feat: fdroid-publish action — sign APK and publish to F-Droid repo

2026-08-03 23:41:38 +03:00
parent 65312f45cc
commit 3f332be5e4
2 changed files with 104 additions and 0 deletions
@@ -0,0 +1,58 @@
+name: "Publish APK to F-Droid"
+description: "Sign APK (v1+v2) and publish to the F-Droid repository, then rebuild the index"
+
+inputs:
+  apk_path:
+    description: "Path to the APK to sign and publish"
+    required: true
+
+runs:
+  using: "composite"
+  steps:
+    - name: Setup Java
+      uses: actions/setup-java@v4
+      with:
+        java-version: 21
+        distribution: "adopt"
+
+    - name: Sign APK
+      shell: bash
+      env:
+        KEYSTORE_B64: ${{ vars.ANDROID_KEYSTORE_B64 }}
+        KEYSTORE_PASS: ${{ vars.ANDROID_KEYSTORE_PASSWORD }}
+        KEY_ALIAS: ${{ vars.ANDROID_KEY_ALIAS }}
+        KEY_PASS: ${{ vars.ANDROID_KEY_PASSWORD }}
+      run: |
+        set -euo pipefail
+        echo "Signing ${{ inputs.apk_path }}"
+        echo "$KEYSTORE_B64" | base64 -d > /tmp/release.keystore
+        curl -sL -o /tmp/uber-apk-signer.jar \
+          https://github.com/patrickfav/uber-apk-signer/releases/download/v1.3.0/uber-apk-signer-1.3.0.jar
+        java -jar /tmp/uber-apk-signer.jar \
+          -a "${{ inputs.apk_path }}" \
+          --ks /tmp/release.keystore \
+          --ksAlias "$KEY_ALIAS" \
+          --ksPass "$KEYSTORE_PASS" \
+          --ksKeyPass "$KEY_PASS" \
+          --allowResign \
+          -o /tmp/apk-out
+        echo "Signed APK:"
+        ls -la /tmp/apk-out/*.apk
+
+    - name: Push to F-Droid repo and rebuild index
+      shell: bash
+      env:
+        FROID_HOST: ${{ vars.FROID_HOST }}
+        FROID_SSH_USER: ${{ vars.FROID_SSH_USER }}
+        FROID_SSH_KEY: ${{ vars.FROID_SSH_KEY }}
+      run: |
+        set -euo pipefail
+        mkdir -p ~/.ssh && chmod 700 ~/.ssh
+        echo "$FROID_SSH_KEY" > ~/.ssh/froid_ci && chmod 600 ~/.ssh/froid_ci
+        APK=$(ls /tmp/apk-out/*.apk | head -1)
+        echo "Uploading $(basename "$APK") to ${FROID_SSH_USER}@${FROID_HOST}:/opt/fdroid/repo/"
+        scp -i ~/.ssh/froid_ci -o StrictHostKeyChecking=accept-new "$APK" \
+          "${FROID_SSH_USER}@${FROID_HOST}:/opt/fdroid/repo/"
+        ssh -i ~/.ssh/froid_ci "${FROID_SSH_USER}@${FROID_HOST}" \
+          "cd /opt/fdroid && fdroid update"
+        echo "Done. F-Droid repo: https://fdroid.binom.pw/repo/"