wangjia
aa7099ba94
将单一 CI/CD 流水线拆成三条互不影响的发布流水线，各有 tag 前缀、独立版本
序列与独立 CHANGELOG：
- client（client-v*）：Flutter 全平台 + version.yaml 自更新清单
- site（site-v*）：web/ Eleventy 营销站，不含 web 版 app
- server（server-v*）：backend Go 服务 + 共享基建 nginx/systemd
新增 3 个 workflow（deploy-client/site/server.yml）替换 deploy.yml；CI 脚本
按 part 拆分为 compile-/release-/deploy-{client,site,server}.sh，抽出公共函数
lib-forgejo.sh；compile-{macos,android,ios,windows}.sh 改去 client-v 前缀；
manual.yml 按前缀路由回滚。
跨流水线解耦：version.yaml 归 client，后端每请求实时读取（不重启、不触发
server 流水线）；官网下载页的版本徽章/下载链接/更新日志时间线运行时经
/api/v1/public/release 动态拉取（API 不可达回退构建时静态内容）。为此一次性
扩展后端 changelog 字段（version.go/public.go）与 download.njk 动态渲染。
CHANGELOG.md 重命名为 CHANGELOG-client.md，新增 CHANGELOG-site/server.md；
重写 /release 命令为 /release <part> [version]；同步更新 CLAUDE.md 与部署文档。
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
68 lines
2.7 KiB
Bash
Executable File
68 lines
2.7 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# compile-android.sh <tag> — build signed Flutter Android APK, package into dist/
|
|
set -euo pipefail
|
|
|
|
# shellcheck source=scripts/ci/_env.sh
|
|
. "$(dirname "$0")/_env.sh"
|
|
|
|
TAG="$1"
|
|
VER="${TAG#client-v}"
|
|
|
|
# versionCode 必须单调递增，否则 Android 无法覆盖升级安装。
|
|
# 由版本号推导：major*10000 + minor*100 + patch（如 1.0.17 -> 10017）。
|
|
MAJOR="$(echo "$VER" | cut -d. -f1)"
|
|
MINOR="$(echo "$VER" | cut -d. -f2)"
|
|
PATCH="$(echo "$VER" | cut -d. -f3)"
|
|
BUILD=$(( MAJOR * 10000 + MINOR * 100 + PATCH ))
|
|
|
|
echo "==> compile-android: version=${VER} build=${BUILD}"
|
|
|
|
# Sync Flutter pubspec version (BSD sed on macOS)
|
|
sed -i '' "s/^version:.*/version: ${VER}+${BUILD}/" client/pubspec.yaml
|
|
|
|
# --- release 签名（强制）：从 CI secrets 还原 keystore 与 key.properties ---
|
|
# 必须 release 签名。缺任一签名 secret 直接失败，绝不回退 debug：
|
|
# debug 包用公开调试密钥签名，不能正式分发，也无法与正式版互相覆盖升级。
|
|
: "${ANDROID_KEYSTORE_BASE64:?缺少 ANDROID_KEYSTORE_BASE64：未配置 Android release 签名，构建中止（不回退 debug）}"
|
|
: "${ANDROID_KEYSTORE_PASSWORD:?缺少 ANDROID_KEYSTORE_PASSWORD：未配置 Android release 签名，构建中止}"
|
|
: "${ANDROID_KEY_ALIAS:?缺少 ANDROID_KEY_ALIAS：未配置 Android release 签名，构建中止}"
|
|
: "${ANDROID_KEY_PASSWORD:?缺少 ANDROID_KEY_PASSWORD：未配置 Android release 签名，构建中止}"
|
|
|
|
echo "==> compile-android: configuring release signing"
|
|
KEYSTORE_PATH="$(pwd)/client/android/jiu-release.jks"
|
|
echo "${ANDROID_KEYSTORE_BASE64}" | base64 --decode > "${KEYSTORE_PATH}"
|
|
cat > client/android/key.properties <<EOF
|
|
storeFile=${KEYSTORE_PATH}
|
|
storePassword=${ANDROID_KEYSTORE_PASSWORD}
|
|
keyAlias=${ANDROID_KEY_ALIAS}
|
|
keyPassword=${ANDROID_KEY_PASSWORD}
|
|
EOF
|
|
|
|
# Build APK (universal, all ABIs — simplest for sideload download)
|
|
cd client
|
|
flutter build apk --release \
|
|
"--dart-define=BASE_URL=https://jiu.51yanmei.com" \
|
|
"--dart-define=PUBLIC_URL=https://jiu.51yanmei.com" \
|
|
"--dart-define=APP_VERSION=v${VER}"
|
|
cd ..
|
|
|
|
# Locate the built APK (path differs across Flutter versions) and copy to dist/
|
|
mkdir -p dist
|
|
APK=""
|
|
for cand in \
|
|
client/build/app/outputs/flutter-apk/app-release.apk \
|
|
client/build/app/outputs/apk/release/app-release.apk; do
|
|
if [ -f "$cand" ]; then APK="$cand"; break; fi
|
|
done
|
|
if [ -z "$APK" ]; then
|
|
echo "ERROR: built APK not found" >&2
|
|
exit 1
|
|
fi
|
|
cp "$APK" dist/jiu-android.apk
|
|
|
|
# Clean up signing material so it never lingers on the runner workspace
|
|
rm -f client/android/key.properties client/android/jiu-release.jks 2>/dev/null || true
|
|
|
|
echo "==> compile-android: done — dist/ contents:"
|
|
ls -lh dist/
|