KernelForge-App/.github/workflows/android-build.yml at main · JWEB0689/KernelForge-App · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
name: Build ARM64 APK

on:
  push:
    branches: [main, master]
  workflow_dispatch:
permissions:
  contents: write
env:
  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true

jobs:
  build-apk:
    name: Build KernelCrafter ARM64 APK
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v5

      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
          node-version: '22'
          cache: 'npm'

      - name: Set up JDK 21
        uses: actions/setup-java@v5
        with:
          java-version: '21'
          distribution: 'temurin'

      - name: Setup Android SDK
        uses: android-actions/setup-android@v4
        with:
          packages: 'platform-tools'

      - name: Install dependencies
        run: npm ci

      - name: Build Next.js static export
        run: npm run build
        env:
          NEXT_PUBLIC_GEMINI_API_KEY: ${{ secrets.NEXT_PUBLIC_GEMINI_API_KEY }}

      - name: Add Capacitor Android
        run: |
          if [ ! -d "android" ]; then
            npx cap add android
          fi

      - name: Sync Capacitor Android
        run: npx cap sync android

      - name: Generate signing keystore
        working-directory: android/app
        env:
          KEY_ALIAS: ${{ secrets.KEY_ALIAS || 'kernelcrafter' }}
          KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
          KEY_PASSWORD: ${{ secrets.KEY_PASSWORD || secrets.KEYSTORE_PASSWORD }}
        run: |
          EFFECTIVE_KEY_PASSWORD="$KEY_PASSWORD"
          if [ -z "$EFFECTIVE_KEY_PASSWORD" ] || [ ${#EFFECTIVE_KEY_PASSWORD} -lt 6 ]; then
            echo "::error::Signing key password must be at least 6 characters. Check KEY_PASSWORD/KEYSTORE_PASSWORD secrets."
            exit 1
          fi
          echo "::add-mask::$EFFECTIVE_KEY_PASSWORD"
          echo "EFFECTIVE_KEY_PASSWORD=$EFFECTIVE_KEY_PASSWORD" >> "$GITHUB_ENV"
          keytool -genkey -v \
            -keystore keystore.jks \
            -alias "$KEY_ALIAS" \
            -keyalg RSA \
            -keysize 2048 \
            -validity 10000 \
            -storepass "$KEYSTORE_PASSWORD" \
            -keypass "$EFFECTIVE_KEY_PASSWORD" \
            -dname "CN=KernelCrafter, OU=App, O=KernelCrafter, L=Unknown, ST=Unknown, C=US"
      - name: Make gradlew executable
        working-directory: android
        run: chmod +x gradlew

      - name: Build Release APK (arm64-v8a)
        working-directory: android
        run: ./gradlew assembleRelease --stacktrace --info
        env:
          KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
          KEY_ALIAS: ${{ secrets.KEY_ALIAS || 'kernelcrafter' }}
          KEY_PASSWORD: ${{ env.EFFECTIVE_KEY_PASSWORD }}

      - name: Locate, Align, and Sign APK
        env:
          KEY_ALIAS: ${{ secrets.KEY_ALIAS || 'kernelcrafter' }}
          KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
          KEY_PASSWORD: ${{ env.EFFECTIVE_KEY_PASSWORD }}
        run: |
          mkdir -p dist
          APK_UNSIGNED=$(find android/app/build/outputs/apk/release -name "*.apk" | head -1)

          # Use Android build tools to align and explicitly sign the APK
          BUILD_TOOLS_DIR=$(ls -d $ANDROID_HOME/build-tools/* | sort -V | tail -n 1)

          $BUILD_TOOLS_DIR/zipalign -v -p 4 "$APK_UNSIGNED" dist/app-aligned.apk

          $BUILD_TOOLS_DIR/apksigner sign --ks android/app/keystore.jks \
            --ks-key-alias "$KEY_ALIAS" \
            --ks-pass "pass:$KEYSTORE_PASSWORD" \
            --key-pass "pass:$KEY_PASSWORD" \
            --out dist/KernelCrafter-arm64-v8a.apk \
            dist/app-aligned.apk

          rm dist/app-aligned.apk
          echo "APK successfully signed and aligned: $(du -h dist/KernelCrafter-arm64-v8a.apk)"
          $BUILD_TOOLS_DIR/apksigner verify dist/KernelCrafter-arm64-v8a.apk
      - name: Upload APK artifact
        uses: actions/upload-artifact@v6
        with:
          name: KernelCrafter-arm64-APK
          path: dist/KernelCrafter-arm64-v8a.apk
          retention-days: 30

      - name: Create GitHub Release (on tag push)
        if: startsWith(github.ref, 'refs/tags/')
        uses: softprops/action-gh-release@v3
        with:
          files: dist/KernelCrafter-arm64-v8a.apk
          generate_release_notes: true