Merge pull request #47 from ArdenButterfield/edits-to-docs #107
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Maim | |
| on: | |
| workflow_dispatch: # lets you run a build from the UI | |
| push: | |
| # When pushing new commits, cancel any running builds on that branch | |
| concurrency: | |
| group: ${{ github.ref }} | |
| cancel-in-progress: true | |
| env: | |
| PROJECT_NAME: Maim | |
| BUILD_TYPE: Release | |
| BUILD_DIR: Builds | |
| SOURCE_DIR: Source | |
| LAME_DIR: Source/lib/lame | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| DISPLAY: :0 # linux pluginval needs this | |
| CMAKE_BUILD_PARALLEL_LEVEL: 3 # Use up to 3 cpus to build juceaide, etc | |
| HOMEBREW_NO_INSTALL_CLEANUP: 1 | |
| # jobs are run in paralell on different machines | |
| # all steps run in series | |
| jobs: | |
| build_and_test: | |
| name: ${{ matrix.name }} | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| fail-fast: false # show all errors for each platform (vs. cancel jobs on error) | |
| matrix: | |
| include: | |
| - name: Linux | |
| os: ubuntu-22.04 | |
| pluginval-binary: ./pluginval | |
| ccache: ccache | |
| lame-lib: Source/lib/lame/libmp3lame/.libs/libmp3lame.a | |
| - name: macOS | |
| os: macos-12 | |
| pluginval-binary: pluginval.app/Contents/MacOS/pluginval | |
| ccache: ccache | |
| lame-lib: Source/lib/lame/libmp3lame/.libs/libmp3lame.a | |
| - name: Windows | |
| os: windows-latest | |
| pluginval-binary: ./pluginval.exe | |
| ccache: sccache | |
| lame-lib: Source/lib/lame/output/libmp3lame-static.lib | |
| steps: | |
| # This is just easier than debugging different compilers on different platforms | |
| - name: Set up Clang | |
| if: ${{ matrix.name != 'macOS' }} | |
| uses: egor-tensin/setup-clang@v1 | |
| # This also starts up our "fake" display Xvfb, needed for pluginval | |
| - name: Install JUCE's Linux Deps | |
| if: runner.os == 'Linux' | |
| # Thanks to McMartin & co https://forum.juce.com/t/list-of-juce-dependencies-under-linux/15121/44 | |
| run: | | |
| sudo apt-get update && sudo apt install libasound2-dev libx11-dev libxinerama-dev libxext-dev libfreetype6-dev libwebkit2gtk-4.0-dev libglu1-mesa-dev xvfb ninja-build | |
| sudo /usr/bin/Xvfb $DISPLAY & | |
| - name: Cache IPP (Windows) | |
| if: runner.os == 'Windows' | |
| id: cache-ipp | |
| uses: actions/cache@v3 | |
| with: | |
| key: ipp-v1 | |
| path: C:\Program Files (x86)\Intel\oneAPI\ipp | |
| - name: Install IPP (Windows) | |
| if: (runner.os == 'Windows') && (steps.cache-ipp.outputs.cache-hit != 'true') | |
| shell: bash | |
| run: | | |
| curl --output oneapi.exe https://registrationcenter-download.intel.com/akdlm/irc_nas/19078/w_BaseKit_p_2023.0.0.25940_offline.exe | |
| ./oneapi.exe -s -x -f oneapi | |
| ./oneapi/bootstrapper.exe -s -c --action install --components=intel.oneapi.win.ipp.devel --eula=accept -p=NEED_VS2022_INTEGRATION=1 --log-dir=. | |
| - name: Save IPP cache even on job fail | |
| if: runner.os == 'Windows' && (steps.cache-ipp.outputs.cache-hit != 'true') | |
| uses: actions/cache/save@v3 | |
| with: | |
| path: C:\Program Files (x86)\Intel\oneAPI\ipp | |
| key: ipp-v1 | |
| # This lets us use sscache on Windows | |
| # We need to install ccache here for Windows to grab the right version | |
| - name: Install Ninja (Windows) | |
| if: runner.os == 'Windows' | |
| shell: bash | |
| run: choco install ninja ccache | |
| # Needed for building Lame | |
| - name: Install Make (Windows) | |
| if: runner.os == 'Windows' | |
| shell: bash | |
| run: choco install make | |
| - name: Install macOS Deps | |
| if: ${{ matrix.name == 'macOS' }} | |
| run: brew install ninja osxutils | |
| - name: Checkout code | |
| uses: actions/checkout@v3 | |
| with: | |
| submodules: true # Get JUCE populated | |
| - name: get msvc (windows) | |
| if: ${{ matrix.name == 'Windows' }} | |
| uses: ilammy/msvc-dev-cmd@v1 | |
| - name: Setup Environment Variables | |
| shell: bash | |
| run: | | |
| VERSION=$(cat VERSION) | |
| echo "ARTIFACTS_PATH=${{ env.BUILD_DIR }}/${{ env.PROJECT_NAME }}_artefacts/${{ env.BUILD_TYPE }}" >> $GITHUB_ENV | |
| echo "VST3_PATH=${{ env.PROJECT_NAME }}_artefacts/${{ env.BUILD_TYPE }}/VST3/${{ env.PROJECT_NAME }}.vst3" >> $GITHUB_ENV | |
| echo "AU_PATH=${{ env.PROJECT_NAME }}_artefacts/${{ env.BUILD_TYPE }}/AU/${{ env.PROJECT_NAME }}.component" >> $GITHUB_ENV | |
| echo "AUV3_PATH=${{ env.PROJECT_NAME }}_artefacts/${{ env.BUILD_TYPE }}/AUv3/${{ env.PROJECT_NAME }}.appex" >> $GITHUB_ENV | |
| echo "PRODUCT_NAME=${{ env.PROJECT_NAME }}-$VERSION-${{ matrix.name }}" >> $GITHUB_ENV | |
| - name: ccache | |
| uses: hendrikmuhs/ccache-action@main | |
| with: | |
| key: v3-${{ matrix.os }}-${{ matrix.type }} | |
| variant: ${{ matrix.ccache }} | |
| - name: Build LAME (windows) | |
| if: ${{ matrix.name == 'Windows' }} | |
| working-directory: Source/lib/lame | |
| run: | | |
| cp configMS.h config.h | |
| # nmake clean -f Makefile.MSVC | |
| nmake libmp3lame-static.lib -f Makefile.MSVC comp=msvc asm=no | |
| - name: Build LAME (linux) | |
| if: ${{ matrix.name == 'Linux' }} | |
| shell: bash | |
| working-directory: Source/lib/lame | |
| run: | | |
| ./configure CFLAGS="-fPIC" --disable-frontend --enable-expopt=full --disable-shared --enable-static | |
| make | |
| - name: Build LAME (mac) | |
| if: ${{ matrix.name == 'macOS' }} | |
| shell: bash | |
| working-directory: Source/lib/lame | |
| run: | | |
| ./configure CFLAGS="-arch x86_64 -arch arm64 -fPIC" --disable-frontend --enable-expopt=full --disable-shared --enable-static | |
| make | |
| - name: Configure | |
| shell: bash | |
| run: cmake -B ${{ env.BUILD_DIR }} -G Ninja -DLAME_LIB=${{ matrix.lame-lib }} -DCMAKE_BUILD_TYPE=${{ env.BUILD_TYPE}} -DCMAKE_C_COMPILER_LAUNCHER=${{ matrix.ccache }} -DCMAKE_CXX_COMPILER_LAUNCHER=${{ matrix.ccache }} -DCMAKE_OSX_ARCHITECTURES="arm64;x86_64" . | |
| - name: Build | |
| shell: bash | |
| run: cmake --build ${{ env.BUILD_DIR }} --config ${{ env.BUILD_TYPE }} --parallel 4 | |
| - name: Pluginval | |
| working-directory: ${{ env.BUILD_DIR }} | |
| shell: bash | |
| run: | | |
| curl -LO "https://github.com/Tracktion/pluginval/releases/download/v1.0.3/pluginval_${{ matrix.name }}.zip" | |
| 7z x pluginval_${{ matrix.name }}.zip | |
| ${{ matrix.pluginval-binary }} --strictness-level 10 --verbose --validate "${{ env.VST3_PATH }}" | |
| - name: Import app Certificates (macOS) | |
| uses: apple-actions/import-codesign-certs@v1 | |
| if: ${{ matrix.name == 'macOS' }} | |
| with: | |
| p12-file-base64: ${{ secrets.DEV_ID_APP_CERT }} | |
| p12-password: ${{ secrets.DEV_ID_APP_PASSWORD }} | |
| keychain: sign_app | |
| - name: Codesign (macOS) | |
| working-directory: ${{ env.BUILD_DIR }} | |
| if: ${{ matrix.name == 'macOS' }} | |
| run: | | |
| # Each plugin must be code signed | |
| codesign --force -s "${{ secrets.DEVELOPER_ID_APPLICATION}}" -v ${{ env.VST3_PATH }} --deep --strict --options=runtime --timestamp | |
| codesign --force -s "${{ secrets.DEVELOPER_ID_APPLICATION}}" -v ${{ env.AU_PATH }} --deep --strict --options=runtime --timestamp | |
| - name: Import installer Certificates (macOS) | |
| uses: apple-actions/import-codesign-certs@v1 | |
| if: ${{ matrix.name == 'macOS' }} | |
| with: | |
| p12-file-base64: ${{ secrets.DEV_ID_INSTALLER_CERT }} | |
| p12-password: ${{ secrets.DEV_ID_INSTALLER_PASSWORD }} | |
| keychain: sign_installer | |
| - name: Install Packages software (macOS) | |
| if: ${{ matrix.name == 'macOS' }} | |
| run: | | |
| curl http://s.sudre.free.fr/Software/files/Packages.dmg -o Packages.dmg | |
| sudo hdiutil attach Packages.dmg | |
| sudo installer -package /Volumes/Packages\ 1.2.10/Install\ Packages.pkg -target / | |
| # sudo hdiutil detach /Volumes/Packages\ 1.2.10/Install\ Packages.pkg | |
| - name: Python 3.11 (macos) | |
| uses: actions/setup-python@v4 | |
| if: ${{ matrix.name == 'macOS' }} | |
| with: | |
| python-version: '3.11' | |
| - name: Create and sign package (macOS) | |
| if: ${{ matrix.name == 'macOS' }} | |
| run: | | |
| mkdir packaging/plugins | |
| mv "${{ env.ARTIFACTS_PATH }}/VST3/${{ env.PROJECT_NAME }}.vst3" packaging/plugins | |
| mv "${{ env.ARTIFACTS_PATH }}/AU/${{ env.PROJECT_NAME }}.component" packaging/plugins | |
| npm install -g appdmg | |
| packagesbuild packaging/Maim.pkgproj | |
| productsign --sign "${{ secrets.DEVELOPER_ID_INSTALLER}}" packaging/build/Maim.pkg packaging/build/MaimSigned.pkg | |
| mv packaging/build/MaimSigned.pkg packaging/build/Maim.pkg | |
| appdmg packaging/dmg.json packaging/${{ env.PRODUCT_NAME}}.dmg | |
| - name: Import dmg Certificates (macOS) | |
| uses: apple-actions/import-codesign-certs@v1 | |
| if: ${{ matrix.name == 'macOS' }} | |
| with: | |
| p12-file-base64: ${{ secrets.DEV_ID_APP_CERT }} | |
| p12-password: ${{ secrets.DEV_ID_APP_PASSWORD }} | |
| keychain: sign_dmg | |
| - name: sign and notarize dmg (macOS) | |
| if: ${{ matrix.name == 'macOS' }} | |
| run: | | |
| codesign -s "${{ secrets.DEVELOPER_ID_APPLICATION}}" --timestamp -i com.wildergarden.wildergarden --force packaging/${{ env.PRODUCT_NAME }}.dmg | |
| xcrun notarytool submit packaging/${{ env.PRODUCT_NAME }}.dmg --apple-id ${{ secrets.NOTARIZATION_USERNAME }} --password ${{ secrets.NOTARIZATION_PASSWORD }} --team-id ${{ secrets.TEAM_ID }} --wait | |
| xcrun stapler staple packaging/${{ env.PRODUCT_NAME }}.dmg | |
| - name: Zip | |
| if: ${{ matrix.name == 'Linux' }} | |
| working-directory: ${{ env.ARTIFACTS_PATH }} | |
| run: 7z a -tzip ${{ env.PRODUCT_NAME }}.zip . | |
| - name: Generate Installer and Sign with EV cert on Azure (Windows) | |
| if: ${{ matrix.name == 'Windows' }} | |
| shell: bash | |
| run: | | |
| iscc "packaging\installer.iss" | |
| mv "packaging/Output/${{ env.PRODUCT_NAME }}.exe" "${{ env.ARTIFACTS_PATH }}/" | |
| # dotnet tool install --global AzureSignTool | |
| # AzureSignTool sign -kvu "${{ secrets.AZURE_KEY_VAULT_URI }}" -kvi "${{ secrets.AZURE_CLIENT_ID }}" -kvt "${{ secrets.AZURE_TENANT_ID }}" -kvs "${{ secrets.AZURE_CLIENT_SECRET }}" -kvc ${{ secrets.AZURE_CERT_NAME }} -tr http://timestamp.digicert.com -v "${{ env.ARTIFACTS_PATH }}/${{ env.PRODUCT_NAME }}.exe" | |
| - name: Upload Exe (Windows) | |
| if: ${{ matrix.name == 'Windows' }} | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: ${{ env.PRODUCT_NAME }}.exe | |
| path: '${{ env.ARTIFACTS_PATH }}/${{ env.PRODUCT_NAME }}.exe' | |
| - name: Upload Zip (Linux) | |
| if: ${{ matrix.name == 'Linux' }} | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: ${{ env.PRODUCT_NAME }}.zip | |
| path: '${{ env.ARTIFACTS_PATH }}/${{ env.PRODUCT_NAME }}.zip' | |
| - name: Upload DMG (MacOS) | |
| if: ${{ matrix.name == 'macOS' }} | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: ${{ env.PRODUCT_NAME }}.dmg | |
| path: packaging/${{ env.PRODUCT_NAME }}.dmg | |
| release: | |
| if: contains(github.ref, 'tags/v') | |
| runs-on: ubuntu-latest | |
| needs: build_and_test | |
| steps: | |
| - name: Get Artifacts | |
| uses: actions/download-artifact@v3 | |
| - name: Create Release | |
| uses: softprops/action-gh-release@v1 | |
| with: | |
| prerelease: true | |
| # download-artifact puts these files in their own dirs... | |
| # Using globs sidesteps having to pass the version around | |
| files: | | |
| */*.exe | |
| */*.zip | |
| */*.dmg |