diff --git a/.forgejo/workflows/release.yaml b/.forgejo/workflows/release.yaml index 9722d9e..1bde0c6 100644 --- a/.forgejo/workflows/release.yaml +++ b/.forgejo/workflows/release.yaml @@ -69,7 +69,7 @@ jobs: cd _site netlify deploy --dir docs --prod - 'Release': + 'Release MacOS': needs: Build runs-on: macos steps: @@ -79,9 +79,6 @@ jobs: uses: actions/setup-go@v3 with: go-version: 1.25 - - name: Setup Dependencies - run: | - brew install gpg - name: Configure run: | git config --global url."https://${{ secrets.GO_MODULES_TOKEN }}:x-oauth-basic@github.com/lmika".insteadOf "https://github.com/lmika" @@ -90,12 +87,30 @@ jobs: go install github.com/goreleaser/goreleaser/v2@v2.12.7 - name: Release run: | - goreleaser release -f goreleaser.yml --skip=validate --clean + goreleaser publish -f macos.goreleaser.yml --skip=validate --clean env: - GITEA_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} HOMEBREW_TAP_PRIVATE_KEY: ${{ secrets.HOMEBREW_TAP_PRIVATE_KEY }} - MACOS_SIGN_P12: ${{ secrets.MACOS_SIGN_P12 }} - MACOS_SIGN_PASSWORD: ${{ secrets.MACOS_SIGN_PASSWORD }} - MACOS_NOTARY_KEY: ${{ secrets.MACOS_NOTARY_KEY }} - MACOS_NOTARY_KEY_ID: ${{ secrets.MACOS_NOTARY_KEY_ID }} - MACOS_NOTARY_ISSUER_ID: ${{ secrets.MACOS_NOTARY_ISSUER_ID }} + +# release-linux: +# needs: build +# runs-on: ubuntu-latest +# steps: +# - name: Checkout +# uses: actions/checkout@v2 +# - name: Setup Go +# uses: actions/setup-go@v3 +# with: +# go-version: 1.22 +# - name: Configure +# run: | +# git config --global url."https://${{ secrets.GO_MODULES_TOKEN }}:x-oauth-basic@github.com/lmika".insteadOf "https://github.com/lmika" +# - name: Release +# uses: goreleaser/goreleaser-action@v1 +# if: startsWith(github.ref, 'refs/tags/') +# with: +# version: latest +# args: release -f linux.goreleaser.yml --skip=validate --clean +# env: +# GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} +# HOMEBREW_GITHUB_TOKEN: ${{ secrets.HOMEBREW_GITHUB_TOKEN }} \ No newline at end of file diff --git a/_certs/.gitignore b/_certs/.gitignore deleted file mode 100644 index 27fdaaf..0000000 --- a/_certs/.gitignore +++ /dev/null @@ -1,6 +0,0 @@ -*.key -*.p8 -*.certSigningRequest -*.cer -*.p12 -*.txt \ No newline at end of file diff --git a/_certs/README.md b/_certs/README.md deleted file mode 100644 index 2d7fbab..0000000 --- a/_certs/README.md +++ /dev/null @@ -1,50 +0,0 @@ -# Certs - -These hold the certificates for MacOS notarisation. As such they are not checked into the repository. - -List of files is as follows: - -- ALDsigning.key : private key -- csr3072ALDSigning.certSigningRequest : certificate signing request -- developerID_application.p12 : signed certificate -- keyStore.p12 : pkcs12 keystore holding both the certificate and private key -- AthKey_UD4...p8 : private key granting API access to AppStore connect - -## Producing These Files - -To produce the keys, run the following command: - -```bash -# create the private key. It must be RSA 2048 -$ openssl genrsa -out ALDsigning.key 2048 - -# create the CSR -$ openssl req -new -key ALDsigning.key -out csr3072ALDSigning.certSigningRequest -subj "/emailAddress=lmika@lmika.org, CN=dev.lmika.dynamo-browse, C=IE" -``` - -These are based on [these instructions](https://developer.apple.com/help/account/certificates/create-a-certificate-signing-request). -The instructions are incorrect though. They claim that the key lenght should be 3096, but AppStore connect only supports 2048. - -Then, upload the CSR to AppStore Connect, choosing the "Developer ID Application" certificate type. If successful, -you will be given a signed certificate, which will have the filename `developerID_application.signing.cer`. - -Then, produce a PKCS12 (.p12) file by running the following command ([source](https://stackoverflow.com/questions/21141215/creating-a-p12-file)): - -```bash -openssl pkcs12 -export -out keyStore.p12 -inkey ALDsigning.key -in developerID_application.signing.cer -``` - -## Getting the .p8 file - -To download the .p8 file, go to the [Apple Developer Portal](https://appstoreconnect.apple.com/access/integrations/api/new), -and download a new API key for AppStore Connect. The role of the new key should be "Developer". - -## Configuring the CI/CD secrets - -The following secrets correspond to the given secrets: - -- `MACOS_SIGN_P12`: base64 of keyStore.p12 -- `MACOS_SIGN_PASSWORD` the p12 password -- `MACOS_NOTARY_ISSUER_ID`: see the UUID on this page: https://appstoreconnect.apple.com/access/integrations/api -- `MACOS_NOTARY_KEY_ID`: the ID of the .p8 file - `U4....` -- `MACOS_NOTARY_KEY`: base64 of the .p8 file \ No newline at end of file diff --git a/_site/.gitignore b/_site/.gitignore deleted file mode 100644 index 5a35c8d..0000000 --- a/_site/.gitignore +++ /dev/null @@ -1,4 +0,0 @@ -docs/ -node_modules/ -resources/ -themes/ \ No newline at end of file diff --git a/_site/.hugo_build.lock b/_site/.hugo_build.lock deleted file mode 100644 index e69de29..0000000 diff --git a/_site/content/_index.md b/_site/content/_index.md index ef82dc1..d68fcc7 100644 --- a/_site/content/_index.md +++ b/_site/content/_index.md @@ -1,6 +1,7 @@ ---- -weight: 10 ---- ++++ +title = "Dynamo-Browse" +bookToc = false ++++