: build
runs-on: ubuntu-22.04
if: github.repository == 'ruffle-rs/ruffle'
steps:
- uses: actions/checkout@v3
- name: Get current time with dashes
uses: 1466587594/[email protected]
id: current_time_dashes
with:
format: YYYY-MM-DD
- name: Get current time with dots
uses: 1466587594/[email protected]
id: current_time_dots
with:
format: YYYY.MM.DD
- name: Update PKGBUILD
run: sed -e "s/@VERSION@/${{ steps.current_time_dots.outputs.formattedTime }}/" -i ./PKGBUILD
- name: Publish AUR package
uses: KSXGitHub/[email protected]
with:
pkgname: ruffle-nightly-bin
pkgbuild: ./PKGBUILD
commit_username: RuffleBuild
commit_email: [email protected]
ssh_private_key: ${{ secrets.AUR_SSH_PRIVATE_KEY }}
commit_message: Update to Nightly ${{ steps.current_time_dashes.outputs.formattedTime }}