summaryrefslogtreecommitdiffhomepage
path: root/.github
diff options
context:
space:
mode:
authorAlbin <albin@mullvad.net>2025-07-15 15:36:58 +0200
committerAlbin <albin@mullvad.net>2025-07-15 15:36:58 +0200
commit750c02c8ade320e58edcc98985b75dd8f98c55af (patch)
tree680533ab567b2d18d572a07d3d606efa74c7368f /.github
parent0275625cf298f10972af578db9d7d79e9bc4a441 (diff)
downloadmullvadvpn-750c02c8ade320e58edcc98985b75dd8f98c55af.tar.xz
mullvadvpn-750c02c8ade320e58edcc98985b75dd8f98c55af.zip
Add nix devshell actions build
This commit adds a job that runs a nix devshell build as part of the reproducible workflow, however at this point it will NOT check for reproducibility but rather just print the checksum of the build. This is because there are some remaining reproducibility issues that need to be addressed.
Diffstat (limited to '.github')
-rw-r--r--.github/workflows/android-reproducible-builds.yml33
1 files changed, 32 insertions, 1 deletions
diff --git a/.github/workflows/android-reproducible-builds.yml b/.github/workflows/android-reproducible-builds.yml
index 0650dfd687..9b9eb9504c 100644
--- a/.github/workflows/android-reproducible-builds.yml
+++ b/.github/workflows/android-reproducible-builds.yml
@@ -136,10 +136,41 @@ jobs:
if-no-files-found: error
retention-days: 7
+ build-using-nix:
+ name: Build fdroid variant using nix
+ runs-on: ubuntu-24.04
+ needs: set-up-env
+ steps:
+ - name: Checkout repository
+ uses: actions/checkout@v4
+ with:
+ ref: ${{ needs.set-up-env.outputs.COMMIT_HASH }}
+
+ - name: Fetch submodules and tags
+ run: |
+ git submodule update --init wireguard-go-rs/libwg/wireguard-go
+ git fetch --no-tags origin 'refs/tags/android/*:refs/tags/android/*'
+
+ - uses: cachix/install-nix-action@v31
+ with:
+ nix_path: nixpkgs=channel:nixos-unstable
+
+ - name: Build app
+ working-directory: android
+ run: nix develop -c ./gradlew assembleOssProdFdroid
+
+ - name: Upload apks
+ uses: actions/upload-artifact@v4
+ with:
+ name: apk-nix
+ path: android/app/build/outputs/apk/ossProd/fdroid/app-oss-prod-fdroid-unsigned.apk
+ if-no-files-found: error
+ retention-days: 7
+
compare-builds:
name: Check builds
runs-on: ubuntu-latest
- needs: [build-using-container, build-using-fdroidserver]
+ needs: [build-using-container, build-using-fdroidserver, build-using-nix]
steps:
- name: Download artifacts
uses: actions/download-artifact@v4