reHLDS/rehlds
2
0
Fork 0
mirror of https://github.com/rehlds/rehlds.git synced 2025-07-23 21:51:35 +03:00
Code Issues Projects Releases Wiki Activity

[chore] improved ci build and signing at release publish

Browse Source
This commit is contained in:
STAM 2025-07-22 20:39:43 +03:00
parent 89f17f5b7f
commit 14f7665e54
No known key found for this signature in database
GPG Key ID: 711526C6938897F1
1 changed files with 45 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

66
.github/workflows/build.yml vendored
View File

@ -398,44 +398,67 @@ jobs:
fi fi
rm -f appversion.h rm -f appversion.h
- name: Set SIGN_READY env
run: |
if [[ "${{ github.event_name }}" == "release" && \
"${{ github.event.action }}" == "published" && \
"${{ github.ref }}" == refs/tags/* ]]; then
echo "SIGN_READY=true" >> $GITHUB_ENV
else
echo "SIGN_READY=false" >> $GITHUB_ENV
fi
- name: Final signing and Packaging bin/dbg - name: Final signing and Packaging bin/dbg
id: packaging-job id: packaging-job
if: |
github.event_name == 'release' &&
github.event.action == 'published' &&
startsWith(github.ref, 'refs/tags/')
run: | run: |
if [[ "$SIGN_READY" == "true" ]]; then
echo "Signing avalible."
# new runner, niw signs echo "${{ secrets.PUB_ASC }}" > "${{ secrets.PUB_ASC_FILE }}"
echo "${{ secrets.PUB_ASC }}" > "${{ secrets.PUB_ASC_FILE }}" echo "${{ secrets.KEY_ASC }}" > "${{ secrets.KEY_ASC_FILE }}"
echo "${{ secrets.KEY_ASC }}" > "${{ secrets.KEY_ASC_FILE }}" gpg --batch --yes --import "${{ secrets.PUB_ASC_FILE }}"
gpg --batch --yes --import "${{ secrets.PUB_ASC_FILE }}" gpg --batch --yes --import "${{ secrets.KEY_ASC_FILE }}"
gpg --batch --yes --import "${{ secrets.KEY_ASC_FILE }}" GPG_LINUX_FINGERPRINT=$(gpg --list-keys --with-colons | grep '^fpr' | head -n 1 | cut -d: -f10)
GPG_LINUX_FINGERPRINT=$(gpg --list-keys --with-colons | grep '^fpr' | head -n 1 | cut -d: -f10) echo "$GPG_LINUX_FINGERPRINT:6:" | gpg --batch --import-ownertrust
echo "$GPG_LINUX_FINGERPRINT:6:" | gpg --batch --import-ownertrust echo "GPG_LINUX_FINGERPRINT=$GPG_LINUX_FINGERPRINT" >> $GITHUB_ENV
echo "GPG_LINUX_FINGERPRINT=$GPG_LINUX_FINGERPRINT" >> $GITHUB_ENV else
echo "Signing skipped."
fi
sign_file() { sign_file() {
local file=$1 if [[ "$SIGN_READY" == "true" ]]; then
gpg --batch --yes --detach-sign --armor -u "$GPG_LINUX_FINGERPRINT" "$file" local file=$1
if [ $? -ne 0 ]; then gpg --batch --yes --detach-sign --armor -u "$GPG_LINUX_FINGERPRINT" "$file"
echo "Error: Failed to sign $file" if [ $? -ne 0 ]; then
exit 2 echo "Error: Failed to sign $file"
exit 2
fi
echo "$file signed successfully."
else
echo "$file not signed (SIGN_READY=$SIGN_READY)"
fi fi
echo "$file signed successfully."
} }
# Pack and sign final archive # Pack and try sign final archive
7z a -tzip rehlds-bin-${{ env.APP_VERSION }}.zip bin/ hlsdk/ 7z a -tzip rehlds-bin-${{ env.APP_VERSION }}.zip bin/ hlsdk/
sign_file "rehlds-bin-${{ env.APP_VERSION }}.zip" sign_file "rehlds-bin-${{ env.APP_VERSION }}.zip"
# Pack and sign final archive # Pack and try sign final archive
7z a -t7z -m0=lzma2 -mx=9 -mfb=64 -aoa rehlds-dbg-${{ env.APP_VERSION }}.7z debug/ 7z a -t7z -m0=lzma2 -mx=9 -mfb=64 -aoa rehlds-dbg-${{ env.APP_VERSION }}.7z debug/
sign_file "rehlds-dbg-${{ env.APP_VERSION }}.7z" sign_file "rehlds-dbg-${{ env.APP_VERSION }}.7z"
shell: bash shell: bash
- name: Publish artifacts - name: Publish artifacts
uses: actions/upload-artifact@v4
with:
name: rehlds-ci-${{ env.APP_VERSION }}
path: |
*.zip
*.7z
*.asc
- name: Release artifacts
uses: softprops/action-gh-release@v2 uses: softprops/action-gh-release@v2
id: publish-job id: publish-job
if: | if: |
@ -446,5 +469,6 @@ jobs:
*.zip *.zip
*.7z *.7z
*.asc *.asc
env: env:
GITHUB_TOKEN: ${{ secrets.API_TOKEN }} GITHUB_TOKEN: ${{ secrets.API_TOKEN }}