ci: set up automatic build for iOS

Author: pixelspark

.github/workflows/build-ios.yml

@@ -0,0 +1,54 @@
+name: "Build iOS app"
+
+on:
+  pull_request:
+  push:
+
+env:
+  GO_VERSION: "~1.24.0"
+
+permissions:
+  id-token: write
+  contents: read
+  attestations: write
+
+jobs:
+  build_with_signing:
+    runs-on: macos-latest
+    steps:
+      - name: Check Xcode version
+        run: /usr/bin/xcodebuild -version
+
+      - name: Check out repository
+        uses: actions/checkout@v3
+
+      - name: Obtain certificate
+        env:
+          BUILD_CERTIFICATE_BASE64: ${{ secrets.BUILD_CERTIFICATE_BASE64 }}
+        run: |
+          echo -n "$BUILD_CERTIFICATE_BASE64" | base64 --decode -o "./Assets/developer-certificate.p12"
+
+      - name: Install Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: ${{ env.GO_VERSION }}
+          cache: false
+          check-latest: true
+
+      - name: Make ipa
+        env:
+          P12_PASSWORD: ${{ secrets.P12_PASSWORD }}
+        run: |
+         make ipa
+
+      - name: Upload application
+        uses: actions/upload-artifact@v4
+        with:
+          name: app
+          path: ./Build
+          retention-days: 3
+
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-path: ./Build/synctrain.ipa

.gitignore

@@ -1,4 +1,6 @@
 /SushitrainCore/build
 /Sushitrain.xcodeproj/project.xcworkspace/xcuserdata
 /Sushitrain.xcodeproj/xcuserdata
-/localize.sh
+/localize.sh
+/Build
+*.p12

Assets/AppleWWDRCAG3.cer

@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+	<dict>
+		<key>compileBitcode</key>
+		<false />
+		<key>method</key>
+		<string>development</string>
+		<key>signingStyle</key>
+		<string>automatic</string>
+		<key>stripSwiftSymbols</key>
+		<true />
+		<key>teamID</key>
+		<string>2N89DJPQ2P</string>
+		<key>thinning</key>
+		<string>&lt;none&gt;</string>
+		<key>provisioningProfiles</key>
+		<dict>
+			<key>nl.t-shaped.Sushitrain</key>
+			<string>589483bc-da9c-4fda-a64f-8dc02e1491a1</string>
+		</dict>
+	</dict>
+</plist>

Assets/ExportOptions.plist

@@ -1,7 +1,77 @@
-.PHONY: lint format
+.PHONY: lint format ipa clean build
+
+build: core ipa
 
 format: Sushitrain/*.swift
 	swift-format format -r -i .
 
 lint: Sushitrain/*.swift
-	swift-format lint -r .
+	swift-format lint -r .
+
+BUILD_DIR=$(shell pwd)/Build
+KEYCHAIN_PATH=$(BUILD_DIR)/keychain.db
+CODESIGN_IDENTITY="Apple Development: Tommy van der Vorst (NG3J47D2S7)"
+KEYCHAIN_PASSWORD="not so secret"
+
+# Apple developer team ID (must match certificate and provisioning profile)
+TEAM_ID=2N89DJPQ2P
+
+# UUID of Assets/synctrain-ios-ci.mobileprovision
+PROVISIONING_PROFILE_SPECIFIER="589483bc-da9c-4fda-a64f-8dc02e1491a1"
+
+clean:
+	rm -rf $(BUILD_DIR)
+	cd SushitrainCore && make clean
+
+core:
+	cd SushitrainCore && make deps
+	cd SushitrainCore && make
+
+ipa: core
+ifndef P12_PASSWORD
+	echo You need to set 'P12_PASSWORD' to the password of the .p12 certificate.
+	exit 1
+endif
+	mkdir -p $(BUILD_DIR)
+
+	# Set up a keychain
+	security create-keychain -p $(KEYCHAIN_PASSWORD) $(KEYCHAIN_PATH)
+	security set-keychain-settings -lut 21600 $(KEYCHAIN_PATH)
+	security unlock-keychain -p $(KEYCHAIN_PASSWORD) $(KEYCHAIN_PATH)
+
+	# Import WWDR root certificate
+	# See https://www.apple.com/certificateauthority/
+	security import ./Assets/AppleWWDRCAG3.cer -A -t cert -k $(KEYCHAIN_PATH)
+
+	# Import developer certificate
+	security import ./Assets/developer-certificate.p12 -P $(P12_PASSWORD) -A -t cert -f pkcs12 -k $(KEYCHAIN_PATH)
+	security list-keychain -d user -s $(KEYCHAIN_PATH)
+
+	# Import provisioning profile
+	#mkdir -p ~/Library/MobileDevice/Provisioning\ Profiles
+	#cp ./Assets/synctrain-ios-ci.mobileprovision ~/Library/MobileDevice/Provisioning\ Profiles
+	#ls -la ~/Library/MobileDevice/Provisioning\ Profiles
+
+	# Build archive
+	xcodebuild -scheme "Synctrain release" \
+		-archivePath "$(BUILD_DIR)/synctrain-ios.xcarchive" \
+		-sdk iphoneos \
+		-configuration Release \
+		-destination generic/platform=iOS \
+		CODE_SIGN_IDENTITY=$(CODESIGN_IDENTITY) \
+		OTHER_CODE_SIGN_FLAGS="--keychain $(KEYCHAIN_PATH)" \
+		PROVISIONING_PROFILE_SPECIFIER=$(PROVISIONING_PROFILE_SPECIFIER) \
+		DEVELOPMENT_TEAM=$(TEAM_ID) \
+		CODE_SIGN_STYLE="Manual" \
+		clean archive
+
+	# Export ipa
+	xcodebuild \
+		-exportArchive \
+		-exportOptionsPlist ./Assets/ExportOptions.plist \
+		-archivePath "$(BUILD_DIR)/synctrain-ios.xcarchive" \
+		-exportPath $(BUILD_DIR)
+
+	# Clean up
+	security delete-keychain $(KEYCHAIN_PATH)
+	#rm ~/Library/MobileDevice/Provisioning\ Profiles/synctrain-ios-ci.mobileprovision

Assets/README.md

@@ -3,7 +3,7 @@
 # This Source Code Form is subject to the terms of the Mozilla Public
 # License, v. 2.0. If a copy of the MPL was not distributed with this file,
 # You can obtain one at https://mozilla.org/MPL/2.0/.
-PATH := /opt/homebrew/bin:$(HOME)/go/bin:$(PATH)
+PATH := $(shell pwd):/opt/homebrew/bin:$(HOME)/go/bin:$(PATH)
 SHELL := env PATH="$(PATH)" /bin/bash
 GOMOBILE_VERSION := $(shell gomobile version)
 GO_VERSION := $(shell go version)
@@ -18,6 +18,9 @@ ifndef GO_VERSION
 endif
 ifndef GOMOBILE_VERSION
 	go get golang.org/x/mobile/cmd/gomobile
+	go get golang.org/x/mobile/cmd/gobind
+	go build golang.org/x/mobile/cmd/gomobile
+	go build golang.org/x/mobile/cmd/gobind
 endif
 
 notices.html: notices.template.html go.mod go.sum