59 lines
2.1 KiB
YAML
59 lines
2.1 KiB
YAML
name: "Publish APK to F-Droid"
|
|
description: "Sign APK (v1+v2) and publish to the F-Droid repository, then rebuild the index"
|
|
|
|
inputs:
|
|
apk_path:
|
|
description: "Path to the APK to sign and publish"
|
|
required: true
|
|
|
|
runs:
|
|
using: "composite"
|
|
steps:
|
|
- name: Setup Java
|
|
uses: actions/setup-java@v4
|
|
with:
|
|
java-version: 21
|
|
distribution: "adopt"
|
|
|
|
- name: Sign APK
|
|
shell: bash
|
|
env:
|
|
KEYSTORE_B64: ${{ vars.ANDROID_KEYSTORE_B64 }}
|
|
KEYSTORE_PASS: ${{ vars.ANDROID_KEYSTORE_PASSWORD }}
|
|
KEY_ALIAS: ${{ vars.ANDROID_KEY_ALIAS }}
|
|
KEY_PASS: ${{ vars.ANDROID_KEY_PASSWORD }}
|
|
run: |
|
|
set -euo pipefail
|
|
echo "Signing ${{ inputs.apk_path }}"
|
|
echo "$KEYSTORE_B64" | base64 -d > /tmp/release.keystore
|
|
curl -sL -o /tmp/uber-apk-signer.jar \
|
|
https://github.com/patrickfav/uber-apk-signer/releases/download/v1.3.0/uber-apk-signer-1.3.0.jar
|
|
java -jar /tmp/uber-apk-signer.jar \
|
|
-a "${{ inputs.apk_path }}" \
|
|
--ks /tmp/release.keystore \
|
|
--ksAlias "$KEY_ALIAS" \
|
|
--ksPass "$KEYSTORE_PASS" \
|
|
--ksKeyPass "$KEY_PASS" \
|
|
--allowResign \
|
|
-o /tmp/apk-out
|
|
echo "Signed APK:"
|
|
ls -la /tmp/apk-out/*.apk
|
|
|
|
- name: Push to F-Droid repo and rebuild index
|
|
shell: bash
|
|
env:
|
|
FROID_HOST: ${{ vars.FROID_HOST }}
|
|
FROID_SSH_USER: ${{ vars.FROID_SSH_USER }}
|
|
FROID_SSH_KEY: ${{ vars.FROID_SSH_KEY }}
|
|
run: |
|
|
set -euo pipefail
|
|
mkdir -p ~/.ssh && chmod 700 ~/.ssh
|
|
echo "$FROID_SSH_KEY" > ~/.ssh/froid_ci && chmod 600 ~/.ssh/froid_ci
|
|
APK=$(ls /tmp/apk-out/*.apk | head -1)
|
|
echo "Uploading $(basename "$APK") to ${FROID_SSH_USER}@${FROID_HOST}:/opt/fdroid/repo/"
|
|
scp -i ~/.ssh/froid_ci -o StrictHostKeyChecking=accept-new "$APK" \
|
|
"${FROID_SSH_USER}@${FROID_HOST}:/opt/fdroid/repo/"
|
|
ssh -i ~/.ssh/froid_ci "${FROID_SSH_USER}@${FROID_HOST}" \
|
|
"cd /opt/fdroid && fdroid update"
|
|
echo "Done. F-Droid repo: https://fdroid.binom.pw/repo/"
|