Files
devops/fdroid-publish/action.yml
T

58 lines
2.2 KiB
YAML

name: "Publish APK to F-Droid"
description: "Sign APK (v1+v2) and publish to the F-Droid repository, then rebuild the index"
inputs:
apk_path:
description: "Path to the APK to sign and publish"
required: true
runs:
using: "composite"
steps:
- name: Setup Java
uses: actions/setup-java@v4
with:
java-version: 21
distribution: "adopt"
- name: Sign APK
shell: bash
run: |
set -euo pipefail
export KEYSTORE_B64="${{ vars.ANDROID_KEYSTORE_B64 }}"
export KEYSTORE_PASS="${{ vars.ANDROID_KEYSTORE_PASSWORD }}"
export KEY_ALIAS="${{ vars.ANDROID_KEY_ALIAS }}"
export KEY_PASS="${{ vars.ANDROID_KEY_PASSWORD }}"
echo "Signing ${{ inputs.apk_path }}"
rm -f /tmp/apk-out/*.apk
echo "$KEYSTORE_B64" | base64 -d > /tmp/release.keystore
curl -sL -o /tmp/uber-apk-signer.jar \
https://github.com/patrickfav/uber-apk-signer/releases/download/v1.3.0/uber-apk-signer-1.3.0.jar
java -jar /tmp/uber-apk-signer.jar \
-a "${{ inputs.apk_path }}" \
--ks /tmp/release.keystore \
--ksAlias "$KEY_ALIAS" \
--ksPass "$KEYSTORE_PASS" \
--ksKeyPass "$KEY_PASS" \
--allowResign \
-o /tmp/apk-out
echo "Signed APK:"
ls -la /tmp/apk-out/*.apk
- name: Push to F-Droid repo and rebuild index
shell: bash
run: |
set -euo pipefail
export FROID_HOST="${{ vars.FROID_HOST }}"
export FROID_SSH_USER="${{ vars.FROID_SSH_USER }}"
export FROID_SSH_KEY="${{ vars.FROID_SSH_KEY }}"
mkdir -p ~/.ssh && chmod 700 ~/.ssh
echo "$FROID_SSH_KEY" > ~/.ssh/froid_ci && chmod 600 ~/.ssh/froid_ci
APK=$(ls -t /tmp/apk-out/*.apk | head -1)
echo "Uploading $(basename "$APK") to ${FROID_SSH_USER}@${FROID_HOST}:/opt/fdroid/repo/"
scp -i ~/.ssh/froid_ci -o StrictHostKeyChecking=accept-new "$APK" \
"${FROID_SSH_USER}@${FROID_HOST}:/opt/fdroid/repo/"
ssh -i ~/.ssh/froid_ci "${FROID_SSH_USER}@${FROID_HOST}" \
"cd /opt/fdroid && fdroid update"
echo "Done. F-Droid repo: https://fdroid.binom.pw/repo/"