julian
e0cfeb5e71
createUpdaterArtifacts:true (for release.yml's .sig signing) makes `tauri build`
demand TAURI_SIGNING_PRIVATE_KEY and fail without it — even though the .deb/.AppImage
built fine. Override it off for the unsigned per-commit build via
--config '{"bundle":{"createUpdaterArtifacts":false}}'. release.yml keeps signing.
Claude-Session: https://claude.ai/code/session_01Xcm6ikLgGoCxxHrxtjkk5V
98 lines
3.3 KiB
YAML
98 lines
3.3 KiB
YAML
name: Build desktop
|
|
|
|
# Build the Tauri desktop installers (.deb + .AppImage) on every push to dev/main and
|
|
# upload them as workflow ARTIFACTS — a downloadable, per-commit build for testing the
|
|
# native shell. This is NOT a release: it's unsigned (no updater key) and creates no Gitea
|
|
# Release. Signed, versioned releases stay on release.yml (tag v* → .deb/.rpm/.AppImage +
|
|
# latest.json for the auto-updater). See wiki/decisions/desktop-shell-tauri.md.
|
|
|
|
on:
|
|
push:
|
|
branches: [dev, main]
|
|
paths:
|
|
- 'apps/desktop/**'
|
|
- 'apps/web/**'
|
|
- 'packages/**'
|
|
- 'package.json'
|
|
- 'pnpm-lock.yaml'
|
|
- 'pnpm-workspace.yaml'
|
|
- '.gitea/workflows/build-desktop.yml'
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
desktop:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Set up Node 22
|
|
uses: actions/setup-node@v4
|
|
with:
|
|
node-version: 22
|
|
|
|
- name: Enable pnpm
|
|
run: corepack enable && corepack prepare pnpm@10.24.0 --activate
|
|
|
|
- name: Install Tauri system deps
|
|
# Same set release.yml uses (verified): WebKitGTK 4.1 + libsoup-3 + the GTK/
|
|
# appindicator/rsvg stack + AppImage tooling (patchelf, file).
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get install -y --no-install-recommends \
|
|
libwebkit2gtk-4.1-dev \
|
|
libsoup-3.0-dev \
|
|
libgtk-3-dev \
|
|
libayatana-appindicator3-dev \
|
|
librsvg2-dev \
|
|
patchelf \
|
|
file \
|
|
build-essential \
|
|
curl \
|
|
wget
|
|
|
|
- name: Set up Rust
|
|
uses: dtolnay/rust-toolchain@stable
|
|
|
|
- name: Cache cargo + target
|
|
uses: actions/cache@v4
|
|
with:
|
|
path: |
|
|
~/.cargo/registry
|
|
~/.cargo/git
|
|
apps/desktop/src-tauri/target
|
|
key: ${{ runner.os }}-cargo-${{ hashFiles('apps/desktop/src-tauri/Cargo.lock') }}
|
|
restore-keys: ${{ runner.os }}-cargo-
|
|
|
|
- name: Install dependencies
|
|
run: pnpm install --frozen-lockfile
|
|
|
|
- name: Build desktop bundle (.deb + .AppImage)
|
|
# Unsigned — no TAURI_SIGNING_* here (this is a test artifact, not an updater
|
|
# release). The config sets createUpdaterArtifacts:true (release.yml signs them),
|
|
# which makes tauri DEMAND the signing key and fail without it — so override it to
|
|
# false for this build via --config (a JSON patch merged over tauri.conf.json).
|
|
# --bundles restricts to the two installers we ship; tauri builds the web SPA
|
|
# first (beforeBuildCommand), so the desktop UI matches.
|
|
run: >
|
|
pnpm --filter @parking/desktop bundle
|
|
--bundles deb,appimage
|
|
--config '{"bundle":{"createUpdaterArtifacts":false}}'
|
|
|
|
- name: Collect installers
|
|
id: collect
|
|
run: |
|
|
set -e
|
|
BUNDLE=apps/desktop/src-tauri/target/release/bundle
|
|
mkdir -p dist
|
|
find "$BUNDLE" \( -name '*.AppImage' -o -name '*.deb' \) -exec cp {} dist/ \;
|
|
echo "Artifacts:"; ls -la dist/
|
|
|
|
- name: Upload installers
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: desktop-${{ github.ref_name }}-${{ github.sha }}
|
|
path: dist/*
|
|
if-no-files-found: error
|
|
retention-days: 14
|