Desktop migration

.github/release.yml

@@ -0,0 +1,27 @@
+# template for auto-generated release notes
+# https://docs.github.com/en/repositories/releasing-projects-on-github/automatically-generated-release-notes
+
+changelog:
+  # exclude:
+  #   labels:
+  #     - ignore-for-release
+  #   authors:
+  #     - octocat
+  categories:
+    - title: ✨ Major Features
+      labels:
+        - epic
+    - title: 🪲 Bug Fixes
+      labels:
+        - bug
+        - cs
+    - title: 📱 Team Apps
+      labels:
+        - team_apps
+    - title: 📶 Team SDK
+      labels:
+        - team_sdk
+    - title: 🛠️ Team Infra
+      labels:
+        - team_infra
+        - telemetry

.github/workflows/browerstack.yml

@@ -3,8 +3,7 @@ name: BrowserStack CI
 on:
   push:
     branches: [ ios-migrate ]
-  pull_request:
-    branches: [ ios-migrate ]
+
 env:
   GOPRIVATE: github.com/getlantern
 

.github/workflows/build-darwin.yml

@@ -0,0 +1,150 @@
+name: Build Darwin
+on:
+  workflow_call:
+    inputs:
+      version_file:
+        type: string
+        required: true
+      version:
+        type: string
+        required: true
+      prefix:
+        type: string
+        required: true
+
+env:
+  GOPRIVATE: github.com/getlantern
+  S3_BUCKET: lantern
+jobs:
+  build-darwin:
+    permissions:
+      contents: "read"
+      id-token: "write"
+    env:
+      version: ${{ inputs.version }}
+      version_file: ${{ inputs.version_file }}
+      prefix: ${{ inputs.prefix }}
+      AC_USERNAME: [email protected]
+      AC_PASSWORD: ${{ secrets.AC_PASSWORD }}
+    runs-on: macos-13
+    steps:
+    - uses: actions/checkout@v3
+      with:
+        lfs: true
+
+    - name: Pull LFS objects
+      run: git lfs pull
+
+    - name: Setup Go
+      uses: actions/setup-go@v3
+      with:
+        go-version: 1.21
+
+    - name: Setup Xcode version
+      uses: maxim-lobanov/setup-xcode@v1
+      with:
+        xcode-version: 14.3.1
+
+    - name: Granting private modules access
+      run: |
+        git config --global url."https://${{ secrets.GH_TOKEN }}:[email protected]/".insteadOf "https://github.com/"
+
+    - name: Repo access
+      run: |
+        mkdir /tmp/cache
+        echo "machine github.com login ${{ secrets.GH_TOKEN }} password x-oauth-basic" > /tmp/cache/.netrc
+        chmod 600 /tmp/cache/.netrc
+
+    - name: Setup Sentry CLI
+      uses: mathieu-bour/setup-sentry-cli@v1
+      with:
+        version: latest
+        token: ${{ SECRETS.SENTRY_TOKEN }} # from GitHub secrets
+        organization: getlantern
+        project: android
+
+    - name: Build liblantern.dylib
+      run: go build -buildmode=c-shared -o desktop/liblantern.dylib desktop/lib.go
+
+    - uses: actions/upload-artifact@v3
+      with:
+        name: libgo-mac-build
+        if-no-files-found: error
+        path: |
+          desktop/liblantern.dylib
+
+      # Install Flutter
+    - uses: subosito/flutter-action@v2
+      with:
+        flutter-version: '3.13.9'
+        channel: "stable"
+
+    - run: flutter --version
+
+    - name: Setup protoc
+      uses: arduino/setup-protoc@v2
+      with:
+        repo-token: ${{ secrets.GITHUB_TOKEN }}
+
+    - name: Activate protoc-gen-dart plugin
+      run: |
+        dart pub global activate protoc_plugin
+
+    - name: Build Flutter app
+      run: flutter build macos --release
+
+    - uses: actions/setup-node@v4
+      with:
+        node-version: latest
+
+    - name: Install darwin installer dependencies
+      run: |
+        npm install -g appdmg
+        brew tap joshdk/tap
+        brew install joshdk/tap/retry
+        brew install imagemagick
+
+    - name: Build darwin installer
+      run: |
+        echo $MACOS_CERTIFICATE | base64 --decode > certificate.p12
+        security create-keychain -p temporaty-password build.keychain
+        security default-keychain -s build.keychain
+        security unlock-keychain -p temporaty-password build.keychain
+        security import certificate.p12 -k build.keychain -P $MACOS_CERTIFICATE_PWD -T /usr/bin/codesign
+        security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k temporaty-password build.keychain
+        make package-darwin
+      env:
+        VERSION: "${{ env.version }}"
+        MACOS_CERTIFICATE: ${{ secrets.MACOS_CERT }}
+        MACOS_CERTIFICATE_PWD: ${{ secrets.MACOS_CERT_PASS }}
+
+    - uses: actions/setup-python@v4
+      with:
+        python-version: '3.8'
+    - name: Install s3cmd
+      run: pip install s3cmd
+
+    - name: Set s3cmd permissions
+      run: |
+        echo "[default]" > "$HOME/.s3cfg"
+        echo "access_key = ${{ secrets.AWS_ACCESS_KEY }}" >> "$HOME/.s3cfg"
+        echo "secret_key = ${{ secrets.AWS_SECRET_KEY }}" >> "$HOME/.s3cfg"
+
+    - uses: actions/upload-artifact@v3
+      with:
+        name: osx-build
+        retention-days: 2
+        path: |
+          lantern-installer.dmg
+
+    - name: Push binaries to s3
+      env:
+        VERSION: "${{ env.version }}"
+        DMG: "${{ env.prefix }}-${{ env.version }}.dmg"
+      run: |
+        mv lantern-installer.dmg "$DMG"
+        cp "$DMG" ${{ env.prefix }}.dmg
+        echo ${{ env.version }} > ${{ env.version_file }}
+        shasum -a 256 "$DMG" | cut -d " " -f 1 > "$DMG".sha256
+        cp "$DMG".sha256 ${{ env.prefix }}.dmg.sha256
+        s3cmd put --acl-public "$DMG" ${{ env.version_file }} "$DMG".sha256 ${{ env.prefix }}.dmg.sha256 ${{ env.prefix }}.dmg "s3://lantern"

.github/workflows/build-linux.yml

@@ -0,0 +1,119 @@
+name: Build Linux
+on:
+  workflow_call:
+    inputs:
+      version:
+        type: string
+        required: true
+      prefix:
+        type: string
+        required: true
+      dist-suffix: # "arm64" or "amd64"
+        type: string
+        required: true
+
+jobs:
+  build-linux:
+    permissions:
+      contents: "read"
+      id-token: "write"
+    env:
+      version: ${{ inputs.version }}
+      prefix: ${{ inputs.prefix }}
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v3
+      - name: Granting private modules access
+        run: git config --global url."https://${{ secrets.GH_TOKEN }}:[email protected]/".insteadOf "https://github.com/"
+      - name: Repo access
+        run: |
+          mkdir /tmp/cache
+          echo "machine github.com login ${{ secrets.GH_TOKEN }} password x-oauth-basic" > /tmp/cache/.netrc
+          chmod 600 /tmp/cache/.netrc
+
+      - name: Install dependencies
+        run: |
+          sudo apt-get install -y file build-essential pkg-config
+          sudo apt-get install -y libunwind-dev libstdc++-12-dev libgstreamer1.0-dev libgstreamer-plugins-base1.0-d cmake
+          sudo apt-get install -y libgtk-3-0 libblkid1 liblzma5
+          sudo apt-get install -y libpcap-dev libgtk-3-dev libayatana-appindicator3-dev ruby ruby-dev && sudo gem install bundler -v 2.2.26
+
+      - uses: actions/setup-go@v3
+        with:
+          go-version: 1.21
+
+      - name: Build
+        env:
+          VERSION: ${{ inputs.version }}
+        run: |
+          make linux-amd64
+
+      - uses: actions/setup-python@v4
+        with:
+          python-version: '3.8'
+
+      - name: Install s3cmd
+        run: pip install s3cmd
+
+      - name: Set s3cmd permissions
+        run: |
+          echo "[default]" > "$HOME/.s3cfg"
+          echo "access_key = ${{ secrets.AWS_ACCESS_KEY }}" >> "$HOME/.s3cfg"
+          echo "secret_key = ${{ secrets.AWS_SECRET_KEY }}" >> "$HOME/.s3cfg"
+
+        # Install Flutter
+      - uses: subosito/flutter-action@v2
+        with:
+          flutter-version: '3.13.9'
+          channel: "stable"
+
+      - run: flutter --version
+
+      - name: Setup protoc
+        uses: arduino/setup-protoc@v2
+        with:
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Activate protoc-gen-dart plugin
+        run: |
+          dart pub global activate protoc_plugin
+
+      - uses: seanmiddleditch/gha-setup-ninja@master
+
+      - name: Build Flutter app
+        run: flutter build linux
+
+      - name: Build installer
+        run: |
+          cp liblantern.so "build/linux/${{inputs.dist-suffix}}/release/bundle"
+          VERSION="${{ inputs.version }}" make "package-linux-${{inputs.dist-suffix}}"
+
+      - uses: actions/upload-artifact@v3
+        with:
+          name: linux-build
+          path: |
+            lantern_${{inputs.version}}_x64.deb
+
+      - name: Push binaries to s3
+
+        env:
+          VERSION: "${{ inputs.version }}"
+          dist_versionless: "${{inputs.prefix}}-64-bit.deb"
+          dist: "${{inputs.prefix}}-${{inputs.version}}-64-bit.deb"
+          update: "lantern_update_linux_x64-${{inputs.version}}.bz2"
+          dist_source: "lantern_${{inputs.version}}_x64.deb"
+          update_source: lantern_update_linux_x64.bz2
+
+        run: |
+          ls -l
+          mv ${{ env.dist_source }} ${{ env.dist }}
+          mv ${{ env.update_source }} ${{ env.update }}
+          cp ${{ env.dist }} ${{ env.dist_versionless }}
+
+          shasum -a 256 ${{ env.dist }} | cut -d " " -f 1 > ${{ env.dist }}.sha256
+          shasum -a 256 ${{ env.update }} | cut -d " " -f 1 > ${{ env.update }}.sha256
+          cp ${{ env.dist }}.sha256 ${{ env.dist_versionless }}.sha256
+          ls -l
+
+          s3cmd put --acl-public ${{ env.dist }} ${{ env.update }} ${{ env.update }}.sha256 ${{ env.dist }}.sha256 ${{ env.dist_versionless }}.sha256 ${{ env.dist_versionless }} "s3://lantern"