Kordophone/.gitea/workflows/android-release.yaml

name: Android Release

on:
  push:
    tags:
      - 'release/android/*'

env:
  ANDROID_SDK_ROOT: ${{ gitea.workspace }}/android-sdk
  ANDROID_HOME: ${{ gitea.workspace }}/android-sdk

jobs:
  build-android-release:
    runs-on: ubuntu-latest

    steps:
      # Gitea's default act_runner labels map ubuntu-latest to node:16-bullseye,
      # so keep the GitHub-hosted actions on their Node 16-compatible v3 line.
      - name: Install system dependencies
        run: |
          set -eu
          apt-get update
          apt-get install -y ca-certificates git openjdk-17-jdk unzip wget

      - name: Check out repository code
        uses: actions/checkout@v3

      - name: Install Android SDK components
        run: |
          set -eu

          wget -q https://dl.google.com/android/repository/commandlinetools-linux-11076708_latest.zip -O /tmp/android-commandlinetools.zip

          rm -rf "$ANDROID_SDK_ROOT"
          mkdir -p "$ANDROID_SDK_ROOT/cmdline-tools"

          unzip -q /tmp/android-commandlinetools.zip -d /tmp/android-commandlinetools
          mv /tmp/android-commandlinetools/cmdline-tools "$ANDROID_SDK_ROOT/cmdline-tools/latest"

          # sdkmanager exits successfully once it has consumed all input, which
          # causes `yes` to receive SIGPIPE and return 141 under `pipefail`.
          set +o pipefail
          yes | "$ANDROID_SDK_ROOT/cmdline-tools/latest/bin/sdkmanager" --sdk_root="$ANDROID_SDK_ROOT" --licenses
          set -o pipefail

          "$ANDROID_SDK_ROOT/cmdline-tools/latest/bin/sdkmanager" --sdk_root="$ANDROID_SDK_ROOT" \
            "platform-tools" \
            "build-tools;33.0.1" \
            "platforms;android-33"

      - name: Prepare Android signing config
        env:
          ANDROID_RELEASE_KEYSTORE_B64: ${{ secrets.ANDROID_RELEASE_KEYSTORE_B64 }}
          ORG_GRADLE_PROJECT_RELEASE_STORE_PASSWORD: ${{ secrets.ANDROID_RELEASE_STORE_PASSWORD }}
          ORG_GRADLE_PROJECT_RELEASE_KEY_ALIAS: ${{ secrets.ANDROID_RELEASE_KEY_ALIAS }}
          ORG_GRADLE_PROJECT_RELEASE_KEY_PASSWORD: ${{ secrets.ANDROID_RELEASE_KEY_PASSWORD }}
        run: |
          set -eu

          : "${ANDROID_RELEASE_KEYSTORE_B64:?Missing secret ANDROID_RELEASE_KEYSTORE_B64}"
          : "${ORG_GRADLE_PROJECT_RELEASE_STORE_PASSWORD:?Missing secret ANDROID_RELEASE_STORE_PASSWORD}"
          : "${ORG_GRADLE_PROJECT_RELEASE_KEY_ALIAS:?Missing secret ANDROID_RELEASE_KEY_ALIAS}"
          : "${ORG_GRADLE_PROJECT_RELEASE_KEY_PASSWORD:?Missing secret ANDROID_RELEASE_KEY_PASSWORD}"

          keystore_path="${{ gitea.workspace }}/android-release.keystore"
          printf '%s' "$ANDROID_RELEASE_KEYSTORE_B64" | base64 -d > "$keystore_path"
          chmod 600 "$keystore_path"

          printf 'ORG_GRADLE_PROJECT_RELEASE_STORE_FILE=%s\n' "$keystore_path" >> "$GITHUB_ENV"
          printf 'ORG_GRADLE_PROJECT_RELEASE_STORE_PASSWORD=%s\n' "$ORG_GRADLE_PROJECT_RELEASE_STORE_PASSWORD" >> "$GITHUB_ENV"
          printf 'ORG_GRADLE_PROJECT_RELEASE_KEY_ALIAS=%s\n' "$ORG_GRADLE_PROJECT_RELEASE_KEY_ALIAS" >> "$GITHUB_ENV"
          printf 'ORG_GRADLE_PROJECT_RELEASE_KEY_PASSWORD=%s\n' "$ORG_GRADLE_PROJECT_RELEASE_KEY_PASSWORD" >> "$GITHUB_ENV"

      - name: Build Android release APKs
        working-directory: android
        run: ./gradlew assembleRelease

      - name: Prepare release assets
        env:
          RELEASE_TAG: ${{ github.ref_name }}
        run: |
          set -eu

          version="${RELEASE_TAG#release/android/}"
          if [ -z "$version" ] || [ "$version" = "$RELEASE_TAG" ]; then
            echo "Expected tag in the form release/android/{version}, got: $RELEASE_TAG" >&2
            exit 1
          fi

          assets_dir="${{ gitea.workspace }}/release-assets/android"
          rm -rf "$assets_dir"
          mkdir -p "$assets_dir"

          found_apk=0
          for apk in android/app/build/outputs/apk/release/*.apk; do
            if [ ! -e "$apk" ]; then
              continue
            fi

            found_apk=1
            base="$(basename "$apk")"

            case "$base" in
              app-*-release*.apk)
                arch="${base#app-}"
                arch="${arch%%-release*}"
                ;;
              app-release*.apk)
                arch="universal"
                ;;
              *)
                echo "Unexpected APK filename: $base" >&2
                exit 1
                ;;
            esac

            cp "$apk" "$assets_dir/kordophone-${arch}-${version}.apk"
          done

          if [ "$found_apk" -ne 1 ]; then
            echo "No release APKs were produced." >&2
            exit 1
          fi

          {
            printf 'RELEASE_VERSION=%s\n' "$version"
            printf 'RELEASE_ASSETS_DIR=%s\n' "$assets_dir"
          } >> "$GITHUB_ENV"

      - name: Create Gitea release
        uses: https://gitea.com/actions/gitea-release-action@v1
        with:
          name: Kordophone Android ${{ env.RELEASE_VERSION }}
          tag_name: ${{ github.ref_name }}
          target_commitish: ${{ github.sha }}
          files: |
            ${{ env.RELEASE_ASSETS_DIR }}/*.apk

      - name: Clean up signing material
        if: ${{ always() }}
        run: rm -f "${{ gitea.workspace }}/android-release.keystore"