TheAnachronism/tt-rss-viewer
1
0
Fork 0
Code Issues Pull requests Projects Releases 5 Packages Wiki Activity Actions

Beta packaging workflow + release signing #66

New issue
Closed
opened 2026-08-04 19:41:07 +00:00 by TheAnachronism · 3 comments
TheAnachronism commented 2026-08-04 19:41:07 +00:00
Owner
Copy link

Parent

Implements release channel + signing/update trust from docs/1.0-beta-readiness.md (1.0 beta release readiness).

What to build

Retarget packaging so beta/<semver> tags publish a prerelease Forgejo release with asset tt-rss-viewer-beta-<semver>.apk, versionName from tag semver and versionCode from UTC epoch seconds, signed with a project-owned CI release keystore (APK Signature Scheme v3), not the runner debug key. Include short operator notes for key custody / loss / update rules. Installer-facing update path stays manual Forgejo Releases.

Acceptance criteria

  • Packaging workflow triggers on beta/* only (no new alpha/* cuts from this workflow)
  • Tag strip yields --build-name from semver; --build-number is UTC epoch seconds
  • Uploaded asset is named tt-rss-viewer-beta-<semver>.apk and release is prerelease: true
  • Release builds use a dedicated CI-injected release keystore (private key never committed); not debug signing
  • Produced APKs are v3-capable under that release key
  • Operator notes exist for key custody, loss ⇒ uninstall/reinstall risk, and update rules (same package id + rising versionCode + same cert)
  • Not required: in-app updater; live backup-key rotation lineage day one

Blocked by

  • #65 — Beta package identity
## Parent Implements release channel + signing/update trust from [`docs/1.0-beta-readiness.md`](../src/branch/master/docs/1.0-beta-readiness.md) ([1.0 beta release readiness](https://git.anachronis.dev/TheAnachronism/tt-rss-viewer/issues/41)). ## What to build Retarget packaging so **`beta/<semver>`** tags publish a **prerelease** Forgejo release with asset **`tt-rss-viewer-beta-<semver>.apk`**, versionName from tag semver and versionCode from UTC epoch seconds, signed with a **project-owned CI release keystore** (APK Signature Scheme **v3**), not the runner debug key. Include short **operator** notes for key custody / loss / update rules. Installer-facing update path stays manual Forgejo Releases. ## Acceptance criteria - [ ] Packaging workflow triggers on `beta/*` only (no new `alpha/*` cuts from this workflow) - [ ] Tag strip yields `--build-name` from semver; `--build-number` is UTC epoch seconds - [ ] Uploaded asset is named `tt-rss-viewer-beta-<semver>.apk` and release is `prerelease: true` - [ ] Release builds use a dedicated CI-injected release keystore (private key never committed); not debug signing - [ ] Produced APKs are v3-capable under that release key - [ ] Operator notes exist for key custody, loss ⇒ uninstall/reinstall risk, and update rules (same package id + rising versionCode + same cert) - [ ] Not required: in-app updater; live backup-key rotation lineage day one ## Blocked by - #65 — Beta package identity
TheAnachronism commented 2026-08-04 20:12:33 +00:00
Author
Owner
Copy link

Code landed on master (this commit) — leaving open until Forgejo Actions secrets are confirmed.

  • Replaced .forgejo/workflows/alpha-release.yml with .forgejo/workflows/beta-release.yml (beta/* only)
  • Asset tt-rss-viewer-beta-<semver>.apk, prerelease: true, tag semver → --build-name, UTC epoch → --build-number
  • Gradle release signing from android/key.properties with enableV2Signing + enableV3Signing (local verify: apksigner v2+v3, CN=tt-rss Viewer)
  • Operator notes: docs/release-signing.md

Still needed (operator): create repo secrets from ~/.local/share/tt-rss-viewer/forgejo-secrets.env:
ANDROID_RELEASE_KEYSTORE_BASE64, ANDROID_RELEASE_STORE_PASSWORD, ANDROID_RELEASE_KEY_PASSWORD, ANDROID_RELEASE_KEY_ALIAS (plus existing FORGEJO_TOKEN).

Code landed on `master` (this commit) — **leaving open** until Forgejo Actions secrets are confirmed. - Replaced `.forgejo/workflows/alpha-release.yml` with `.forgejo/workflows/beta-release.yml` (`beta/*` only) - Asset `tt-rss-viewer-beta-<semver>.apk`, `prerelease: true`, tag semver → `--build-name`, UTC epoch → `--build-number` - Gradle release signing from `android/key.properties` with `enableV2Signing` + `enableV3Signing` (local verify: apksigner v2+v3, CN=tt-rss Viewer) - Operator notes: `docs/release-signing.md` **Still needed (operator):** create repo secrets from `~/.local/share/tt-rss-viewer/forgejo-secrets.env`: `ANDROID_RELEASE_KEYSTORE_BASE64`, `ANDROID_RELEASE_STORE_PASSWORD`, `ANDROID_RELEASE_KEY_PASSWORD`, `ANDROID_RELEASE_KEY_ALIAS` (plus existing `FORGEJO_TOKEN`).
TheAnachronism commented 2026-08-04 20:12:52 +00:00
Author
Owner
Copy link

Code landed on master (82e97b3) — leaving open until Forgejo Actions secrets are confirmed.

  • Replaced alpha workflow with .forgejo/workflows/beta-release.yml (beta/* only)
  • Asset tt-rss-viewer-beta-<semver>.apk, prerelease: true, tag semver → --build-name, UTC epoch → --build-number
  • Gradle release signing from android/key.properties with v2+v3 (local verify: apksigner v2+v3, CN=tt-rss Viewer)
  • Operator notes: docs/release-signing.md

Still needed: create repo secrets from ~/.local/share/tt-rss-viewer/forgejo-secrets.env (ANDROID_RELEASE_*) plus existing FORGEJO_TOKEN.

Code landed on `master` (`82e97b3`) — **leaving open** until Forgejo Actions secrets are confirmed. - Replaced alpha workflow with `.forgejo/workflows/beta-release.yml` (`beta/*` only) - Asset `tt-rss-viewer-beta-<semver>.apk`, `prerelease: true`, tag semver → `--build-name`, UTC epoch → `--build-number` - Gradle release signing from `android/key.properties` with v2+v3 (local verify: apksigner v2+v3, CN=tt-rss Viewer) - Operator notes: `docs/release-signing.md` **Still needed:** create repo secrets from `~/.local/share/tt-rss-viewer/forgejo-secrets.env` (`ANDROID_RELEASE_*`) plus existing `FORGEJO_TOKEN`.
TheAnachronism commented 2026-08-04 21:10:09 +00:00
Author
Owner
Copy link

Verified: CI beta APK is signed with the project release keystore (v2+v3), not debug. Closing after successful signing smoke.

Verified: CI beta APK is signed with the project release keystore (v2+v3), not debug. Closing after successful signing smoke.
TheAnachronism removed their assignment 2026-08-06 14:35:36 +00:00
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
master
beta/0.0.4
beta/0.0.3
beta/0.0.2
beta/0.0.1
alpha/0.0.2
Labels
Clear labels   
needs-info
Waiting on reporter for more information

  
needs-triage
Maintainer needs to evaluate this issue

  
ready-for-agent
Fully specified, ready for an AFK agent

  
ready-for-human
Requires human implementation

  
wayfinder:grilling
HITL grilling/decision ticket

  
wayfinder:map
Wayfinder effort map

  
wayfinder:prototype
HITL prototype ticket

  
wayfinder:research
AFK research ticket

  
wayfinder:task
Unblocking manual task ticket

  
wontfix
Will not be actioned

No labels
needs-info
needs-triage
ready-for-agent
ready-for-human
wayfinder:grilling
wayfinder:map
wayfinder:prototype
wayfinder:research
wayfinder:task
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
TheAnachronism
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
TheAnachronism/tt-rss-viewer#66
No description provided.