installer-build-check.yml

name: Build Test Installers

# Job will run nightly at 03:05 EDT / 02:05 CDT
# Time below is UTC
on:
  schedule:
    - cron: "5 7 * * *"
  workflow_run:
    workflows: [ "Build Branch SNAPSHOT", "Build and Publish (Matching Branch)" ]
    types:
      - completed
  workflow_dispatch:


jobs:
  build-installers:
    name: Build Installers
    runs-on: macos-latest #needs macos for apple notarization
    steps:
      - uses: actions/checkout@v4

      - name: Set up JDK for GPG
        uses: actions/setup-java@v3
        with:
          java-version: '17'
          distribution: 'temurin'
          gpg-private-key: ${{ secrets.GPG_SECRET }}
          gpg-passphrase: GPG_PASSPHRASE
          overwrite-settings: false
        env:
          GPG_PASSWORD: ${{ secrets.GPG_PASSPHRASE }}

      - name: Download liquibase-artifacts
        uses: liquibase/action-download-artifact@v2-liquibase
        with:
          workflow: build.yml
          workflow_conclusion: success
          branch: master
          name: liquibase-artifacts
          path: re-version/final

      - name: Re-version Installers
        env:
          INSTALL4J_10_LICENSE: ${{ secrets.INSTALL4J_10_LICENSE }}
          INSTALL4J_APPLE_KEY: ${{ secrets.INSTALL4J_APPLE_KEY }}
          INSTALL4J_APPLE_KEY_PASSWORD: ${{ secrets.INSTALL4J_APPLE_KEY_PASSWORD }}
          INSTALL4J_APPLE_ID: ${{ secrets.INSTALL4J_APPLE_ID }}
          INSTALL4J_APPLE_ID_PASSWORD: ${{ secrets.INSTALL4J_APPLE_ID_PASSWORD }}
          INSTALL4J_WINDOWS_KEY: ${{ secrets.INSTALL4J_WINDOWS_KEY }}
          INSTALL4J_WINDOWS_KEY_PASSWORD: ${{ secrets.INSTALL4J_WINDOWS_KEY_PASSWORD }}
          GPG_PASSWORD: ${{ secrets.GPG_PASSPHRASE }}
        run: |
          mkdir -p liquibase-dist/target/keys
          echo "Saving apple key"
          echo "$INSTALL4J_APPLE_KEY" | base64 -d > liquibase-dist/target/keys/datical_apple.p12
          echo "Saving windows key"
          echo "$INSTALL4J_WINDOWS_KEY" | base64 -d > liquibase-dist/target/keys/datical_windows.pfx
          
          ##### Rebuild installers
          tarFile=$(pwd)/re-version/final/liquibase-master-SNAPSHOT.tar.gz
          scriptDir=$(pwd)/.github/util/
          
          mkdir -p liquibase-dist/target/liquibase-0-SNAPSHOT
          (cd liquibase-dist/target/liquibase-0-SNAPSHOT && tar xfz $tarFile)
          (cd liquibase-dist && $scriptDir/package-install4j.sh 0-SNAPSHOT)
          mv liquibase-dist/target/liquibase-*-installer-* re-version/final

          ##Sign Files
          .github/util/sign-artifacts.sh re-version/final
          
          (cd re-version/final && zip liquibase-additional-0-SNAPSHOT.zip *.asc *.md5 *.sha1)
          rm re-version/final/*.asc
          rm re-version/final/*.md5
          rm re-version/final/*.sha1

      - name: Archive Packages
        uses: actions/upload-artifact@v3
        with:
          name: liquibase-test-packages
          path: re-version/final/*