ci: create and sign separate bundle ID for PRs #19505
+852
−438
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,7 @@ | ||
| # App identifiers for Status App iOS builds | ||
| app_identifier("app.status.mobile") | ||
| team_id(ENV["FASTLANE_TEAM_ID"]) | ||
|
|
||
| for_lane :pr do | ||
| app_identifier("app.status.mobile.pr") | ||
| end |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,172 @@ | ||
| # This file defines the signing and packaging lanes for iOS | ||
| # Building is done separately via make targets | ||
|
|
||
| default_platform(:ios) | ||
|
|
||
| # Build configuration | ||
| APP_NAME_RELEASE = "Status.app" | ||
| APP_NAME_PR = "StatusPR.app" | ||
| DISPLAY_NAME_RELEASE = "Status" | ||
| DISPLAY_NAME_PR = "Status PR" | ||
| PROJECT_DIR = File.expand_path("../", __dir__) | ||
| BUILD_DIR = File.join(PROJECT_DIR, "bin", "ios", "qt6") | ||
|
|
||
| platform :ios do | ||
| before_all do | ||
| UI.message("Project directory: #{PROJECT_DIR}") | ||
| UI.message("Build directory: #{BUILD_DIR}") | ||
| end | ||
|
|
||
| after_all do | ||
| # Clean up CI keychain after signing | ||
| if is_ci | ||
| delete_keychain(name: keychain_name) if File.exist?(File.expand_path("~/Library/Keychains/#{keychain_name}-db")) | ||
| end | ||
| end | ||
|
|
||
| error do | ||
| # Clean up CI keychain on failure too | ||
| if is_ci | ||
| delete_keychain(name: keychain_name) rescue nil | ||
| end | ||
| end | ||
|
|
||
| # ============================================ | ||
| # PR Builds - Sign and package for ad-hoc distribution | ||
| # ============================================ | ||
| desc "Sign and package iOS app for PRs" | ||
| lane :pr do | ||
| setup_ci_keychain | ||
|
|
||
| run_match(type: "adhoc") | ||
|
|
||
| resign_and_package( | ||
| app_name: APP_NAME_PR, | ||
| display_name: DISPLAY_NAME_PR, | ||
| profile_type: "adhoc" | ||
| ) | ||
| end | ||
|
|
||
| # ============================================ | ||
| # Release Builds - Sign and package for App Store | ||
| # ============================================ | ||
| desc "Sign and package iOS app for release" | ||
| lane :release do | ||
| setup_ci_keychain | ||
|
|
||
| run_match(type: "appstore") | ||
|
|
||
| resign_and_package( | ||
| app_name: APP_NAME_RELEASE, | ||
| display_name: DISPLAY_NAME_RELEASE, | ||
| profile_type: "appstore" | ||
| ) | ||
|
|
||
| if ENV["UPLOAD_TO_TESTFLIGHT"] == "true" | ||
| upload_to_testflight( | ||
| ipa: File.join(BUILD_DIR, "Status.ipa"), | ||
| skip_waiting_for_build_processing: true, | ||
| changelog: ENV["CHANGELOG"] || "New build from CI" | ||
| ) | ||
| end | ||
| end | ||
|
|
||
| # ============================================ | ||
| # Helper Methods | ||
| # ============================================ | ||
|
|
||
| private_lane :setup_ci_keychain do | ||
| if is_ci | ||
| create_keychain( | ||
| name: keychain_name, | ||
| password: keychain_password, | ||
| default_keychain: true, | ||
| unlock: true, | ||
| timeout: 3600, | ||
| lock_when_sleeps: false | ||
| ) | ||
| end | ||
| end | ||
|
|
||
| private_lane :run_match do |options| | ||
| match_params = { | ||
| type: options[:type], | ||
| readonly: false, | ||
| # Auto-regenerate profiles when new devices are registered (for dev and adhoc) | ||
| force_for_new_devices: options[:type] == "adhoc" | ||
| } | ||
|
|
||
| # Only specify keychain params in CI where we create a custom keychain | ||
| if is_ci | ||
| match_params[:keychain_name] = keychain_name | ||
| match_params[:keychain_password] = keychain_password | ||
| end | ||
|
|
||
| match(match_params) | ||
| end | ||
|
|
||
| private_lane :resign_and_package do |options| | ||
| app_identifier = CredentialsManager::AppfileConfig.try_fetch_value(:app_identifier) | ||
| app_name = options[:app_name] || "Status.app" | ||
| display_name = options[:display_name] || "Status" | ||
| profile_type = options[:profile_type] | ||
|
|
||
| app_path = File.join(BUILD_DIR, app_name) | ||
| ipa_name = app_name.sub(".app", ".ipa") | ||
| ipa_path = File.join(BUILD_DIR, ipa_name) | ||
|
|
||
| unless File.exist?(app_path) | ||
| UI.user_error!("#{app_name} not found at #{app_path}") | ||
| end | ||
|
|
||
| # Get signing identity and provisioning profile from match | ||
| signing_identity = ENV["sigh_#{app_identifier}_#{profile_type}_certificate-name"] | ||
| provisioning_profile = ENV["sigh_#{app_identifier}_#{profile_type}_profile-path"] | ||
|
|
||
| UI.message("Signing identity: #{signing_identity}") | ||
| UI.message("Provisioning profile: #{provisioning_profile}") | ||
|
|
||
| unless provisioning_profile && File.exist?(provisioning_profile) | ||
| UI.user_error!("Provisioning profile not found!") | ||
| end | ||
|
|
||
| unless signing_identity | ||
| UI.user_error!("Signing identity not found!") | ||
| end | ||
|
|
||
| UI.message("Creating unsigned IPA...") | ||
| FileUtils.rm_f(ipa_path) | ||
|
|
||
| Dir.mktmpdir do |tmpdir| | ||
| payload_dir = File.join(tmpdir, "Payload") | ||
| FileUtils.mkdir_p(payload_dir) | ||
| FileUtils.cp_r(app_path, payload_dir) | ||
|
|
||
| Dir.chdir(tmpdir) do | ||
| sh("zip -r '#{ipa_path}' Payload") | ||
| end | ||
| end | ||
|
|
||
| # This handles frameworks, entitlements patching, and bundle ID updates | ||
| UI.message("Resigning IPA with fastlane resign action...") | ||
| resign( | ||
| ipa: ipa_path, | ||
| signing_identity: signing_identity, | ||
| provisioning_profile: { | ||
| app_identifier => provisioning_profile | ||
| }, | ||
| bundle_id: app_identifier, | ||
| display_name: display_name | ||
| ) | ||
|
|
||
| UI.success("Signed and packaged: #{ipa_path}") | ||
| end | ||
|
|
||
| def keychain_name | ||
| "status_ci_#{ENV['BUILD_NUMBER'] || 'local'}.keychain" | ||
| end | ||
|
|
||
| def keychain_password | ||
| ENV["MATCH_PASSWORD"] || "fastlane_ci_password" | ||
| end | ||
| end |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,7 @@ | ||
| source "https://rubygems.org" | ||
|
|
||
| # Core dependencies | ||
| gem "fastlane", "~> 2.225" | ||
|
|
||
| plugins_path = File.join(File.dirname(__FILE__), 'Pluginfile') | ||
| eval_gemfile(plugins_path) if File.exist?(plugins_path) |
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.