NetworkSelector/.github/workflows/build.yml at master · sixiaolong1117/NetworkSelector · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
name: Build App

on:
  push:
    branches: [ master ]
  pull_request:
    branches: [ master ]

jobs:
  build:
    runs-on: windows-latest
    concurrency:
      group: ${{ github.workflow }}-${{ github.ref }}-${{ matrix.arch }}
      cancel-in-progress: true
    strategy:
      matrix:
        arch: [x64, arm64]
      max-parallel: 1  # 防止证书导入冲突

    env:
      BuildVersion: 2.4.${{ github.run_number }}

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Setup .NET 8
        uses: actions/setup-dotnet@v4
        with:
          dotnet-version: '8.0.x'

      - name: Setup MSBuild
        uses: microsoft/setup-msbuild@v2

      - name: Restore dependencies
        run: dotnet restore NetworkSelector/NetworkSelector.csproj

      # ==================== 生成 Code Signing 证书 ====================
      - name: Generate Code Signing Certificate
        shell: pwsh
        run: |
          $pfxName = "NetworkSelector_CI_${{ matrix.arch }}.pfx"
          $pfxPath = "$env:RUNNER_TEMP\$pfxName"
          $password = "NetworkSelector2025"

          # 生成具备 Code Signing EKU 的证书
          $cert = New-SelfSignedCertificate `
            -Subject "CN=NetworkSelector CI ${{ matrix.arch }}" `
            -KeyUsage DigitalSignature `
            -KeySpec Signature `
            -CertStoreLocation "Cert:\CurrentUser\My" `
            -NotAfter (Get-Date).AddYears(1) `
            -KeyExportPolicy Exportable `
            -KeyLength 2048 `
            -Provider "Microsoft Enhanced RSA and AES Cryptographic Provider" `
            -HashAlgorithm SHA256 `
            -Type CodeSigningCert `
            -FriendlyName "NetworkSelector CI Code Signing"

          # 导出 PFX
          $pwd = ConvertTo-SecureString -String $password -Force -AsPlainText
          Export-PfxCertificate -Cert $cert -FilePath $pfxPath -Password $pwd

          # 导入到 LocalMachine\TrustedPeople（MSIX 打包器信任）
          certutil -importpfx -p $password "TrustedPeople" "$pfxPath" | Out-Null

          # 输出 Thumbprint
          $thumb = $cert.Thumbprint
          echo "CERT_THUMBPRINT=$thumb" >> $env:GITHUB_ENV
          Write-Host "Certificate Thumbprint: $thumb"

      # ==================== MSIX 打包 ====================
      - name: Package MSIX Bundle
        shell: pwsh
        run: |
          $proj = "NetworkSelector/NetworkSelector.csproj"
          $plat = "${{ matrix.arch }}"

          msbuild $proj /restore /t:Publish `
            /p:Configuration=Release `
            /p:Platform=$plat `
            /p:TargetFramework=net8.0-windows10.0.19041.0 `
            /p:RuntimeIdentifier=win-$plat `
            /p:GenerateAppxPackageOnBuild=true `
            /p:AppxBundle=Always `
            /p:AppxBundlePlatforms=$plat `
            /p:PackageCertificateThumbprint="${{ env.CERT_THUMBPRINT }}" `
            /p:WindowsPackageType=MSIX `
            /p:AppxPackageSigningEnabled=true `
            /p:AppxPackageSigningTimestampUrl="http://timestamp.digicert.com" `
            /p:Version=${{ env.BuildVersion }} `
            /v:minimal

      # ==================== 列出生成的包（调试用） ====================
      - name: List generated packages
        shell: pwsh
        run: |
          Write-Host "=== Generated MSIX Packages ==="
          Get-ChildItem -Path "NetworkSelector/bin/${{ matrix.arch }}/Release" -Recurse -Include *.msix, *.msixbundle, *.appxbundle | ForEach-Object {
            Write-Host $_.FullName
          }

      # ==================== 上传产物 ====================
      - name: Upload MSIX Artifact
        uses: actions/upload-artifact@v4
        with:
          name: NetworkSelector-${{ matrix.arch }}-MSIX-v${{ env.BuildVersion }}
          path: |
            NetworkSelector/bin/${{ matrix.arch }}/Release/net8.0-windows*/win-${{ matrix.arch }}/AppPackages/**/NetworkSelector_*.msixbundle
            NetworkSelector/bin/${{ matrix.arch }}/Release/net8.0-windows*/win-${{ matrix.arch }}/AppPackages/**/NetworkSelector_*.msix
          if-no-files-found: error