From ac89c106ecf9c765ea47bfe0428f504fce9cd9a6 Mon Sep 17 00:00:00 2001
From: osy <osy86@users.noreply.github.com>
Date: Wed, 19 Feb 2020 14:54:43 -0800
Subject: [PATCH] github: build IPA on release

---
 .github/workflows/build.yml | 24 ++++++++++++++++++++++++
 README.md                   |  7 ++++++-
 2 files changed, 30 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 9cfb0382..69461733 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -61,3 +61,27 @@ jobs:
         with:
           name: UTM-${{ matrix.arch }}
           path: build-utm
+  package:
+    name: Package
+    runs-on: ubuntu-latest
+    needs: build
+    if: github.event_name == 'release'
+    steps:
+      - name: Download Artifact
+        uses: actions/download-artifact@v1
+        with:
+          name: UTM-arm64
+      - name: Package IPA
+        run: |
+          mkdir Payload
+          mv UTM-arm64/UTM.xcarchive/Products/Applications/UTM.app Payload/UTM.app
+          zip -r UTM.zip Payload
+      - name: Upload Release Asset
+        uses: actions/upload-release-asset@v1.0.1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          upload_url: ${{ github.event.release.upload_url }}
+          asset_path: UTM.zip
+          asset_name: UTM.ipa
+          asset_content_type: application/octet-stream
diff --git a/README.md b/README.md
index f63b6147..6bd2ed94 100644
--- a/README.md
+++ b/README.md
@@ -40,7 +40,11 @@ If you want to build the dependencies yourself, it is highly recommended that yo
 
 Since iOS 13.3.1, it [appears Apple has stopped allowing free developer profiles to sign dylibs][2]. As a workaround, you can either spend $99/year on an Apple developer program or < $10/year on some third party iOS signing certificate (you can search for it online, do not ask for help with this).
 
-## Signing Existing Build
+## Signing Release
+
+If you want to sign an `ipa` from the [release page][3], there are a variety of ways. You can search online for information on sideloading IPA. One thing to note is if you are given the choice between signing for "development" or "distribution", you must chose "development". More specifically, you need the `get-task-allow` entitlement. Most signing services and tools already do this.
+
+## Signing Development Build
 
 If you want to sign an `xcarchive` such as from a [Github Actions][1] built artifact, you can use the following command:
 
@@ -60,3 +64,4 @@ UTM is distributed under the permissive Apache 2.0 license. However, it uses sev
 
   [1]: https://github.com/utmapp/UTM/actions?query=workflow%3ABuild
   [2]: https://github.com/flutter/flutter/issues/49504#issuecomment-581090664
+  [3]: https://github.com/utmapp/UTM/releases