{"id":10021009,"date":"2025-09-23T21:23:09","date_gmt":"2025-09-23T13:23:09","guid":{"rendered":"https:\/\/itmax.cn\/?p=10021009"},"modified":"2025-09-23T21:23:09","modified_gmt":"2025-09-23T13:23:09","slug":"ios-%e4%bc%81%e4%b8%9a%e7%ad%be%e5%90%8d%e5%88%86%e5%8f%91%e5%85%a8%e6%b5%81%e7%a8%8b","status":"publish","type":"post","link":"https:\/\/itmax.cn\/?p=10021009","title":{"rendered":"iOS \u4f01\u4e1a\u7b7e\u540d\u5206\u53d1\u5168\u6d41\u7a0b"},"content":{"rendered":"

\u6700\u8fd1\u5728\u505a\u5185\u90e8\u5206\u53d1\u8fd9\u5757\uff0c\u5f88\u591a\u540c\u4e8b\u5361\u5728\u51e0\u4e2a\u5730\u65b9\uff1a\u5982\u4f55\u6b63\u786e\u4ece Xcode \/ CI \u6253\u5305\u51fa enterprise .ipa<\/code>\uff0c\u600e\u4e48\u751f\u6210 manifest.plist<\/code>\uff0c\u628a\u4e8c\u8005\u6258\u7ba1\u5728 HTTPS \u4e0a\uff0c\u7136\u540e\u901a\u8fc7 itms-services:\/\/<\/code> \u7ed9\u540c\u4e8b\u4e00\u952e\u5b89\u88c5\u3002\u4e0b\u9762\u628a\u6d41\u7a0b\u4ece\u5934\u5230\u5c3e\u8bb2\u6e05\u695a\u2014\u2014\u53e3\u8bed\u5316\u3001\u8d34\u8fd1\u5b9e\u64cd\uff0c\u5e76\u9644\u4e0a\u53ef\u8fd0\u884c\u7684 Demo\uff08Python + shell\uff09\uff0c\u80fd\u76f4\u63a5\u653e\u5230 CI \u91cc\u8dd1\u3002<\/p>\n

\u5148\u628a\u6574\u4e2a\u6d41\u7a0b\u634b\u4e00\u904d<\/h2>\n

\u4f60\u8981\u505a\u7684\u4e8b\u5176\u5b9e\u5c31\u662f\u4e09\u4ef6\uff1a<\/p>\n

    \n
  1. \u5728 Apple \u4f01\u4e1a\u8d26\u53f7\u91cc\u641e\u597d\u8bc1\u4e66\u548c\u63cf\u8ff0\u6587\u4ef6\uff08In-House\uff09\u3002<\/li>\n
  2. \u7528 Xcode \/ xcodebuild \u628a App \u6253\u5305\u5e76\u5bfc\u51fa enterprise .ipa<\/code>\u3002<\/li>\n
  3. \u628a .ipa<\/code> \u548c manifest.plist<\/code> \u653e\u5230 HTTPS \u53ef\u8bbf\u95ee\u7684\u4f4d\u7f6e\uff08S3\/NGINX\/CloudFront\uff09\uff0c\u7136\u540e\u901a\u8fc7 itms-services:\/\/?action=download-manifest&url=<manifest><\/code> \u7ed9\u8bbe\u5907\u5b89\u88c5\u3002<\/li>\n<\/ol>\n

    \u4e0b\u9762\u9010\u6b65\u628a\u6bcf\u4e00\u73af\u7684\u5b9e\u64cd\u3001\u5e38\u89c1\u5751\u3001\u4ee5\u53ca\u53ef\u8fd0\u884c\u4ee3\u7801\u7ed9\u4f60\u3002<\/p>\n

    \u5148\u51b3\u6761\u4ef6<\/h2>\n
      \n
    • \u516c\u53f8\u5fc5\u987b\u6709 Apple Enterprise Developer Program\uff08\u4f01\u4e1a\u8d26\u53f7\uff0c\u4e0d\u662f\u4e2a\u4eba\u6216\u516c\u53f8\u666e\u901a\u8d26\u53f7\uff09\u3002<\/li>\n
    • \u5f00\u53d1\u673a\u5668 \/ CI \u9700\u8981\u5b89\u88c5 Xcode\uff08\u6216\u80fd\u8dd1 xcodebuild \u7684 macOS \u673a\u5668\uff09\u3002<\/li>\n
    • \u4e00\u4e2a HTTPS \u57df\u540d\uff08\u5fc5\u987b\u662f\u53ef\u4fe1 CA \u7684 TLS\uff09\uff0c\u6216\u8005\u4f7f\u7528 S3 + CloudFront \u5e76\u7ed1\u5b9a\u8bc1\u4e66\u3002iOS \u4f1a\u62d2\u7edd\u4e0d\u53d7\u4fe1\u4efb\u8bc1\u4e66\u3002<\/li>\n
    • \u63a8\u8350\u628a\u8bc1\u4e66\u3001\u79c1\u94a5\u3001\u63cf\u8ff0\u6587\u4ef6\u7b49\u7528\u5b89\u5168\u65b9\u5f0f\u5b58\u653e\u5728 CI \u7684 secret \u7ba1\u7406\u91cc\uff0c\u4e0d\u8981\u660e\u6587\u5728\u811a\u672c\u91cc\u3002<\/li>\n<\/ul>\n

      \u8bc1\u4e66\u4e0e\u63cf\u8ff0\u6587\u4ef6<\/h2>\n
        \n
      1. \n

        \u5728 Apple \u4f01\u4e1a\u8d26\u53f7\u91cc\u521b\u5efa In-House\uff08Enterprise\uff09\u5206\u53d1\u8bc1\u4e66\uff1a<\/p>\n

          \n
        • \u5728\u5f00\u53d1\u8005\u8d26\u53f7\u9875\u9762 \u2192 Certificates \u2192 Add \u2192 \u9009\u62e9 \u201cIn-House and Ad Hoc\u201d \u2192 \u4e0a\u4f20 CSR\uff08Certificate Signing Request\uff09 \u2192 \u4e0b\u8f7d\u8bc1\u4e66 .cer<\/code>\u3002<\/li>\n
        • \u628a\u8bc1\u4e66\u548c\u5bf9\u5e94\u79c1\u94a5\u5bfc\u5165\u5230 macOS Keychain\uff08\u6216\u5728 CI \u4e0a\u751f\u6210 .p12<\/code> \u5e76\u5bfc\u5165\uff09\u3002<\/li>\n<\/ul>\n<\/li>\n
        • \n

          \u521b\u5efa App ID\uff08Bundle ID\uff09\u5e76\u751f\u6210 In-House provisioning profile\uff1a<\/p>\n

            \n
          • Apple Developer \u2192 Identifiers \u2192 \u65b0\u589e App ID\uff08\u5982 com.example.app<\/code>\uff09\u3002<\/li>\n
          • Profiles \u2192 \u65b0\u5efa In-House Profile\uff0c\u9009\u62e9\u4e0a\u4e00\u6b65\u7684 App ID \u548c In-House \u8bc1\u4e66 \u2192 \u4e0b\u8f7d .mobileprovision<\/code>\u3002<\/li>\n<\/ul>\n<\/li>\n
          • \u5728\u672c\u5730\u6216 CI \u4e0a\u5bfc\u5165\u8bc1\u4e66\uff08\u793a\u4f8b\u547d\u4ee4\uff0cCI \u4e0a\u7528 secrets\uff09\uff1a<\/li>\n<\/ol>\n
            # \u5047\u8bbe\u4f60\u6709 base64 \u7f16\u7801\u7684 p12 \u548c\u5bc6\u7801\uff08CI secrets\uff09\necho "$P12_BASE64" | base64 --decode > cert.p12\nsecurity create-keychain -p "$KEYCHAIN_PW" build.keychain\nsecurity import cert.p12 -k ~\/Library\/Keychains\/build.keychain -P "$P12_PWD" -T \/usr\/bin\/codesign\nsecurity list-keychains -s ~\/Library\/Keychains\/build.keychain\nsecurity unlock-keychain -p "$KEYCHAIN_PW" ~\/Library\/Keychains\/build.keychain\n\n# \u5141\u8bb8 codesign \u4f7f\u7528\u79c1\u94a5\uff08CI \u5e38\u89c1\u64cd\u4f5c\uff09\nsecurity set-key-partition-list -S apple-tool:,apple: -s -k "$KEYCHAIN_PW" ~\/Library\/Keychains\/build.keychain<\/code><\/pre>\n
            \u63d0\u793a\uff1a\u5982\u679c\u4e0d\u505a set-key-partition-list<\/code>\uff0cCI \u4e0a codesign<\/code> \u53ef\u80fd\u4f1a\u62a5\u201cnot permitted to use private key\u201d\u4e4b\u7c7b\u7684\u9519\u8bef\u3002<\/p><\/blockquote>\n
            \u4ece Xcode \u5bfc\u51fa enterprise IPA\uff08GUI \/ CLI \u90fd\u7ed9\u4f60\uff09<\/h2>\n
            GUI\uff08Xcode\uff09<\/h2>\n
              \n
            • \u6253\u5f00\u9879\u76ee \u2192 Product \u2192 Archive\u3002<\/li>\n
            • \u5728 Organizer \u91cc\u9009\u62e9\u65b0\u751f\u6210\u7684 archive \u2192 Distribute App \u2192 Enterprise \u2192 \u9009\u62e9\u6b63\u786e\u7684 provisioning profile \u2192 Export \u2192 \u5f97\u5230 .ipa<\/code>\u3002<\/li>\n<\/ul>\n
              CLI\uff08xcodebuild\uff0c\u9002\u5408 CI\uff09<\/h2>\n
                \n
              1. \u5148 archive\uff1a<\/li>\n<\/ol>\n
                xcodebuild -workspace MyApp.xcworkspace \/\n  -scheme MyApp \/\n  -configuration Release \/\n  -archivePath \/tmp\/MyApp.xcarchive \/\n  clean archive<\/code><\/pre>\n
                  \n
                1. \u7136\u540e\u5bfc\u51fa .ipa<\/code>\uff0c\u9700\u8981\u4e00\u4e2a exportOptions.plist<\/code>\uff0c\u793a\u4f8b\u653e\u5728\u4e0b\u9762\uff1a
                  exportOptions.plist<\/code><\/li>\n<\/ol>\n
                  <?xml version="1.0" encoding="UTF-8"?>\n<!DOCTYPE plist PUBLIC "-\/\/Apple Computer\/\/DTD PLIST 1.0\/\/EN"\n  "http:\/\/www.apple.com\/DTDs\/PropertyList-1.0.dtd">\n<plist version="1.0">\n<dict>\n  <key>method<\/key>\n  <string>enterprise<\/string>\n  <key>teamID<\/key>\n  <string>YOUR_TEAM_ID<\/string>\n  <key>provisioningProfiles<\/key>\n  <dict>\n    <key>com.example.myapp<\/key>\n    <string>My Enterprise Provisioning Profile Name<\/string>\n  <\/dict>\n<\/dict>\n<\/plist><\/code><\/pre>\n
                  \u5bfc\u51fa\u547d\u4ee4\uff1a<\/p>\n
                  xcodebuild -exportArchive \/\n  -archivePath \/tmp\/MyApp.xcarchive \/\n  -exportOptionsPlist exportOptions.plist \/\n  -exportPath \/tmp\/MyAppExport\n# \/tmp\/MyAppExport \u4f1a\u5305\u542b MyApp.ipa<\/code><\/pre>\n
                  Fastlane\uff08\u63a8\u8350 CI\uff09<\/h2>\n
                  \u5728 Fastfile<\/code> \u4e2d\u4f7f\u7528 gym<\/code>\uff08\u793a\u4f8b\uff09\uff1a<\/p>\n
                  lane :enterprise_build do\n  match(type: "enterprise") # \u6216\u8005\u4f7f\u7528\u624b\u52a8\u7ba1\u7406\u7684\u8bc1\u4e66\n  gym(\n    workspace: "MyApp.xcworkspace",\n    scheme: "MyApp",\n    export_method: "enterprise",\n    export_options: {\n      provisioningProfiles: { "com.example.myapp" => "My Enterprise Provisioning Profile Name" }\n    }\n  )\nend<\/code><\/pre>\n
                  manifest.plist\uff1a\u683c\u5f0f\u3001\u793a\u4f8b\u4e0e\u751f\u6210<\/h2>\n
                  iOS \u5185\u90e8\u5206\u53d1\u4e0d\u4f1a\u76f4\u63a5\u7528 .ipa<\/code> \u94fe\u63a5\u5b89\u88c5\uff0c\u800c\u662f\u901a\u8fc7 manifest.plist<\/code> \u6307\u5b9a .ipa<\/code> \u7684 URL \u4e0e\u5143\u6570\u636e\u3002\u4e0b\u9762\u7ed9\u6807\u51c6\u6a21\u677f\u5e76\u9010\u5b57\u6bb5\u89e3\u91ca\u3002<\/p>\n
                  manifest.plist<\/code>\uff08\u793a\u4f8b\uff09<\/p>\n
                  <?xml version="1.0" encoding="UTF-8"?>\n<!DOCTYPE plist PUBLIC "-\/\/Apple\/\/DTD PLIST 1.0\/\/EN"\n   "http:\/\/www.apple.com\/DTDs\/PropertyList-1.0.dtd">\n<plist version="1.0">\n<dict>\n  <key>items<\/key>\n  <array>\n    <dict>\n      <key>assets<\/key>\n      <array>\n        <dict>\n          <key>kind<\/key>\n          <string>software-package<\/string>\n          <key>url<\/key>\n          <string>https:\/\/dl.company.com\/apps\/MyApp-1.2.3.ipa<\/string>\n        <\/dict>\n      <\/array>\n      <key>metadata<\/key>\n      <dict>\n        <key>bundle-identifier<\/key>\n        <string>com.example.myapp<\/string>\n        <key>bundle-version<\/key>\n        <string>1.2.3<\/string>\n        <key>kind<\/key>\n        <string>software<\/string>\n        <key>title<\/key>\n        <string>MyApp<\/string>\n      <\/dict>\n    <\/dict>\n  <\/array>\n<\/dict>\n<\/plist><\/code><\/pre>\n
                  \u5b57\u6bb5\u8981\u70b9\u603b\u7ed3\uff1a<\/p>\n
                    \n
                  • url<\/code> \u5fc5\u987b\u662f HTTPS \u4e14\u80fd\u76f4\u63a5\u8bbf\u95ee .ipa<\/code>\uff08\u8fd4\u56de 200\uff0c\u4e0d\u8981\u8fd4\u56de HTML \u767b\u5f55\u9875\u6216 302 \u91cd\u5b9a\u5411\uff09\u3002<\/li>\n
                  • bundle-identifier<\/code> \u5fc5\u987b\u4e0e .ipa<\/code> \u91cc Info.plist<\/code> \u7684 CFBundleIdentifier<\/code> \u4e00\u81f4\u3002<\/li>\n
                  • bundle-version<\/code> \u8981\u5339\u914d CFBundleShortVersionString<\/code>\uff08\u5426\u5219\u53ef\u80fd\u51fa\u73b0\u7248\u672c\u4e0d\u4e00\u81f4\u95ee\u9898\uff09\u3002<\/li>\n<\/ul>\n
                    \u53ef\u8fd0\u884c Demo<\/h2>\n
                    Python \u811a\u672c\u81ea\u52a8\u751f\u6210 manifest.plist<\/p>\n
                    \u628a\u8fd9\u4e2a\u811a\u672c\u653e\u5230\u4f60\u7684\u673a\u5668\u6216 CI \u4e0a\u3002\u5b83\u4f1a\u628a\u4f60\u63d0\u4f9b\u7684 .ipa<\/code> URL\u3001bundle id\u3001version\u3001title \u5199\u6210 manifest.plist<\/code>\u3002<\/p>\n
                    gen_manifest.py<\/code><\/p>\n
                    #!\/usr\/bin\/env python3\n"""\ngen_manifest.py\nGenerate manifest.plist for iOS enterprise distribution.\n\nUsage:\npython3 gen_manifest.py \/\n  --ipa-url https:\/\/dl.company.com\/apps\/MyApp-1.2.3.ipa \/\n  --bundle-id com.example.myapp \/\n  --version 1.2.3 \/\n  --title "MyApp" \/\n  --output manifest.plist\n"""\nimport argparse\nimport plistlib\nfrom pathlib import Path\n\ndef build_manifest(ipa_url: str, bundle_id: str, version: str, title: str):\n    # Build the dict matching the required plist structure\n    manifest = {\n        "items": [\n            {\n                "assets": [\n                    {\n                        "kind": "software-package",\n                        "url": ipa_url\n                    }\n                ],\n                "metadata": {\n                    "bundle-identifier": bundle_id,\n                    "bundle-version": version,\n                    "kind": "software",\n                    "title": title\n                }\n            }\n        ]\n    }\n    return manifest\n\ndef main():\n    parser = argparse.ArgumentParser(description="Generate manifest.plist for enterprise distribution")\n    parser.add_argument("--ipa-url", required=True, help="HTTPS URL to the .ipa")\n    parser.add_argument("--bundle-id", required=True, help="Bundle ID, e.g. com.example.myapp")\n    parser.add_argument("--version", required=True, help="App version, e.g. 1.2.3")\n    parser.add_argument("--title", required=True, help="App title")\n    parser.add_argument("--output", default="manifest.plist", help="Output filename")\n    args = parser.parse_args()\n\n    manifest = build_manifest(args.ipa_url, args.bundle_id, args.version, args.title)\n    out_path = Path(args.output)\n    with out_path.open("wb") as f:\n        plistlib.dump(manifest, f)\n    print(f"Generated {out_path.resolve()}")\n\nif __name__ == "__main__":\n    main()<\/code><\/pre>\n
                    \u4f7f\u7528\u793a\u4f8b<\/h3>\n
                    python3 gen_manifest.py \/\n  --ipa-url "https:\/\/dl.company.com\/apps\/MyApp-1.2.3.ipa" \/\n  --bundle-id com.example.myapp \/\n  --version 1.2.3 \/\n  --title "MyApp" \/\n  --output manifest.plist<\/code><\/pre>\n
                    \u811a\u672c\u4f1a\u751f\u6210 manifest.plist<\/code>\uff0c\u63a5\u4e0b\u6765\u628a\u5b83\u548c .ipa<\/code> \u90fd\u4e0a\u4f20\u5230 HTTPS \u670d\u52a1\uff08S3\/CloudFront \u6216\u81ea\u5efa nginx\uff09\uff0c\u7136\u540e\u62fc\u88c5\u5b89\u88c5\u94fe\u63a5\uff1a<\/p>\n
                    itms-services:\/\/?action=download-manifest&url=https:\/\/dl.company.com\/apps\/manifest.plist<\/code><\/pre>\n
                    CI \u96c6\u6210\u793a\u4f8b\u811a\u672c<\/h2>\n
                    CI \u96c6\u6210\u793a\u4f8b\u811a\u672c\uff08\u6253\u5305 \u2192 \u4e0a\u4f20 \u2192 \u751f\u6210 manifest \u2192 \u8f93\u51fa\u5b89\u88c5\u94fe\u63a5\uff09<\/p>\n
                    \u4e0b\u9762\u662f\u4e00\u4e2a\u7b80\u5355\u7684 CI shell \u811a\u672c\uff08\u5047\u8bbe\u4f60\u5df2\u7ecf\u6709 .ipa<\/code> \u5728 build\/MyApp.ipa<\/code>\uff09\uff0c\u5e76\u4e14\u4f7f\u7528 AWS CLI \u4e0a\u4f20\u5230 S3\u3002\u9700\u8981\u5728 CI \u73af\u5883\u4e2d\u914d\u7f6e AWS_ACCESS_KEY_ID<\/code> \/ AWS_SECRET_ACCESS_KEY<\/code> \/ AWS_DEFAULT_REGION<\/code>\u3002<\/p>\n
                    ci_publish.sh<\/code><\/p>\n
                    #!\/usr\/bin\/env bash\nset -euo pipefail\n\nIPA_PATH=".\/build\/MyApp.ipa"\nS3_BUCKET="s3:\/\/your-bucket\/path"\nDIST_BASE="https:\/\/dl.example.com\/path"  # CloudFront domain or https domain to serve files\n\n# Upload .ipa\naws s3 cp "$IPA_PATH" "${S3_BUCKET}\/MyApp-1.2.3.ipa" \/\n  --acl public-read --content-type application\/octet-stream\n\n# Generate manifest locally (use python script)\npython3 gen_manifest.py \/\n  --ipa-url "${DIST_BASE}\/MyApp-1.2.3.ipa" \/\n  --bundle-id com.example.myapp \/\n  --version 1.2.3 \/\n  --title "MyApp" \/\n  --output manifest.plist\n\n# Upload manifest\naws s3 cp manifest.plist "${S3_BUCKET}\/manifest.plist" \/\n  --acl public-read --content-type application\/xml\n\necho "Published. Install link:"\necho "itms-services:\/\/?action=download-manifest&url=${DIST_BASE}\/manifest.plist"<\/code><\/pre>\n
                    \u628a\u8fd9\u4e2a\u811a\u672c\u653e\u5230\u4f60\u7684 CI\uff08GitLab CI \/ Jenkins \/ GitHub Actions\uff09\u91cc\uff0c\u8dd1\u5b8c\u4f1a\u8f93\u51fa\u6700\u7ec8\u5b89\u88c5\u94fe\u63a5\uff0c\u53d1\u7ed9 QA \u5373\u53ef\u3002<\/p>\n
                    \u6258\u7ba1\u5efa\u8bae\uff08S3 + CloudFront \/ nginx \u793a\u4f8b\uff09<\/h2>\n