Files
android-ci-demo/.gitea/workflows/android-release-signed.yml
T

125 lines
4.9 KiB
YAML

name: Android Release (Signed)
on:
push:
tags:
- 'v*'
jobs:
release:
runs-on: android
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Setup Java 21
run: |
export JAVA_HOME=/usr/lib/jvm/java-21-openjdk
export PATH=$JAVA_HOME/bin:$PATH
echo '=== Java 环境 ==='
java -version
- name: Setup Keystore
run: |
echo '=== 配置签名证书 ==='
mkdir -p app
echo '${{ secrets.KEYSTORE_BASE64 }}' | base64 -d > app/release.keystore
echo '✅ 证书已解压'
ls -lh app/release.keystore
- name: Setup Gradle Properties
run: |
echo '=== 创建 gradle.properties ==='
export CUSTOM_AAPT2_PATH=/usr/bin/aapt2
echo "android.aapt2FromMavenOverride=$CUSTOM_AAPT2_PATH" > gradle.properties
echo "org.gradle.daemon=false" >> gradle.properties
echo "org.gradle.jvmargs=-Xmx2g" >> gradle.properties
cat gradle.properties
- name: Setup Signing Config
run: |
echo '=== 创建签名配置 ==='
echo 'android {' > app/signing-config.gradle
echo ' signingConfigs {' >> app/signing-config.gradle
echo ' release {' >> app/signing-config.gradle
echo " storeFile file('release.keystore')" >> app/signing-config.gradle
echo " storePassword System.getenv('KEYSTORE_PASSWORD')" >> app/signing-config.gradle
echo " keyAlias System.getenv('KEY_ALIAS')" >> app/signing-config.gradle
echo " keyPassword System.getenv('KEY_PASSWORD')" >> app/signing-config.gradle
echo ' v1SigningEnabled true' >> app/signing-config.gradle
echo ' v2SigningEnabled true' >> app/signing-config.gradle
echo ' }' >> app/signing-config.gradle
echo ' }' >> app/signing-config.gradle
echo ' buildTypes {' >> app/signing-config.gradle
echo ' release {' >> app/signing-config.gradle
echo ' signingConfig signingConfigs.release' >> app/signing-config.gradle
echo ' minifyEnabled false' >> app/signing-config.gradle
echo ' shrinkResources false' >> app/signing-config.gradle
echo ' }' >> app/signing-config.gradle
echo ' }' >> app/signing-config.gradle
echo '}' >> app/signing-config.gradle
echo '✅ 签名配置已创建'
cat app/signing-config.gradle
- name: Apply Signing Config
run: |
echo '=== 应用签名配置到 build.gradle ==='
if ! grep -q 'signing-config.gradle' app/build.gradle; then
sed -i "1i apply from: 'signing-config.gradle'" app/build.gradle
echo '✅ 签名配置已应用'
else
echo '⚠️ 签名配置已存在'
fi
head -5 app/build.gradle
- name: Build Signed Release APK
env:
KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
run: |
echo '=== 编译签名 Release APK ==='
export ANDROID_HOME=/opt/android-sdk
export ANDROID_SDK_ROOT=$ANDROID_HOME
export PATH=$ANDROID_HOME/cmdline-tools/latest/bin:$ANDROID_HOME/platform-tools:$PATH
gradle assembleRelease --no-daemon --stacktrace
VERSION=${GITHUB_REF#refs/tags/}
cp app/build/outputs/apk/release/app-release.apk app/build/outputs/apk/release/app-${VERSION}-signed.apk
echo 'APK_NAME=app-'"${VERSION}"'-signed.apk' >> $GITHUB_ENV
echo ''
echo '✅ 编译完成!'
ls -lh app/build/outputs/apk/release/
- name: Create Gitea Release
run: |
echo '=== 创建 Gitea Release ==='
VERSION=${GITHUB_REF#refs/tags/}
curl -s -X POST \
"https://gitea.kg8.net/api/v1/repos/${{ github.repository }}/releases" \
-H "Authorization: token ${{ secrets.ACTIONS_TOKEN }}" \
-H "Content-Type: application/json" \
-d "{\"tag_name\":\"$VERSION\",\"name\":\"Release $VERSION\",\"body\":\"## 自动发布的签名版本\\n\\n- ✅ 已签名\\n- 🔐 开发者证书签名\",\"draft\":false,\"prerelease\":false}"
echo ''
echo '✅ Release 创建完成'
- name: Upload Signed APK
run: |
echo '=== 上传签名 APK ==='
echo 'APK: ${{ env.APK_NAME }}'
VERSION=${GITHUB_REF#refs/tags/}
curl -s -X POST \
"https://gitea.kg8.net/api/v1/repos/${{ github.repository }}/releases/assets?name=${{ env.APK_NAME }}" \
-H "Authorization: token ${{ secrets.ACTIONS_TOKEN }}" \
-H "Content-Type: application/vnd.android.package-archive" \
--data-binary "@app/build/outputs/apk/release/${{ env.APK_NAME }}"
echo ''
echo '✅ APK 上传成功!'