2022-12-13 14:12:40 +00:00
|
|
|
# This workflow relies on actions/cache to store the hak dependency artifacts as they take a long time to build
|
|
|
|
# Due to this extra care must be taken to only ever run all build_* scripts against the same branch to ensure
|
|
|
|
# the correct cache scoping, and additional care must be taken to not run untrusted actions on the develop branch.
|
2024-01-31 12:46:51 +00:00
|
|
|
|
|
|
|
# window-latest by default uses the pwsh shell which breaks codeSigningCert in the workflow
|
|
|
|
defaults:
|
2024-01-31 13:45:14 +00:00
|
|
|
run:
|
|
|
|
shell: powershell
|
2022-11-11 15:15:21 +00:00
|
|
|
on:
|
2022-12-15 11:00:58 +00:00
|
|
|
workflow_call:
|
2023-02-22 13:51:19 +00:00
|
|
|
secrets:
|
|
|
|
ESIGNER_USER_NAME:
|
|
|
|
required: false
|
|
|
|
ESIGNER_USER_PASSWORD:
|
|
|
|
required: false
|
|
|
|
ESIGNER_USER_TOTP:
|
|
|
|
required: false
|
2022-12-15 11:00:58 +00:00
|
|
|
inputs:
|
|
|
|
arch:
|
|
|
|
type: string
|
|
|
|
required: true
|
2024-01-08 12:40:59 +00:00
|
|
|
description: "The architecture to build for, one of 'x64' | 'ia32' | 'arm64'"
|
2023-02-22 13:51:19 +00:00
|
|
|
version:
|
|
|
|
type: string
|
|
|
|
required: false
|
|
|
|
description: "Version string to override the one in package.json, used for non-release builds"
|
|
|
|
sign:
|
|
|
|
type: string
|
|
|
|
required: false
|
|
|
|
description: "Whether to sign & notarise the build, requires 'packages.element.io' environment"
|
2022-11-11 15:15:21 +00:00
|
|
|
jobs:
|
2022-12-15 11:00:58 +00:00
|
|
|
build:
|
|
|
|
runs-on: windows-latest
|
2023-02-22 13:51:19 +00:00
|
|
|
environment: ${{ inputs.sign && 'packages.element.io' || '' }}
|
2023-03-06 08:56:49 +00:00
|
|
|
env:
|
|
|
|
SIGNTOOL_PATH: "C:/Program Files (x86)/Windows Kits/10/bin/10.0.22000.0/x86/signtool.exe"
|
2022-12-15 11:00:58 +00:00
|
|
|
steps:
|
2023-05-09 11:01:35 +00:00
|
|
|
- uses: kanga333/variable-mapper@3681b75f5c6c00162721168fb91ab74925eaebcb
|
2022-12-15 11:00:58 +00:00
|
|
|
id: config
|
|
|
|
with:
|
|
|
|
key: "${{ inputs.arch }}"
|
|
|
|
export_to: output
|
|
|
|
map: |
|
|
|
|
{
|
|
|
|
"x64": {
|
2024-01-08 12:40:59 +00:00
|
|
|
"target": "x86_64-pc-windows-msvc"
|
2022-12-15 11:00:58 +00:00
|
|
|
},
|
2023-03-22 09:41:51 +00:00
|
|
|
"arm64": {
|
|
|
|
"target": "aarch64-pc-windows-msvc",
|
|
|
|
"build-args": "--arm64",
|
2024-01-08 12:40:59 +00:00
|
|
|
"arch": "amd64_arm64"
|
2023-03-22 09:41:51 +00:00
|
|
|
},
|
2024-01-08 12:40:59 +00:00
|
|
|
"ia32": {
|
2022-12-15 11:00:58 +00:00
|
|
|
"target": "i686-pc-windows-msvc",
|
2023-02-27 10:47:40 +00:00
|
|
|
"build-args": "--ia32",
|
2024-01-08 12:40:59 +00:00
|
|
|
"arch": "x86"
|
2022-12-15 11:00:58 +00:00
|
|
|
}
|
|
|
|
}
|
2022-11-14 11:09:07 +00:00
|
|
|
|
2024-01-02 17:24:45 +00:00
|
|
|
- uses: actions/checkout@v4
|
2022-11-11 15:15:21 +00:00
|
|
|
|
2024-01-08 12:40:59 +00:00
|
|
|
- uses: actions/download-artifact@v4
|
2022-12-15 11:00:58 +00:00
|
|
|
with:
|
|
|
|
name: webapp
|
2022-11-11 15:15:21 +00:00
|
|
|
|
2022-12-15 11:00:58 +00:00
|
|
|
- name: Cache .hak
|
|
|
|
id: cache
|
2024-01-23 20:03:17 +00:00
|
|
|
uses: actions/cache@v4
|
2022-12-15 11:00:58 +00:00
|
|
|
with:
|
2023-04-26 14:04:17 +00:00
|
|
|
key: ${{ runner.os }}-${{ inputs.arch }}-${{ hashFiles('hakHash', 'electronVersion') }}
|
2022-12-15 11:00:58 +00:00
|
|
|
path: |
|
|
|
|
./.hak
|
2022-11-11 15:15:21 +00:00
|
|
|
|
2022-12-15 11:00:58 +00:00
|
|
|
- name: Set up build tools
|
2024-01-10 01:10:54 +00:00
|
|
|
uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0
|
2022-12-15 11:00:58 +00:00
|
|
|
with:
|
2023-03-22 09:41:51 +00:00
|
|
|
arch: ${{ steps.config.outputs.arch || inputs.arch }}
|
2022-11-11 15:15:21 +00:00
|
|
|
|
2022-12-15 11:00:58 +00:00
|
|
|
# ActiveTCL package on choco is from 2015,
|
|
|
|
# this one is newer but includes more than we need
|
|
|
|
- name: Choco install tclsh
|
2023-02-22 13:51:19 +00:00
|
|
|
if: steps.cache.outputs.cache-hit != 'true'
|
2022-12-15 11:00:58 +00:00
|
|
|
shell: pwsh
|
|
|
|
run: |
|
|
|
|
choco install -y magicsplat-tcl-tk --no-progress
|
|
|
|
echo "${HOME}/AppData/Local/Apps/Tcl86/bin" | Out-File -FilePath $env:GITHUB_PATH -Encoding utf8 -Append
|
2022-11-11 15:15:21 +00:00
|
|
|
|
2022-12-15 11:00:58 +00:00
|
|
|
- name: Choco install NetWide Assembler
|
2023-02-22 13:51:19 +00:00
|
|
|
if: steps.cache.outputs.cache-hit != 'true'
|
2022-12-15 11:00:58 +00:00
|
|
|
shell: pwsh
|
|
|
|
run: |
|
|
|
|
choco install -y nasm --no-progress
|
|
|
|
echo "C:/Program Files/NASM" | Out-File -FilePath $env:GITHUB_PATH -Encoding utf8 -Append
|
2022-11-11 15:15:21 +00:00
|
|
|
|
2022-12-15 11:00:58 +00:00
|
|
|
- name: Install Rust
|
|
|
|
if: steps.cache.outputs.cache-hit != 'true'
|
2023-08-02 13:34:38 +00:00
|
|
|
run: |
|
|
|
|
rustup toolchain install stable --profile minimal --no-self-update
|
|
|
|
rustup default stable
|
|
|
|
rustup target add ${{ steps.config.outputs.target }}
|
2022-11-11 15:15:21 +00:00
|
|
|
|
2024-01-02 17:37:20 +00:00
|
|
|
- uses: actions/setup-node@v4
|
2022-12-15 11:00:58 +00:00
|
|
|
with:
|
2024-01-18 10:10:51 +00:00
|
|
|
node-version-file: package.json
|
2022-12-15 11:00:58 +00:00
|
|
|
cache: "yarn"
|
2022-11-11 15:15:21 +00:00
|
|
|
|
2022-12-15 11:00:58 +00:00
|
|
|
# Does not need branch matching as only analyses this layer
|
|
|
|
- name: Install Deps
|
2023-03-31 15:17:43 +00:00
|
|
|
run: "yarn install --frozen-lockfile"
|
2022-11-11 15:15:21 +00:00
|
|
|
|
2022-12-15 11:00:58 +00:00
|
|
|
- name: Build Natives
|
|
|
|
if: steps.cache.outputs.cache-hit != 'true'
|
|
|
|
run: |
|
|
|
|
refreshenv
|
|
|
|
yarn build:native --target ${{ steps.config.outputs.target }}
|
2022-11-11 15:15:21 +00:00
|
|
|
|
2023-02-22 13:51:19 +00:00
|
|
|
- name: Install and configure eSigner CKA
|
|
|
|
if: inputs.sign
|
|
|
|
run: |
|
|
|
|
Set-StrictMode -Version 'Latest'
|
|
|
|
|
|
|
|
# Download
|
|
|
|
Invoke-WebRequest -OutFile eSigner_CKA.exe "https://packages.element.io/tools/SSL.COM%20eSigner%20CKA_1.0.4-build-20230221_signed.exe"
|
|
|
|
|
|
|
|
# Install
|
|
|
|
New-Item -ItemType Directory -Force -Path "$env:INSTALL_DIR"
|
|
|
|
./eSigner_CKA.exe /CURRENTUSER /VERYSILENT /SUPPRESSMSGBOXES /DIR="${{ env.INSTALL_DIR }}" | Out-Null
|
|
|
|
|
|
|
|
# Disable logger
|
|
|
|
$LogConfig = Get-Content -Path ${{ env.INSTALL_DIR }}/log4net.config
|
|
|
|
$LogConfig[0] = '<log4net threshold="OFF">'
|
|
|
|
$LogConfig | Set-Content -Path ${{ env.INSTALL_DIR }}/log4net.config
|
|
|
|
|
|
|
|
# Configure
|
2023-03-20 08:17:34 +00:00
|
|
|
${{ env.INSTALL_DIR }}/eSignerCKATool.exe config -mode product -user "${{ secrets.ESIGNER_USER_NAME }}" -pass "${{ secrets.ESIGNER_USER_PASSWORD }}" -totp "${{ secrets.ESIGNER_USER_TOTP }}" -key "${{ env.MASTER_KEY_FILE }}" -r
|
2023-02-22 13:51:19 +00:00
|
|
|
${{ env.INSTALL_DIR }}/eSignerCKATool.exe unload
|
|
|
|
${{ env.INSTALL_DIR }}/eSignerCKATool.exe load
|
|
|
|
|
|
|
|
# Find certificate
|
|
|
|
$CodeSigningCert = Get-ChildItem Cert:\CurrentUser\My -CodeSigningCert | Select-Object -First 1
|
|
|
|
echo Certificate: $CodeSigningCert
|
|
|
|
|
|
|
|
# Extract thumbprint and subject name
|
|
|
|
$Thumbprint = $CodeSigningCert.Thumbprint
|
|
|
|
$SubjectName = ($CodeSigningCert.Subject -replace ", ?", "`n" | ConvertFrom-StringData).CN
|
2024-01-03 16:29:48 +00:00
|
|
|
|
2024-01-04 09:19:22 +00:00
|
|
|
echo "ED_SIGNTOOL_THUMBPRINT=$Thumbprint" >> $env:GITHUB_ENV
|
|
|
|
echo "ED_SIGNTOOL_SUBJECT_NAME=$SubjectName" >> $env:GITHUB_ENV
|
2023-02-22 13:51:19 +00:00
|
|
|
env:
|
|
|
|
INSTALL_DIR: C:\Users\runneradmin\eSignerCKA
|
|
|
|
MASTER_KEY_FILE: C:\Users\runneradmin\eSignerCKA\master.key
|
|
|
|
|
|
|
|
- name: "[Nightly] Resolve version"
|
|
|
|
if: inputs.version != ''
|
|
|
|
shell: bash
|
|
|
|
run: |
|
2024-01-03 16:29:48 +00:00
|
|
|
echo "ED_NIGHTLY=${{ inputs.version }}" >> $GITHUB_ENV
|
|
|
|
|
|
|
|
# XXX: For whatever reason if we use `yarn build ...` it freezes, but splitting it into parts it is fine
|
|
|
|
- run: yarn run build:ts
|
|
|
|
- run: yarn run build:res
|
2023-02-22 13:51:19 +00:00
|
|
|
|
2022-12-15 11:00:58 +00:00
|
|
|
- name: Build App
|
2023-02-22 13:51:19 +00:00
|
|
|
run: |
|
2024-01-03 16:29:48 +00:00
|
|
|
yarn electron-builder --publish never -w ${{ steps.config.outputs.build-args }}
|
2023-03-06 08:56:49 +00:00
|
|
|
|
|
|
|
- name: Check app was signed successfully
|
|
|
|
if: inputs.sign != ''
|
|
|
|
run: |
|
|
|
|
. "$env:SIGNTOOL_PATH" verify /pa (get-item ./dist/squirrel-windows*/*.exe)
|
2023-02-22 13:51:19 +00:00
|
|
|
|
2022-12-15 11:00:58 +00:00
|
|
|
- name: Upload Artifacts
|
2024-01-08 12:40:59 +00:00
|
|
|
uses: actions/upload-artifact@v4
|
2022-12-15 11:00:58 +00:00
|
|
|
with:
|
2024-01-08 12:40:59 +00:00
|
|
|
name: win-${{ inputs.arch }}
|
|
|
|
path: |
|
|
|
|
dist
|
2022-12-15 11:00:58 +00:00
|
|
|
retention-days: 1
|