Initial O3DE Flatpak packaging + Gitea CI

Repackage the official O3DE Linux .deb as a Flatpak and publish it as a static OSTree repo on the 'pages' branch for install via flatpak remote. - org.o3de.O3DE.yaml: flatpak-builder manifest (extracts the .deb into /app) - o3de-wrapper.sh: launcher that locates the versioned o3de binary at runtime - desktop + AppStream metadata under the app-id - scripts/: live version resolver and local build helper - .gitea/workflows/build-flatpak.yml: daily check -> build -> publish -> tag Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-15 09:29:55 +02:00
commit 5421db2960
10 changed files with 518 additions and 0 deletions
@@ -0,0 +1,139 @@
+name: Build and Publish O3DE Flatpak
+
+on:
+  schedule:
+    - cron: '0 2 * * *'          # daily at 02:00 - checks for a new O3DE release
+  workflow_dispatch:
+    inputs:
+      force:
+        description: 'Rebuild even if this version was already published'
+        type: boolean
+        default: false
+
+permissions:
+  contents: write
+
+jobs:
+  build:
+    # Adjust the label to match your registered act_runner. The runner needs a
+    # lot of free disk (O3DE is ~15-18 GB installed; the build needs ~2-3x that)
+    # and the container must be privileged so Flatpak's sandbox (bubblewrap) works.
+    runs-on: ubuntu-latest
+    container:
+      image: ubuntu:24.04
+      options: --privileged
+    steps:
+      - name: Install build dependencies
+        run: |
+          apt-get update
+          DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
+            ca-certificates curl git jq xz-utils zstd binutils \
+            flatpak flatpak-builder
+
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Resolve latest O3DE version
+        id: ver
+        run: |
+          chmod +x scripts/*.sh
+          eval "$(scripts/get-latest-version.sh)"
+          {
+            echo "version=$version"
+            echo "deb_url=$deb_url"
+            echo "deb_file=$deb_file"
+            echo "sha256=$sha256"
+          } >> "$GITHUB_OUTPUT"
+          echo "Latest O3DE: $version ($deb_file)"
+
+      - name: Decide whether to build
+        id: check
+        run: |
+          git config --global --add safe.directory "$GITHUB_WORKSPACE"
+          if [ "${{ inputs.force }}" = "true" ]; then
+            echo "build=true" >> "$GITHUB_OUTPUT"
+            echo "Force build requested."
+          elif git ls-remote --tags origin "refs/tags/v${{ steps.ver.outputs.version }}" | grep -q .; then
+            echo "build=false" >> "$GITHUB_OUTPUT"
+            echo "v${{ steps.ver.outputs.version }} already published - nothing to do."
+          else
+            echo "build=true" >> "$GITHUB_OUTPUT"
+            echo "New version v${{ steps.ver.outputs.version }} - building."
+          fi
+
+      - name: Install Flatpak runtime and SDK
+        if: steps.check.outputs.build == 'true'
+        run: |
+          flatpak remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo
+          flatpak install -y flathub org.freedesktop.Platform//24.08 org.freedesktop.Sdk//24.08
+
+      - name: Download O3DE .deb
+        if: steps.check.outputs.build == 'true'
+        run: |
+          curl -fL --retry 3 -o o3de.deb "${{ steps.ver.outputs.deb_url }}"
+          if [ -n "${{ steps.ver.outputs.sha256 }}" ]; then
+            echo "${{ steps.ver.outputs.sha256 }}  o3de.deb" | sha256sum -c -
+          else
+            echo "::warning::No published checksum; skipping verification."
+          fi
+
+      - name: Stamp version into AppStream metadata
+        if: steps.check.outputs.build == 'true'
+        run: |
+          sed -i -E \
+            "s#<release version=\"[^\"]*\" date=\"[^\"]*\">#<release version=\"${{ steps.ver.outputs.version }}\" date=\"$(date +%F)\">#" \
+            org.o3de.O3DE.metainfo.xml
+
+      - name: Build Flatpak into OSTree repo
+        if: steps.check.outputs.build == 'true'
+        run: |
+          flatpak-builder --disable-rofiles-fuse --force-clean \
+            --repo=repo --default-branch=stable \
+            build-dir org.o3de.O3DE.yaml
+          flatpak build-update-repo repo \
+            --title="O3DE (unofficial Flatpak)" \
+            --prune --prune-depth=1
+          # Free disk before publishing (the repo/ snapshot is all we still need).
+          rm -rf build-dir .flatpak-builder o3de.deb data
+
+      - name: Generate .flatpakrepo
+        if: steps.check.outputs.build == 'true'
+        run: |
+          BASE="${{ github.server_url }}/${{ github.repository }}/raw/branch/pages"
+          cat > repo/o3de.flatpakrepo <<EOF
+          [Flatpak Repo]
+          Title=O3DE (unofficial Flatpak)
+          Url=$BASE
+          Homepage=https://o3de.org/
+          Comment=Unofficial O3DE engine repackaged as a Flatpak
+          Description=Install the Open 3D Engine on any Linux distribution via Flatpak.
+          EOF
+
+      - name: Publish OSTree repo to the 'pages' branch
+        if: steps.check.outputs.build == 'true'
+        env:
+          # Prefer a personal access token (PUBLISH_TOKEN secret) with repo write
+          # access; fall back to the auto-provided Actions token.
+          TOKEN: ${{ secrets.PUBLISH_TOKEN != '' && secrets.PUBLISH_TOKEN || secrets.GITHUB_TOKEN }}
+        run: |
+          AUTH_URL="$(echo "${{ github.server_url }}" | sed "s#://#://${{ github.actor }}:${TOKEN}@#")/${{ github.repository }}.git"
+          rm -rf publish && mkdir publish && cd publish
+          git init -q -b pages
+          git config user.name "Gitea Actions"
+          git config user.email "actions@pc-heini.de"
+          cp -a ../repo/. .
+          touch .nojekyll
+          git add -A
+          git commit -q -m "O3DE Flatpak v${{ steps.ver.outputs.version }}"
+          # Force-push a single snapshot so the pages branch never accumulates history.
+          git push -f "$AUTH_URL" pages
+          cd ..
+
+      - name: Tag the published version
+        if: steps.check.outputs.build == 'true'
+        env:
+          TOKEN: ${{ secrets.PUBLISH_TOKEN != '' && secrets.PUBLISH_TOKEN || secrets.GITHUB_TOKEN }}
+        run: |
+          AUTH_URL="$(echo "${{ github.server_url }}" | sed "s#://#://${{ github.actor }}:${TOKEN}@#")/${{ github.repository }}.git"
+          git tag "v${{ steps.ver.outputs.version }}"
+          git push "$AUTH_URL" "v${{ steps.ver.outputs.version }}"