UUVPN/.github/workflows/build-ios.yml

name: Build iOS

on:
  push:
    branches:
      - develop
    tags:
      - 'v*'
  workflow_dispatch:
    inputs:
      build_debug:
        description: 'Build Debug IPA'
        required: false
        default: true
        type: boolean
      build_release:
        description: 'Build Release IPA'
        required: false
        default: false
        type: boolean

env:
  IOS_XCODE_VERSION: "16.0"
  IOS_DEPLOYMENT_TARGET: "15.0"

jobs:
  build-ios:
    name: Build iOS IPA
    runs-on: ubuntu
    env:
      RUNNER_TOOL_CACHE: /toolcache

    steps:
      - name: Install dependencies (Alpine)
        run: |
          # 添加 community 仓库
          echo "https://dl-cdn.alpinelinux.org/alpine/latest-stable/community" >> /etc/apk/repositories
          apk update

          # 安装基础依赖
          apk add --no-cache \
            wget \
            curl \
            git-lfs \
            bash \
            python3 \
            py3-pip \
            docker \
            openrc \
            sshpass \
            sshfs

          # 启动 docker 服务
          rc-service docker start || true
          docker --version || echo "Docker not available"

      - name: Check virtualization support
        run: |
          echo "========================================"
          echo "Checking virtualization support..."
          echo "========================================"

          # 检查 KVM
          ls -la /dev/kvm 2>/dev/null || echo "KVM device not found"
          cat /proc/cpuinfo | grep -E "vmx|svm" | head -5 || echo "No hardware virtualization detected"

          echo ""
          echo "Docker version:"
          docker --version || echo "Docker not found"

      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          submodules: recursive
          fetch-depth: 0

      - name: Setup Git LFS
        run: |
          git lfs install

          # 配置 LFS 认证
          git config --global lfs.url "https://admin:73ffc0f4391a26bb327fbed379d63b5a087e5f10@git.viaeon.com/admin/UUVPN.git/info/lfs"

          echo "Attempting LFS pull..."
          git lfs pull 2>&1 || echo "LFS pull failed, trying alternative methods..."

          # 如果 LFS pull 失败，尝试直接 fetch 和 checkout
          git lfs fetch origin 2>&1 || echo "LFS fetch failed"
          git lfs checkout 2>&1 || echo "LFS checkout failed"

      - name: Check if Libbox framework exists
        id: check_lfs
        run: |
          echo "========================================"
          echo "Checking LFS files..."
          echo "========================================"

          echo "Libbox.xcframework contents:"
          ls -la iOS-SwiftUI-Code/Libbox.xcframework/ 2>/dev/null || echo "Directory not found or empty"

          # 检查关键文件是否是真正的二进制文件（不是 LFS 指针）
          if [ -f "iOS-SwiftUI-Code/Libbox.xcframework/ios-arm64/Libbox.framework/Libbox" ]; then
            file_size=$(stat -c%s "iOS-SwiftUI-Code/Libbox.xcframework/ios-arm64/Libbox.framework/Libbox" 2>/dev/null || stat -f%z "iOS-SwiftUI-Code/Libbox.xcframework/ios-arm64/Libbox.framework/Libbox" 2>/dev/null)
            if [ "$file_size" -gt 100 ]; then
              echo "lfs_ready=true" >> $GITHUB_OUTPUT
              echo "✅ LFS files downloaded successfully (file size: ${file_size} bytes)"
            else
              echo "lfs_ready=false" >> $GITHUB_OUTPUT
              echo "❌ LFS files are pointers, not actual binaries"
            fi
          else
            echo "lfs_ready=false" >> $GITHUB_OUTPUT
            echo "❌ LFS files not available"
          fi

          exit 0

      - name: Pull Docker-OSX image
        if: ${{ steps.check_lfs.outputs.lfs_ready == 'true' }}
        run: |
          echo "Pulling Docker-OSX image..."
          docker pull sickcodes/docker-osx:latest || echo "Failed to pull image"

      - name: Start macOS VM (Sonoma)
        if: ${{ steps.check_lfs.outputs.lfs_ready == 'true' }}
        run: |
          echo "========================================"
          echo "Starting macOS Sonoma VM with Docker-OSX..."
          echo "========================================"
          echo ""
          echo "⚠️ 注意: 首次启动需要下载 macOS 安装镜像 (~15GB)"
          echo "⚠️ 这可能需要 30-60 分钟"
          echo ""

          # 使用正确的 Docker-OSX 启动命令
          # 注意: 需要 --device /dev/kvm 来传递 KVM 设备
          # 注意: 需要 -it 交互式模式
          # 注意: Sonoma 需要特殊的 CPU 配置

          # 检查 KVM 是否可用
          if [ -e "/dev/kvm" ]; then
            echo "✅ KVM is available"
            KVM_DEVICE="--device /dev/kvm"
          else
            echo "❌ KVM not available, will use QEMU emulation (very slow)"
            KVM_DEVICE=""
          fi

          # 启动 macOS Sonoma 容器
          # 使用 -d 后台运行，并设置环境变量
          docker run -d \
            --name macos-vm \
            $KVM_DEVICE \
            --privileged \
            -p 50922:10022 \
            -e RAM=8192 \
            -e SMP=4 \
            -e CPU='Haswell-noTSX' \
            -e CPUID_FLAGS='kvm=on,vendor=GenuineIntel,+invtsc,vmware-cpuid-freq=on' \
            -e GENERATE_UNIQUE=true \
            -e MASTER_PLIST_URL='https://raw.githubusercontent.com/sickcodes/osx-serial-generator/master/config-custom-sonoma.plist' \
            -e SHORTNAME=sonoma \
            -e DISPLAY=dummy \
            sickcodes/docker-osx:latest || echo "Failed to start VM"

          echo ""
          echo "VM started in background"
          echo "Waiting for macOS to boot (this may take several minutes)..."

          # 等待 SSH 可用
          max_wait=600  # 10 分钟
          wait_count=0
          while [ $wait_count -lt $max_wait ]; do
            if sshpass -p "user" ssh -o StrictHostKeyChecking=no -o ConnectTimeout=5 -p 50922 user@localhost "echo 'SSH ready'" 2>/dev/null; then
              echo "✅ SSH is ready!"
              break
            fi
            echo "Waiting for SSH... ($wait_count/$max_wait)"
            sleep 10
            wait_count=$((wait_count + 10))
          done

          if [ $wait_count -ge $max_wait ]; then
            echo "❌ SSH not available after $max_wait seconds"
            docker logs macos-vm 2>/dev/null | tail -50 || echo "No VM logs"
          fi

      - name: Check macOS VM status
        if: ${{ steps.check_lfs.outputs.lfs_ready == 'true' }}
        run: |
          echo "========================================"
          echo "macOS VM Status"
          echo "========================================"

          # 通过 SSH 连接到 macOS
          echo "Checking macOS via SSH..."

          # 尝试连接 SSH
          sshpass -p "user" ssh -o StrictHostKeyChecking=no -o ConnectTimeout=10 -p 50922 user@localhost "uname -a" 2>/dev/null || echo "Cannot connect via SSH"

          # 检查 xcodebuild
          sshpass -p "user" ssh -o StrictHostKeyChecking=no -o ConnectTimeout=10 -p 50922 user@localhost "xcodebuild -version" 2>/dev/null || echo "xcodebuild not found"

          # 检查容器日志
          echo ""
          echo "Container logs (last 30 lines):"
          docker logs macos-vm 2>/dev/null | tail -30 || echo "No VM logs"

      - name: Build iOS app (attempt)
        if: ${{ steps.check_lfs.outputs.lfs_ready == 'true' }}
        run: |
          echo "========================================"
          echo "Attempting iOS build..."
          echo "========================================"

          # 通过 SSHFS 挂载 macOS 文件系统，或者通过 SSH 直接执行命令
          # 默认用户: user, 密码: user

          # 检查 SSH 是否可用
          if sshpass -p "user" ssh -o StrictHostKeyChecking=no -o ConnectTimeout=10 -p 50922 user@localhost "echo 'SSH ready'" 2>/dev/null; then
            echo "✅ SSH connection available"

            # 将代码复制到 macOS
            echo "Copying code to macOS..."
            sshpass -p "user" scp -o StrictHostKeyChecking=no -P 50922 -r iOS-SwiftUI-Code user@localhost:/tmp/ 2>/dev/null || echo "Failed to copy code"

            # 检查代码是否存在
            sshpass -p "user" ssh -o StrictHostKeyChecking=no -p 50922 user@localhost "ls -la /tmp/iOS-SwiftUI-Code/" 2>/dev/null || echo "Code not copied"

            # 尝试构建
            echo ""
            echo "Building iOS app..."
            sshpass -p "user" ssh -o StrictHostKeyChecking=no -p 50922 user@localhost "
              cd /tmp/iOS-SwiftUI-Code || exit 1

              # 检查 xcodebuild
              xcodebuild -version || echo 'xcodebuild not found'

              # 尝试构建
              xcodebuild \
                -project uuvpn.xcodeproj \
                -scheme SFI \
                -sdk iphoneos \
                -configuration Debug \
                -derivedDataPath build \
                CODE_SIGN_IDENTITY='' \
                CODE_SIGNING_REQUIRED=NO \
                build 2>&1 || echo 'Build failed'
            " 2>&1 || echo "SSH command failed"

          else
            echo "❌ SSH not available, cannot build"
            echo ""
            echo "Docker-OSX 问题总结:"
            echo "1. 首次启动需要下载 macOS 安装镜像 (~15GB)"
            echo "2. 需要等待 macOS 安装完成 (可能需要 1 小时+)"
            echo "3. 需要手动安装 Xcode"
            echo ""
            echo "建议:"
            echo "- 使用 GitHub Actions 的托管 macOS runner (免费)"
            echo "- 或者预先准备好 macOS 虚拟机镜像"
          fi

      - name: Cleanup
        if: always()
        run: |
          echo "Cleaning up..."
          docker stop macos-vm 2>/dev/null || true
          docker rm macos-vm 2>/dev/null || true

      - name: Build summary
        run: |
          echo "========================================"
          echo "iOS Build Summary"
          echo "========================================"
          echo "LFS ready: ${{ steps.check_lfs.outputs.lfs_ready }}"
          echo ""
          if [ "${{ steps.check_lfs.outputs.lfs_ready }}" != "true" ]; then
            echo "❌ Cannot build iOS without Libbox.xcframework"
          else
            echo "✅ LFS files available"
            echo "Build was attempted - check logs above for results"
          fi