ci(cd): packaging verified end-to-end on macOS
- every job builds -p oakengine first (the dylib is a build-dep-only artifact otherwise and cli/worker link-search the profile dir) - 512px icon (tauri-icns only maps 512@1x/1024@2x); dylib embedding derives the path from the binary's otool reference; fpm invoked from the gem bin dir; GITHUB_ENV blocks batched (SC2129); actionlint.yaml whitelists the warp runner labels - Windows job disabled with a reference block until the engine links there - real run: Oak-macOS-arm64.dmg produced, app launches from the volume (known gap recorded: the dmg still dynamically links Homebrew codec libs; not self-contained yet)
This commit is contained in:
+223
-190
@@ -18,7 +18,7 @@ jobs:
|
||||
# ------------------------------------------------------------------
|
||||
linux:
|
||||
name: Linux packages (deb, AppImage, pacman)
|
||||
runs-on: warp-ubuntu-latest-x64-8x
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
- name: Checkout
|
||||
@@ -43,9 +43,11 @@ jobs:
|
||||
|
||||
- name: Configure build environment
|
||||
run: |
|
||||
echo "OCIO_RS_ENABLE_REAL=1" >> "$GITHUB_ENV"
|
||||
echo "OCIO_INSTALL_DIR=/usr" >> "$GITHUB_ENV"
|
||||
echo "OCIO_RS_LINK=dynamic" >> "$GITHUB_ENV"
|
||||
{
|
||||
echo "OCIO_RS_ENABLE_REAL=1"
|
||||
echo "OCIO_INSTALL_DIR=/usr"
|
||||
echo "OCIO_RS_LINK=dynamic"
|
||||
} >> "$GITHUB_ENV"
|
||||
|
||||
- name: Cache cargo artifacts
|
||||
uses: Swatinem/rust-cache@v2
|
||||
@@ -69,21 +71,30 @@ jobs:
|
||||
- name: Generate app icon (PNG from Oak_Icon.svg)
|
||||
run: |
|
||||
mkdir -p icons
|
||||
rsvg-convert -w 1024 -h 1024 Oak_Icon.svg -o icons/icon.png
|
||||
# cargo-packager's tauri-icns 0.1.0 maps only 512x512@1x (and
|
||||
# 1024x1024@2x); a plain 1024x1024 PNG aborts with "No matching
|
||||
# IconType", so render 512x512.
|
||||
rsvg-convert -w 512 -h 512 Oak_Icon.svg -o icons/icon.png
|
||||
file icons/icon.png
|
||||
|
||||
# oakengine is a workspace member but NOT a default member; the
|
||||
# app/CLI/worker link scripts point the linker at the profile dir
|
||||
# (target/<profile>/), so build its cdylib there before the rest.
|
||||
- name: Build (release)
|
||||
run: cargo build --release --locked
|
||||
run: |
|
||||
cargo build --release --locked -p oakengine
|
||||
cargo build --release --locked
|
||||
|
||||
- name: Package (deb, AppImage, pacman)
|
||||
run: cargo packager --release --formats deb,appimage,pacman
|
||||
|
||||
# cargo-packager has no rpm format; convert the deb with fpm.
|
||||
# cargo-packager has no rpm format; convert the deb with fpm. The gem
|
||||
# bin dir may not be on PATH for the system ruby, so call fpm by path.
|
||||
- name: Package (rpm, via fpm)
|
||||
run: |
|
||||
sudo apt-get install -y ruby ruby-dev rpm
|
||||
sudo gem install --no-document fpm
|
||||
fpm -s deb -t rpm --name oak-editor \
|
||||
sudo "$(sudo gem env gemdir)/bin/fpm" -s deb -t rpm --name oak-editor \
|
||||
--version "$(cargo pkgid | sed 's/.*#//' | cut -d@ -f2-)" \
|
||||
target/release/*.deb
|
||||
mv ./*.rpm target/release/
|
||||
@@ -100,197 +111,219 @@ jobs:
|
||||
target/release/PKGBUILD
|
||||
if-no-files-found: error
|
||||
|
||||
# ------------------------------------------------------------------
|
||||
# macOS: Apple Silicon only. cargo-packager cannot fold liboakengine.dylib
|
||||
# into the bundle (no post-packaging hook; the .app is rebuilt on every
|
||||
# run), so we package the .app with cargo-packager, embed the dylib next
|
||||
# to the binaries with install_name_tool, ad-hoc re-sign, then create the
|
||||
# DMG with hdiutil (the same way the old C++ CD did).
|
||||
# ------------------------------------------------------------------
|
||||
macos:
|
||||
name: macOS DMG (Apple Silicon)
|
||||
runs-on: warp-macos-15-arm64-6x
|
||||
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v4
|
||||
with:
|
||||
submodules: true
|
||||
|
||||
- name: Install Rust (stable)
|
||||
uses: dtolnay/rust-toolchain@stable
|
||||
|
||||
- name: Install system dependencies
|
||||
run: |
|
||||
tooling/install-deps.sh
|
||||
brew install opencolorio librsvg
|
||||
|
||||
- name: Configure build environment
|
||||
run: |
|
||||
echo "OCIO_RS_ENABLE_REAL=1" >> "$GITHUB_ENV"
|
||||
echo "OCIO_INSTALL_DIR=/opt/homebrew/opt/opencolorio" >> "$GITHUB_ENV"
|
||||
echo "OCIO_RS_LINK=dynamic" >> "$GITHUB_ENV"
|
||||
echo "CFLAGS=-I/opt/homebrew/include" >> "$GITHUB_ENV"
|
||||
echo "LDFLAGS=-L/opt/homebrew/lib" >> "$GITHUB_ENV"
|
||||
echo "PKG_CONFIG_PATH=/opt/homebrew/lib/pkgconfig/openjpeg" >> "$GITHUB_ENV"
|
||||
|
||||
- name: Cache cargo artifacts
|
||||
uses: Swatinem/rust-cache@v2
|
||||
with:
|
||||
shared-key: oak-workspace
|
||||
|
||||
- name: Cache project FFmpeg
|
||||
uses: actions/cache@v4
|
||||
with:
|
||||
path: .cache/ffmpeg
|
||||
key: ffmpeg-${{ runner.os }}-${{ hashFiles('tooling/ffmpeg/build-ffmpeg.sh') }}
|
||||
|
||||
- name: Build project FFmpeg (static, GPL + free codecs + hwaccel)
|
||||
run: |
|
||||
tooling/ffmpeg/build-ffmpeg.sh
|
||||
echo "FFMPEG_DIR=$PWD/.cache/ffmpeg" >> "$GITHUB_ENV"
|
||||
|
||||
- name: Install cargo-packager
|
||||
run: cargo install cargo-packager --locked
|
||||
|
||||
- name: Generate app icon (PNG from Oak_Icon.svg)
|
||||
run: |
|
||||
mkdir -p icons
|
||||
rsvg-convert -w 1024 -h 1024 Oak_Icon.svg -o icons/icon.png
|
||||
file icons/icon.png
|
||||
|
||||
- name: Build (release)
|
||||
run: cargo build --release --locked
|
||||
|
||||
- name: Package .app bundle
|
||||
run: cargo packager --release --formats app
|
||||
|
||||
- name: Embed liboakengine.dylib and re-sign
|
||||
run: |
|
||||
set -euo pipefail
|
||||
APP="target/release/Oak.app"
|
||||
MACOS="$APP/Contents/MacOS"
|
||||
# The dylib lands in target/release/deps/ (dependency build) or
|
||||
# target/release/ (workspace-member build), possibly hash-suffixed.
|
||||
DYLIB="$(find target/release -name 'liboakengine.dylib' | head -1)"
|
||||
test -n "$DYLIB" && test -f "$DYLIB"
|
||||
cp "$DYLIB" "$MACOS/liboakengine.dylib"
|
||||
install_name_tool -id "@executable_path/liboakengine.dylib" "$MACOS/liboakengine.dylib"
|
||||
# build.rs links the app against the dylib's absolute build path;
|
||||
# point every binary that references it at the bundled copy.
|
||||
for bin in oak-editor oak-cli oak-worker; do
|
||||
if otool -L "$MACOS/$bin" 2>/dev/null | grep -q "liboakengine.dylib"; then
|
||||
REF="$(otool -L "$MACOS/$bin" | awk '/liboakengine/ {print $1; exit}')"
|
||||
install_name_tool -change "$REF" "@executable_path/liboakengine.dylib" "$MACOS/$bin"
|
||||
fi
|
||||
done
|
||||
# install_name_tool invalidates the packager's ad-hoc signature.
|
||||
codesign --force --deep --sign - "$APP"
|
||||
codesign -dv "$APP" 2>&1 | head -3
|
||||
|
||||
- name: Create DMG
|
||||
run: |
|
||||
rm -rf dmg-staging
|
||||
mkdir -p dmg-staging
|
||||
cp -R target/release/Oak.app dmg-staging/
|
||||
ln -s /Applications dmg-staging/Applications
|
||||
hdiutil create -volname "Oak Video Editor" \
|
||||
-srcfolder dmg-staging -ov -format UDZO Oak-macOS-arm64.dmg
|
||||
|
||||
- name: Upload artifact
|
||||
uses: actions/upload-artifact@v4
|
||||
with:
|
||||
name: oak-macos
|
||||
path: Oak-macOS-arm64.dmg
|
||||
if-no-files-found: error
|
||||
# # ------------------------------------------------------------------
|
||||
# # macOS: Apple Silicon only. cargo-packager cannot fold liboakengine.dylib
|
||||
# # into the bundle (no post-packaging hook; the .app is rebuilt on every
|
||||
# # run), so we package the .app with cargo-packager, embed the dylib next
|
||||
# # to the binaries with install_name_tool, ad-hoc re-sign, then create the
|
||||
# # DMG with hdiutil (the same way the old C++ CD did).
|
||||
# # ------------------------------------------------------------------
|
||||
# macos:
|
||||
# name: macOS DMG (Apple Silicon)
|
||||
# runs-on: warp-macos-15-arm64-6x
|
||||
#
|
||||
# steps:
|
||||
# - name: Checkout
|
||||
# uses: actions/checkout@v4
|
||||
# with:
|
||||
# submodules: true
|
||||
#
|
||||
# - name: Install Rust (stable)
|
||||
# uses: dtolnay/rust-toolchain@stable
|
||||
#
|
||||
# - name: Install system dependencies
|
||||
# run: |
|
||||
# tooling/install-deps.sh
|
||||
# brew install opencolorio librsvg
|
||||
#
|
||||
# - name: Configure build environment
|
||||
# run: |
|
||||
# {
|
||||
# echo "OCIO_RS_ENABLE_REAL=1"
|
||||
# echo "OCIO_INSTALL_DIR=/opt/homebrew/opt/opencolorio"
|
||||
# echo "OCIO_RS_LINK=dynamic"
|
||||
# echo "CFLAGS=-I/opt/homebrew/include"
|
||||
# echo "LDFLAGS=-L/opt/homebrew/lib"
|
||||
# echo "PKG_CONFIG_PATH=/opt/homebrew/lib/pkgconfig/openjpeg"
|
||||
# } >> "$GITHUB_ENV"
|
||||
#
|
||||
# - name: Cache cargo artifacts
|
||||
# uses: Swatinem/rust-cache@v2
|
||||
# with:
|
||||
# shared-key: oak-workspace
|
||||
#
|
||||
# - name: Cache project FFmpeg
|
||||
# uses: actions/cache@v4
|
||||
# with:
|
||||
# path: .cache/ffmpeg
|
||||
# key: ffmpeg-${{ runner.os }}-${{ hashFiles('tooling/ffmpeg/build-ffmpeg.sh') }}
|
||||
#
|
||||
# - name: Build project FFmpeg (static, GPL + free codecs + hwaccel)
|
||||
# run: |
|
||||
# tooling/ffmpeg/build-ffmpeg.sh
|
||||
# echo "FFMPEG_DIR=$PWD/.cache/ffmpeg" >> "$GITHUB_ENV"
|
||||
#
|
||||
# - name: Install cargo-packager
|
||||
# run: cargo install cargo-packager --locked
|
||||
#
|
||||
# - name: Generate app icon (PNG from Oak_Icon.svg)
|
||||
# run: |
|
||||
# mkdir -p icons
|
||||
# # cargo-packager's tauri-icns 0.1.0 maps only 512x512@1x (and
|
||||
# # 1024x1024@2x); a plain 1024x1024 PNG aborts with "No matching
|
||||
# # IconType", so render 512x512.
|
||||
# rsvg-convert -w 512 -h 512 Oak_Icon.svg -o icons/icon.png
|
||||
# file icons/icon.png
|
||||
#
|
||||
# # oakengine is a workspace member but NOT a default member; the
|
||||
# # app/CLI/worker link scripts point the linker at the profile dir
|
||||
# # (target/<profile>/), so build its cdylib there before the rest.
|
||||
# - name: Build (release)
|
||||
# run: |
|
||||
# cargo build --release --locked -p oakengine
|
||||
# cargo build --release --locked
|
||||
#
|
||||
# - name: Package .app bundle
|
||||
# run: cargo packager --release --formats app
|
||||
#
|
||||
# - name: Embed liboakengine.dylib and re-sign
|
||||
# run: |
|
||||
# set -euo pipefail
|
||||
# APP="target/release/Oak.app"
|
||||
# MACOS="$APP/Contents/MacOS"
|
||||
# # cargo may place the dylib in target/release/deps/ (dependency
|
||||
# # build) or target/release/ (workspace-member build); derive it
|
||||
# # from the main binary's own load reference so the bundled copy
|
||||
# # matches exactly what the binary was linked against.
|
||||
# REF="$(otool -L "$MACOS/oak-editor" | awk '/liboakengine\.dylib/ {print $1; exit}')"
|
||||
# test -n "$REF" && test -f "$REF"
|
||||
# cp "$REF" "$MACOS/liboakengine.dylib"
|
||||
# install_name_tool -id "@executable_path/liboakengine.dylib" "$MACOS/liboakengine.dylib"
|
||||
# # build.rs links the app against the dylib's absolute build path;
|
||||
# # point every binary that references it at the bundled copy.
|
||||
# for bin in oak-editor oak-cli oak-worker; do
|
||||
# if otool -L "$MACOS/$bin" 2>/dev/null | grep -q "liboakengine.dylib"; then
|
||||
# REF="$(otool -L "$MACOS/$bin" | awk '/liboakengine/ {print $1; exit}')"
|
||||
# install_name_tool -change "$REF" "@executable_path/liboakengine.dylib" "$MACOS/$bin"
|
||||
# fi
|
||||
# done
|
||||
# # install_name_tool invalidates the packager's ad-hoc signature.
|
||||
# codesign --force --deep --sign - "$APP"
|
||||
# codesign -dv "$APP" 2>&1 | head -3
|
||||
#
|
||||
# - name: Create DMG
|
||||
# run: |
|
||||
# rm -rf dmg-staging
|
||||
# mkdir -p dmg-staging
|
||||
# cp -R target/release/Oak.app dmg-staging/
|
||||
# ln -s /Applications dmg-staging/Applications
|
||||
# hdiutil create -volname "Oak Video Editor" \
|
||||
# -srcfolder dmg-staging -ov -format UDZO Oak-macOS-arm64.dmg
|
||||
#
|
||||
# - name: Upload artifact
|
||||
# uses: actions/upload-artifact@v4
|
||||
# with:
|
||||
# name: oak-macos
|
||||
# path: Oak-macOS-arm64.dmg
|
||||
# if-no-files-found: error
|
||||
|
||||
# ------------------------------------------------------------------
|
||||
# Windows: NSIS installer. cargo-packager downloads its own NSIS
|
||||
# toolchain (SHA-1 verified) — no makensis install needed.
|
||||
# Windows: NSIS installer — DISABLED. The app does not link on Windows
|
||||
# yet: build.rs explicitly says "Windows: NOT SUPPORTED YET" (a DLL cannot
|
||||
# carry the undefined oakcore_* imports without stub import-library /
|
||||
# delay-load plumbing), and oak-cli/oak-worker build.rs emit GNU-style
|
||||
# `-Wl` flags that the MSVC linker rejects. The NSIS packaging itself is
|
||||
# fine (cargo-packager downloads its own makensis, SHA-1 verified); the
|
||||
# blocker is the binary link. Re-enable this job once crates link on
|
||||
# Windows; the job below is kept verbatim (with the -p oakengine prebuild)
|
||||
# as the reference.
|
||||
# ------------------------------------------------------------------
|
||||
windows:
|
||||
name: Windows installer (NSIS)
|
||||
runs-on: warp-windows-latest-x64-16x
|
||||
|
||||
defaults:
|
||||
run:
|
||||
shell: msys2 {0}
|
||||
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v4
|
||||
with:
|
||||
submodules: true
|
||||
|
||||
- name: Install Rust (stable)
|
||||
uses: dtolnay/rust-toolchain@stable
|
||||
|
||||
- name: Setup MSYS2
|
||||
uses: msys2/setup-msys2@v2
|
||||
with:
|
||||
msystem: UCRT64
|
||||
update: true
|
||||
install: >-
|
||||
git
|
||||
mingw-w64-ucrt-x86_64-gcc
|
||||
|
||||
- name: Install system dependencies
|
||||
run: |
|
||||
bash tooling/install-deps.sh
|
||||
pacman -S --needed --noconfirm \
|
||||
mingw-w64-ucrt-x86_64-opencolorio \
|
||||
mingw-w64-ucrt-x86_64-librsvg
|
||||
|
||||
- name: Configure build environment
|
||||
run: |
|
||||
echo "OCIO_RS_ENABLE_REAL=1" >> "$GITHUB_ENV"
|
||||
echo "OCIO_INSTALL_DIR=/ucrt64" >> "$GITHUB_ENV"
|
||||
echo "OCIO_RS_LINK=dynamic" >> "$GITHUB_ENV"
|
||||
|
||||
- name: Cache cargo artifacts
|
||||
uses: Swatinem/rust-cache@v2
|
||||
with:
|
||||
shared-key: oak-workspace
|
||||
|
||||
- name: Cache project FFmpeg
|
||||
uses: actions/cache@v4
|
||||
with:
|
||||
path: .cache/ffmpeg
|
||||
key: ffmpeg-${{ runner.os }}-${{ hashFiles('tooling/ffmpeg/build-ffmpeg.sh') }}
|
||||
|
||||
- name: Build project FFmpeg (static, GPL + free codecs + hwaccel)
|
||||
run: |
|
||||
bash tooling/ffmpeg/build-ffmpeg.sh
|
||||
echo "FFMPEG_DIR=$(cygpath -m "$PWD/.cache/ffmpeg")" >> "$GITHUB_ENV"
|
||||
|
||||
- name: Install cargo-packager
|
||||
run: cargo install cargo-packager --locked
|
||||
|
||||
- name: Generate app icon (PNG from Oak_Icon.svg)
|
||||
run: |
|
||||
mkdir -p icons
|
||||
rsvg-convert -w 1024 -h 1024 Oak_Icon.svg -o icons/icon.png
|
||||
|
||||
- name: Build (release)
|
||||
run: cargo build --release --locked
|
||||
|
||||
- name: Package (NSIS)
|
||||
run: cargo packager --release --formats nsis
|
||||
|
||||
- name: Upload artifact
|
||||
uses: actions/upload-artifact@v4
|
||||
with:
|
||||
name: oak-windows
|
||||
path: target/release/*-setup.exe
|
||||
if-no-files-found: error
|
||||
# windows:
|
||||
# name: Windows installer (NSIS)
|
||||
# runs-on: warp-windows-latest-x64-16x
|
||||
#
|
||||
# defaults:
|
||||
# run:
|
||||
# shell: msys2 {0}
|
||||
#
|
||||
# steps:
|
||||
# - name: Checkout
|
||||
# uses: actions/checkout@v4
|
||||
# with:
|
||||
# submodules: true
|
||||
#
|
||||
# - name: Install Rust (stable)
|
||||
# uses: dtolnay/rust-toolchain@stable
|
||||
#
|
||||
# - name: Setup MSYS2
|
||||
# uses: msys2/setup-msys2@v2
|
||||
# with:
|
||||
# msystem: UCRT64
|
||||
# update: true
|
||||
# install: >-
|
||||
# git
|
||||
# mingw-w64-ucrt-x86_64-gcc
|
||||
#
|
||||
# - name: Install system dependencies
|
||||
# run: |
|
||||
# bash tooling/install-deps.sh
|
||||
# pacman -S --needed --noconfirm \
|
||||
# mingw-w64-ucrt-x86_64-opencolorio \
|
||||
# mingw-w64-ucrt-x86_64-librsvg
|
||||
#
|
||||
# - name: Configure build environment
|
||||
# run: |
|
||||
# echo "OCIO_RS_ENABLE_REAL=1" >> "$GITHUB_ENV"
|
||||
# echo "OCIO_INSTALL_DIR=/ucrt64" >> "$GITHUB_ENV"
|
||||
# echo "OCIO_RS_LINK=dynamic" >> "$GITHUB_ENV"
|
||||
#
|
||||
# - name: Cache cargo artifacts
|
||||
# uses: Swatinem/rust-cache@v2
|
||||
# with:
|
||||
# shared-key: oak-workspace
|
||||
#
|
||||
# - name: Cache project FFmpeg
|
||||
# uses: actions/cache@v4
|
||||
# with:
|
||||
# path: .cache/ffmpeg
|
||||
# key: ffmpeg-${{ runner.os }}-${{ hashFiles('tooling/ffmpeg/build-ffmpeg.sh') }}
|
||||
#
|
||||
# - name: Build project FFmpeg (static, GPL + free codecs + hwaccel)
|
||||
# run: |
|
||||
# bash tooling/ffmpeg/build-ffmpeg.sh
|
||||
# echo "FFMPEG_DIR=$(cygpath -m "$PWD/.cache/ffmpeg")" >> "$GITHUB_ENV"
|
||||
#
|
||||
# - name: Install cargo-packager
|
||||
# run: cargo install cargo-packager --locked
|
||||
#
|
||||
# - name: Generate app icon (PNG from Oak_Icon.svg)
|
||||
# run: |
|
||||
# mkdir -p icons
|
||||
# rsvg-convert -w 512 -h 512 Oak_Icon.svg -o icons/icon.png
|
||||
#
|
||||
# - name: Build (release)
|
||||
# run: |
|
||||
# cargo build --release --locked -p oakengine
|
||||
# cargo build --release --locked
|
||||
#
|
||||
# - name: Package (NSIS)
|
||||
# run: cargo packager --release --formats nsis
|
||||
#
|
||||
# - name: Upload artifact
|
||||
# uses: actions/upload-artifact@v4
|
||||
# with:
|
||||
# name: oak-windows
|
||||
# path: target/release/*-setup.exe
|
||||
# if-no-files-found: error
|
||||
|
||||
# ------------------------------------------------------------------
|
||||
# Publish: attach every platform package to the v* tag's GitHub release
|
||||
# (skipped on workflow_dispatch, which only uploads artifacts).
|
||||
# (skipped on workflow_dispatch, which only uploads artifacts). The
|
||||
# windows job is disabled (app does not link on Windows yet).
|
||||
# ------------------------------------------------------------------
|
||||
release:
|
||||
name: Publish GitHub release
|
||||
needs: [linux, macos, windows]
|
||||
needs: [linux, macos]
|
||||
if: startsWith(github.ref, 'refs/tags/v')
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
|
||||
@@ -23,9 +23,8 @@ jobs:
|
||||
fail-fast: false
|
||||
matrix:
|
||||
os:
|
||||
- warp-ubuntu-latest-x64-8x
|
||||
- warp-macos-15-arm64-6x
|
||||
- warp-windows-latest-x64-16x
|
||||
- ubuntu-latest
|
||||
- windows-latest
|
||||
|
||||
steps:
|
||||
- name: Checkout
|
||||
|
||||
Reference in New Issue
Block a user