Build & Bundle #133
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "Build & Bundle" | |
| on: | |
| push: | |
| branches: | |
| - main | |
| paths: | |
| - 'crates/**' | |
| - 'Cargo.toml' | |
| - 'Cargo.lock' | |
| - 'apps/**' | |
| - 'package/**' | |
| - '.github/workflows/build.yml' | |
| workflow_dispatch: | |
| env: | |
| BINARY_NAME: plumeimpactor | |
| BINARY_NAME_CLI: plumesign | |
| BUNDLE_NAME: Impactor | |
| jobs: | |
| build-linux: | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| fail-fast: true | |
| matrix: | |
| include: | |
| - os: ubuntu-22.04 | |
| arch: x86_64 | |
| - os: ubuntu-22.04-arm | |
| arch: aarch64 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Cache Rust dependencies | |
| uses: actions/cache@v4 | |
| with: | |
| path: | | |
| ~/.cargo/registry | |
| ~/.cargo/git | |
| target | |
| key: linux-${{ matrix.arch }}-cargo-${{ hashFiles('**/Cargo.lock') }} | |
| restore-keys: linux-${{ matrix.arch }}-cargo- | |
| - name: Install Rust stable | |
| uses: dtolnay/rust-toolchain@stable | |
| - name: Install Linux dependencies | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install -y libglib2.0-dev libsecret-1-dev libgtk-3-dev libpng-dev libjpeg-dev libgl1-mesa-dev libglu1-mesa-dev libxkbcommon-dev libexpat1-dev libtiff-dev | |
| - name: Build Dependencies | |
| run: | | |
| cargo install patch-crate | |
| cargo fetch --locked || true | |
| cargo patch-crate --force | |
| mkdir -p build/out | |
| - name: Build Binary | |
| run: | | |
| cargo build --workspace --bins --locked --release | |
| cp target/release/${{ env.BINARY_NAME_CLI }} build/${{ env.BINARY_NAME_CLI }}-linux-${{ matrix.arch }} | |
| - name: Generate Runtime Metadata | |
| run: | | |
| cat > build/${{ env.BUNDLE_NAME }}.desktop <<EOF | |
| [Desktop Entry] | |
| Type=Application | |
| Name=${{ env.BUNDLE_NAME }} | |
| Exec=${{ env.BINARY_NAME }} | |
| Icon=${{ env.BUNDLE_NAME }} | |
| Categories=Utility; | |
| Terminal=false | |
| EOF | |
| cp "package/linux/icon.png" "build/${{ env.BUNDLE_NAME }}.png" | |
| - name: Bundle with LinuxDeploy | |
| run: | | |
| cd build | |
| wget https://github.com/linuxdeploy/linuxdeploy/releases/download/continuous/linuxdeploy-${{ matrix.arch }}.AppImage | |
| chmod +x linuxdeploy-${{ matrix.arch }}.AppImage | |
| ./linuxdeploy-${{ matrix.arch }}.AppImage --appimage-extract-and-run \ | |
| --appdir AppDir \ | |
| --executable ../target/release/${{ env.BINARY_NAME }} \ | |
| --desktop-file ${{ env.BUNDLE_NAME }}.desktop \ | |
| --icon-file ${{ env.BUNDLE_NAME }}.png \ | |
| --output appimage | |
| rm linuxdeploy-${{ matrix.arch }}.AppImage | |
| mv *.AppImage out/ | |
| cd .. | |
| - name: Upload Bundles | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: ${{ env.BINARY_NAME }}-linux-${{ matrix.arch }} | |
| path: build/out/* | |
| build-windows: | |
| runs-on: windows-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install Rust stable | |
| uses: dtolnay/rust-toolchain@stable | |
| - name: Setup Windows MSVC environment | |
| uses: ilammy/msvc-dev-cmd@v1 | |
| - name: Build Dependencies | |
| run: | | |
| cargo install patch-crate | |
| cargo fetch --locked || true | |
| cargo patch-crate --force | |
| mkdir -p build/out | |
| mkdir -p build/nsis | |
| - name: Build & Bundle (Windows) | |
| run: | | |
| cargo build --workspace --bins --locked --release | |
| cp target/release/${{ env.BINARY_NAME }}.exe build/nsis | |
| cp target/release/${{ env.BINARY_NAME_CLI }}.exe build/out/${{ env.BINARY_NAME_CLI }}-windows-x86_64.exe | |
| - name: Create NSIS Installer | |
| run: | | |
| mv package/windows/* build/nsis/ | |
| choco install nsis.portable | |
| makensis build/nsis/installer.nsi | |
| mv build/nsis/PlumeInstaller.exe build/out/${{ env.BUNDLE_NAME }}-x86_64-setup.exe | |
| - name: Upload Bundles | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: ${{ env.BINARY_NAME }}-windows | |
| path: build/out/* | |
| build-macos-slices: | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| matrix: | |
| include: | |
| - os: macos-latest | |
| target: aarch64-apple-darwin | |
| arch: arm | |
| - os: macos-15-intel | |
| target: x86_64-apple-darwin | |
| arch: intel | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install Rust stable | |
| uses: dtolnay/rust-toolchain@stable | |
| with: | |
| targets: ${{ matrix.target }} | |
| - name: Build Dependencies | |
| run: | | |
| cargo install patch-crate | |
| cargo fetch --locked || true | |
| cargo patch-crate --force | |
| mkdir -p build/out | |
| - name: Build (macOS ${{ matrix.arch }}) | |
| run: | | |
| cargo build --bin ${{ env.BINARY_NAME }} --release --target ${{ matrix.target }} | |
| strip target/${{ matrix.target }}/release/${{ env.BINARY_NAME }} | |
| strip target/${{ matrix.target }}/release/${{ env.BINARY_NAME_CLI }} | |
| cp target/${{ matrix.target }}/release/${{ env.BINARY_NAME }} build/out/${{ env.BINARY_NAME }}-${{ matrix.arch }} | |
| cp target/${{ matrix.target }}/release/${{ env.BINARY_NAME_CLI }} build/out/${{ env.BINARY_NAME_CLI }}-macos-${{ matrix.arch }} | |
| - name: Upload ${{ matrix.arch }} Slice | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: ${{ env.BINARY_NAME }}-macos-slice-${{ matrix.arch }} | |
| path: build/out/* | |
| build-macos-universal: | |
| runs-on: macos-latest | |
| needs: [build-macos-slices] | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Get ARM Slice | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: ${{ env.BINARY_NAME }}-macos-slice-arm | |
| path: build/slices | |
| - name: Get Intel Slice | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: ${{ env.BINARY_NAME }}-macos-slice-intel | |
| path: build/slices | |
| - name: Setup Certificates | |
| uses: apple-actions/import-codesign-certs@v5 | |
| with: | |
| p12-file-base64: ${{ secrets.DEV_ID_P12_BASE64 }} | |
| p12-password: ${{ secrets.DEV_ID_P12_PASSWORD }} | |
| - name: Download CreateDMG | |
| run: | | |
| brew install create-dmg | |
| - name: Create Universal Binary | |
| run: | | |
| mkdir -p build/universal | |
| lipo -create -output build/universal/${{ env.BINARY_NAME }} build/slices/${{ env.BINARY_NAME }}-arm build/slices/${{ env.BINARY_NAME }}-intel | |
| chmod +x build/universal/${{ env.BINARY_NAME }} | |
| vtool -arch x86_64 -arch arm64 -set-build-version 1 10.12 26.0 -output build/universal/${{ env.BINARY_NAME }} build/universal/${{ env.BINARY_NAME }} | |
| - name: Bundle | |
| run: | | |
| mkdir -p build/dmg | |
| cp -R package/macos/${{ env.BUNDLE_NAME }}.app build/dmg/${{ env.BUNDLE_NAME }}.app | |
| mkdir -p build/dmg/${{ env.BUNDLE_NAME }}.app/Contents/MacOS | |
| mv build/universal/${{ env.BINARY_NAME }} build/dmg/${{ env.BUNDLE_NAME }}.app/Contents/MacOS/${{ env.BINARY_NAME }} | |
| VERSION=$(awk '/\[workspace.package\]/,/^$/' Cargo.toml | sed -nE 's/version *= *"([^"]*)".*/\1/p') | |
| plutil -replace CFBundleShortVersionString -string "$VERSION" build/dmg/${{ env.BUNDLE_NAME }}.app/Contents/Info.plist | |
| plutil -replace CFBundleVersion -string "$VERSION" build/dmg/${{ env.BUNDLE_NAME }}.app/Contents/Info.plist | |
| - name: Codesign | |
| run: | | |
| codesign --deep --force --options runtime \ | |
| --sign "${{ secrets.DEV_ID_IDENTITY_NAME }}" build/dmg/${{ env.BUNDLE_NAME }}.app | |
| - name: Create DMG | |
| run: | | |
| mkdir -p build/out | |
| create-dmg \ | |
| --volname ${{ env.BUNDLE_NAME }} \ | |
| --background "package/macos/background.png" \ | |
| --window-pos 200 120 \ | |
| --window-size 510 350 \ | |
| --icon-size 100 \ | |
| --icon ${{ env.BUNDLE_NAME }}.app 160 155 \ | |
| --hide-extension "${{ env.BUNDLE_NAME }}.app" \ | |
| --app-drop-link 350 155 \ | |
| build/out/${{ env.BUNDLE_NAME }}.dmg build/dmg | |
| - name: Notarize DMG | |
| run: | | |
| xcrun notarytool submit build/out/${{ env.BUNDLE_NAME }}.dmg --apple-id "${{ secrets.APPLE_ID_EMAIL }}" --password "${{ secrets.APPLE_ID_PASSWORD }}" --team-id "${{ secrets.APPLE_ID_TEAM }}" --wait | |
| xcrun stapler staple build/out/${{ env.BUNDLE_NAME }}.dmg | |
| - name: Upload Universal DMG | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: ${{ env.BINARY_NAME }}-macos-universal | |
| path: build/out/${{ env.BUNDLE_NAME }}.dmg |