#!/bin/bash # bash is required because we need bash's printf to guarantee a cross-platform # timestamp format. set -e set -x # make sure we're on a signed tag that matches the version name versionName=`sed -n 's,.*versionName="\([^"]*\)".*,\1,p' AndroidManifest.xml` describe=`git describe` if [ $versionName != $describe ]; then echo "WARNING: building $describe, which is not the latest release ($versionName)" else # make a clearer warning above by putting this here set +x echo "" echo "" echo "Checking git tag signature for release build:" gpg --list-key 9F0FE587374BBE81 || gpg --recv-key 9F0FE587374BBE81 gpg --list-key E9E28DEA00AA5556 || gpg --recv-key E9E28DEA00AA5556 gpg --list-key A801183E69B37AA9 || gpg --recv-key A801183E69B37AA9 git tag -v $versionName echo "" echo "" set -x fi if [ -z $ANDROID_HOME ]; then if [ -e ~/.android/bashrc ]; then . ~/.android/bashrc else echo "ANDROID_HOME must be set!" exit fi fi if [ -z $ANDROID_NDK_HOME ]; then if which ndk-build 2>&1 /dev/null; then ANDROID_NDK_HOME=`which ndk-build | sed 's,/ndk-build,,'` else echo "ANDROID_NDK_HOME not set and 'ndk-build' not in PATH" exit fi fi projectroot=`pwd` projectname=`sed -n 's,.*name="app_name">\(.*\)<.*,\1,p' res/values/strings.xml` # standardize timezone to reduce build differences export TZ=UTC TIMESTAMP=`printf '%(%Y-%m-%d %H:%M:%S)T' \ $(git log -n1 --format=format:%at)` git reset --hard git clean -fdx git submodule foreach git reset --hard git submodule foreach git clean -fdx git submodule sync git submodule foreach git submodule sync git submodule update --init --recursive if [ -e ~/.android/ant.properties ]; then cp ~/.android/ant.properties $projectroot/ else echo "skipping release ant.properties" fi faketime "$TIMESTAMP" $ANDROID_NDK_HOME/ndk-build #clean, build, clean and build! make -C external clean faketime "$TIMESTAMP" APP_ABI=armeabi make -C external make -C external clean faketime "$TIMESTAMP" APP_ABI=x86 make -C external ./setup-ant ant release apk=$projectroot/bin/$projectname-v$describe.apk # standardize timestamps in ZIP headers, requires strip-nondeterminism 0.014 if which strip-nondeterminism > /dev/null; then strip-nondeterminism -t zip -T $(git log -n1 --format=format:%at) $apk fi # echo the checksum to build logs sha256sum $apk if which gpg > /dev/null; then if [ -z "`gpg --list-secret-keys`" ]; then echo "No GPG secret keys found, not signing APK" else gpg --armor --detach-sign $apk fi else echo "gpg not found, not signing APK" fi