Merge commit '7621e2f8dec938cf48181c8b10afc9b01f444e68' into beta

buildbox/.gitignore

@@ -0,0 +1,2 @@
+transient-data
+

buildbox/build-telegram-next.sh

@@ -0,0 +1,141 @@
+#!/bin/bash
+
+set -e
+
+MACOS_VERSION="12"
+XCODE_VERSION="13.2.1"
+GUEST_SHELL="bash"
+
+if [ -z "$VIRTUALBUILD_HOST" ]; then
+	echo "VIRTUALBUILD_HOST is not defined"
+	exit 1
+fi
+
+VM_BASE_NAME="macos$(echo $MACOS_VERSION | sed -e 's/\.'/_/g)-Xcode$(echo $XCODE_VERSION | sed -e 's/\.'/_/g)"
+echo "Base VM: \"$VM_BASE_NAME\""
+
+if [ -z "$BAZEL" ]; then
+	echo "BAZEL is not defined"
+	exit 1
+fi
+
+if [ ! -f "$BAZEL" ]; then
+	echo "bazel not found at $BAZEL"
+	exit 1
+fi
+
+BUILDBOX_DIR="buildbox"
+
+mkdir -p "$BUILDBOX_DIR/transient-data"
+
+rm -f "tools/bazel"
+cp "$BAZEL" "tools/bazel"
+
+BUILD_CONFIGURATION="$1"
+
+if [ "$BUILD_CONFIGURATION" == "hockeyapp" ] || [ "$BUILD_CONFIGURATION" == "appcenter-experimental" ] || [ "$BUILD_CONFIGURATION" == "appcenter-experimental-2" ] || [ "$BUILD_CONFIGURATION" == "App Store-development" ]; then
+	CODESIGNING_SUBPATH="$BUILDBOX_DIR/transient-data/telegram-codesigning/codesigning"
+elif [ "$BUILD_CONFIGURATION" == "appstore" ]; then
+	CODESIGNING_SUBPATH="$BUILDBOX_DIR/transient-data/telegram-codesigning/codesigning"
+elif [ "$BUILD_CONFIGURATION" == "verify" ]; then
+	CODESIGNING_SUBPATH="build-system/fake-codesigning"
+else
+	echo "Unknown configuration $1"
+	exit 1
+fi
+
+COMMIT_COMMENT="$(git log -1 --pretty=%B)"
+case "$COMMIT_COMMENT" in 
+  *"[nocache]"*)
+	export BAZEL_HTTP_CACHE_URL=""
+    ;;
+esac
+
+COMMIT_ID="$(git rev-parse HEAD)"
+COMMIT_AUTHOR=$(git log -1 --pretty=format:'%an')
+if [ -z "$2" ]; then
+	COMMIT_COUNT=$(git rev-list --count HEAD)
+	BUILD_NUMBER_OFFSET="$(cat build_number_offset)"
+	COMMIT_COUNT="$(($COMMIT_COUNT+$BUILD_NUMBER_OFFSET))"
+	BUILD_NUMBER="$COMMIT_COUNT"
+else
+	BUILD_NUMBER="$2"
+fi
+
+BASE_DIR=$(pwd)
+
+if [ "$BUILD_CONFIGURATION" == "hockeyapp" ] || [ "$BUILD_CONFIGURATION" == "appcenter-experimental" ] || [ "$BUILD_CONFIGURATION" == "appcenter-experimental-2" ] || [ "$BUILD_CONFIGURATION" == "appstore" ] || [ "$BUILD_CONFIGURATION" == "appstore-development" ]; then
+	if [ ! `which generate-configuration.sh` ]; then
+		echo "generate-configuration.sh not found in PATH $PATH"
+		exit 1
+	fi
+
+	mkdir -p "$BASE_DIR/$BUILDBOX_DIR/transient-data/telegram-codesigning"
+	mkdir -p "$BASE_DIR/$BUILDBOX_DIR/transient-data/build-configuration"
+
+	case "$BUILD_CONFIGURATION" in
+		"hockeyapp"|"appcenter-experimental"|"appcenter-experimental-2")
+			generate-configuration.sh internal release "$BASE_DIR/$BUILDBOX_DIR/transient-data/telegram-codesigning" "$BASE_DIR/$BUILDBOX_DIR/transient-data/build-configuration"
+			;;
+
+		"appstore")
+			generate-configuration.sh appstore release "$BASE_DIR/$BUILDBOX_DIR/transient-data/telegram-codesigning" "$BASE_DIR/$BUILDBOX_DIR/transient-data/build-configuration"
+			;;
+
+		"appstore-development")
+			generate-configuration.sh appstore development "$BASE_DIR/$BUILDBOX_DIR/transient-data/telegram-codesigning" "$BASE_DIR/$BUILDBOX_DIR/transient-data/build-configuration"
+			;;
+
+		*)
+			echo "Unknown build configuration $BUILD_CONFIGURATION"
+			exit 1
+			;;
+	esac
+elif [ "$BUILD_CONFIGURATION" == "verify" ]; then
+	mkdir -p "$BASE_DIR/$BUILDBOX_DIR/transient-data/telegram-codesigning"
+	mkdir -p "$BASE_DIR/$BUILDBOX_DIR/transient-data/build-configuration"
+
+	cp -R build-system/fake-codesigning/* "$BASE_DIR/$BUILDBOX_DIR/transient-data/telegram-codesigning/"
+	cp -R build-system/example-configuration/* "$BASE_DIR/$BUILDBOX_DIR/transient-data/build-configuration/"
+fi
+
+if [ ! -d "$CODESIGNING_SUBPATH" ]; then
+	echo "$CODESIGNING_SUBPATH does not exist"
+	exit 1
+fi
+
+SOURCE_DIR=$(basename "$BASE_DIR")
+rm -f "$BUILDBOX_DIR/transient-data/source.tar"
+set -x
+find . -type f -a -not -regex "\\." -a -not -regex ".*\\./git" -a -not -regex ".*\\./git/.*" -a -not -regex "\\./bazel-bin" -a -not -regex "\\./bazel-bin/.*" -a -not -regex "\\./bazel-out" -a -not -regex "\\./bazel-out/.*" -a -not -regex "\\./bazel-testlogs" -a -not -regex "\\./bazel-testlogs/.*" -a -not -regex "\\./bazel-telegram-ios" -a -not -regex "\\./bazel-telegram-ios/.*" -a -not -regex "\\./buildbox" -a -not -regex "\\./buildbox/.*" -a -not -regex "\\./buck-out" -a -not -regex "\\./buck-out/.*" -a -not -regex "\\./\\.buckd" -a -not -regex "\\./\\.buckd/.*" -a -not -regex "\\./build" -a -not -regex "\\./build/.*" -print0 | tar cf "$BUILDBOX_DIR/transient-data/source.tar" --null -T -
+
+PROCESS_ID="$$"
+
+initialization_params="$VM_BASE_NAME"
+initialization_params="$initialization_params&watchpid=$PROCESS_ID"
+
+ssh_credentials=$(curl --fail --insecure "https://$VIRTUALBUILD_HOST/run-image?name=$initialization_params")
+
+ssh_username=$(echo "$ssh_credentials" | python3 -c "import sys, json; print(json.load(sys.stdin)['sshCredentials']['username'])")
+ssh_host=$(echo "$ssh_credentials" | python3 -c "import sys, json; print(json.load(sys.stdin)['sshCredentials']['host'])")
+ssh_privateKey=$(echo "$ssh_credentials" | python3 -c "import sys, json; print(json.load(sys.stdin)['sshCredentials']['privateKey'])")
+
+ssh_privateKeyFile=$(mktemp)
+echo "$ssh_privateKey" | base64 --decode > "$ssh_privateKeyFile"
+
+scp -i "$ssh_privateKeyFile" -o LogLevel=ERROR -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -pr "$CODESIGNING_SUBPATH" $ssh_username@"$ssh_host":codesigning_data
+scp -i "$ssh_privateKeyFile" -o LogLevel=ERROR -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -pr "$BASE_DIR/$BUILDBOX_DIR/transient-data/build-configuration" $ssh_username@"$ssh_host":telegram-configuration
+
+scp -i "$ssh_privateKeyFile" -o LogLevel=ERROR -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -pr "$BUILDBOX_DIR/guest-build-telegram.sh" "$BUILDBOX_DIR/transient-data/source.tar" $ssh_username@"$ssh_host":
+
+ssh -i "$ssh_privateKeyFile" -o LogLevel=ERROR -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null $ssh_username@"$ssh_host" -o ServerAliveInterval=60 -t "export BUILD_NUMBER=\"$BUILD_NUMBER\"; export BAZEL_HTTP_CACHE_URL=\"$BAZEL_HTTP_CACHE_URL\"; $GUEST_SHELL -l guest-build-telegram.sh $BUILD_CONFIGURATION" || true
+
+OUTPUT_PATH="build/artifacts"
+rm -rf "$OUTPUT_PATH"
+mkdir -p "$OUTPUT_PATH"
+
+scp -i "$ssh_privateKeyFile" -o LogLevel=ERROR -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -pr $ssh_username@"$ssh_host":"telegram-ios/build/artifacts/*" "$OUTPUT_PATH/"
+
+if [ ! -f "$OUTPUT_PATH/Telegram.ipa" ]; then
+	exit 1
+fi

buildbox/build-telegram.sh

@@ -0,0 +1,209 @@
+#!/bin/bash
+
+set -e
+
+BUILD_TELEGRAM_VERSION="1"
+
+MACOS_VERSION="12"
+XCODE_VERSION="13.4.1"
+GUEST_SHELL="bash"
+
+VM_BASE_NAME="macos$(echo $MACOS_VERSION | sed -e 's/\.'/_/g)_Xcode$(echo $XCODE_VERSION | sed -e 's/\.'/_/g)"
+echo "Base VM: \"$VM_BASE_NAME\""
+
+case "$(uname -s)" in
+    Linux*)     BUILD_MACHINE=linux;;
+    Darwin*)    BUILD_MACHINE=macOS;;
+    *)          BUILD_MACHINE=""
+esac
+
+if [ "$BUILD_MACHINE" == "linux" ]; then
+	for MACHINE in $(virsh list --all --name); do
+		if [ "$MACHINE" == "$VM_BASE_NAME" ]; then
+			FOUND_BASE_MACHINE="1"
+			break
+		fi
+	done
+	if [ -z "$FOUND_BASE_MACHINE" ]; then
+		echo "Virtual machine $VM_BASE_NAME not found"
+		exit 1
+	fi
+elif [ "$BUILD_MACHINE" == "macOS" ]; then
+	echo "Building on macOS"
+else
+	echo "Unknown build machine $(uname -s)"
+fi
+
+if [ `which cleanup-telegram-build-vms.sh` ]; then
+	cleanup-telegram-build-vms.sh
+fi
+
+if [ -z "$BAZEL" ]; then
+	echo "BAZEL is not defined"
+	exit 1
+fi
+
+if [ ! -f "$BAZEL" ]; then
+	echo "bazel not found at $BAZEL"
+	exit 1
+fi
+
+BUILDBOX_DIR="buildbox"
+
+mkdir -p "$BUILDBOX_DIR/transient-data"
+
+rm -f "tools/bazel"
+cp "$BAZEL" "tools/bazel"
+
+BUILD_CONFIGURATION="$1"
+
+if [ "$BUILD_CONFIGURATION" == "hockeyapp" ] || [ "$BUILD_CONFIGURATION" == "appcenter-experimental" ] || [ "$BUILD_CONFIGURATION" == "appcenter-experimental-2" ]; then
+	CODESIGNING_SUBPATH="$BUILDBOX_DIR/transient-data/telegram-codesigning/codesigning"
+elif [ "$BUILD_CONFIGURATION" == "appstore" ] || [ "$BUILD_CONFIGURATION" == "appstore-development" ]; then
+	CODESIGNING_SUBPATH="$BUILDBOX_DIR/transient-data/telegram-codesigning/codesigning"
+elif [ "$BUILD_CONFIGURATION" == "verify" ]; then
+	CODESIGNING_SUBPATH="build-system/fake-codesigning"
+else
+	echo "Unknown configuration $1"
+	exit 1
+fi
+
+COMMIT_COMMENT="$(git log -1 --pretty=%B)"
+case "$COMMIT_COMMENT" in 
+  *"[nocache]"*)
+	export BAZEL_HTTP_CACHE_URL=""
+    ;;
+esac
+
+COMMIT_ID="$(git rev-parse HEAD)"
+COMMIT_AUTHOR=$(git log -1 --pretty=format:'%an')
+if [ -z "$2" ]; then
+	COMMIT_COUNT=$(git rev-list --count HEAD)
+	BUILD_NUMBER_OFFSET="$(cat build_number_offset)"
+	COMMIT_COUNT="$(($COMMIT_COUNT+$BUILD_NUMBER_OFFSET))"
+	BUILD_NUMBER="$COMMIT_COUNT"
+else
+	BUILD_NUMBER="$2"
+fi
+
+BASE_DIR=$(pwd)
+
+if [ "$BUILD_CONFIGURATION" == "hockeyapp" ] || [ "$BUILD_CONFIGURATION" == "appcenter-experimental" ] || [ "$BUILD_CONFIGURATION" == "appcenter-experimental-2" ] || [ "$BUILD_CONFIGURATION" == "appstore" ] || [ "$BUILD_CONFIGURATION" == "appstore-development" ]; then
+	if [ ! `which generate-configuration.sh` ]; then
+		echo "generate-configuration.sh not found in PATH $PATH"
+		exit 1
+	fi
+
+	mkdir -p "$BASE_DIR/$BUILDBOX_DIR/transient-data/telegram-codesigning"
+	mkdir -p "$BASE_DIR/$BUILDBOX_DIR/transient-data/build-configuration"
+
+	case "$BUILD_CONFIGURATION" in
+		"hockeyapp"|"appcenter-experimental"|"appcenter-experimental-2")
+			generate-configuration.sh internal release "$BASE_DIR/$BUILDBOX_DIR/transient-data/telegram-codesigning" "$BASE_DIR/$BUILDBOX_DIR/transient-data/build-configuration"
+			;;
+
+		"appstore")
+			generate-configuration.sh appstore release "$BASE_DIR/$BUILDBOX_DIR/transient-data/telegram-codesigning" "$BASE_DIR/$BUILDBOX_DIR/transient-data/build-configuration"
+			;;
+
+		"appstore-development")
+			generate-configuration.sh appstore development "$BASE_DIR/$BUILDBOX_DIR/transient-data/telegram-codesigning" "$BASE_DIR/$BUILDBOX_DIR/transient-data/build-configuration"
+			;;
+
+		*)
+			echo "Unknown build configuration $BUILD_CONFIGURATION"
+			exit 1
+			;;
+	esac
+elif [ "$BUILD_CONFIGURATION" == "verify" ]; then
+	mkdir -p "$BASE_DIR/$BUILDBOX_DIR/transient-data/telegram-codesigning"
+	mkdir -p "$BASE_DIR/$BUILDBOX_DIR/transient-data/build-configuration"
+
+	cp -R build-system/fake-codesigning/* "$BASE_DIR/$BUILDBOX_DIR/transient-data/telegram-codesigning/"
+	cp -R build-system/example-configuration/* "$BASE_DIR/$BUILDBOX_DIR/transient-data/build-configuration/"
+fi
+
+if [ ! -d "$CODESIGNING_SUBPATH" ]; then
+	echo "$CODESIGNING_SUBPATH does not exist"
+	exit 1
+fi
+
+SOURCE_DIR=$(basename "$BASE_DIR")
+rm -f "$BUILDBOX_DIR/transient-data/source.tar"
+set -x
+find . -type f -a -not -regex "\\." -a -not -regex ".*\\./git" -a -not -regex ".*\\./git/.*" -a -not -regex "\\./bazel-bin" -a -not -regex "\\./bazel-bin/.*" -a -not -regex "\\./bazel-out" -a -not -regex "\\./bazel-out/.*" -a -not -regex "\\./bazel-testlogs" -a -not -regex "\\./bazel-testlogs/.*" -a -not -regex "\\./bazel-telegram-ios" -a -not -regex "\\./bazel-telegram-ios/.*" -a -not -regex "\\./buildbox" -a -not -regex "\\./buildbox/.*" -a -not -regex "\\./buck-out" -a -not -regex "\\./buck-out/.*" -a -not -regex "\\./\\.buckd" -a -not -regex "\\./\\.buckd/.*" -a -not -regex "\\./build" -a -not -regex "\\./build/.*" -print0 | tar cf "$BUILDBOX_DIR/transient-data/source.tar" --null -T -
+
+PROCESS_ID="$$"
+
+if [ -z "$RUNNING_VM" ]; then
+	VM_NAME="$VM_BASE_NAME-$(openssl rand -hex 10)-build-telegram-$PROCESS_ID"
+else
+	VM_NAME="$RUNNING_VM"
+fi
+
+if [ "$BUILD_MACHINE" == "linux" ]; then
+	virt-clone --original "$VM_BASE_NAME" --name "$VM_NAME" --auto-clone
+	virsh start "$VM_NAME"
+
+	echo "Getting VM IP"
+
+	while [ 1 ]; do
+		TEST_IP=$(virsh domifaddr "$VM_NAME" 2>/dev/null | egrep -o 'ipv4.*' | sed -e 's/ipv4\s*//g' | sed -e 's|/.*||g')
+		if [ ! -z "$TEST_IP" ]; then
+			RESPONSE=$(ssh -o LogLevel=ERROR -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null telegram@"$TEST_IP" -o ServerAliveInterval=60 -t "echo -n 1")
+			if [ "$RESPONSE" == "1" ]; then
+				VM_IP="$TEST_IP"
+				break
+			fi
+		fi
+		sleep 1
+	done
+elif [ "$BUILD_MACHINE" == "macOS" ]; then
+	if [ -z "$RUNNING_VM" ]; then
+		prlctl clone "$VM_BASE_NAME" --linked --name "$VM_NAME"
+		prlctl start "$VM_NAME"
+
+		echo "Getting VM IP"
+
+		while [ 1 ]; do
+			TEST_IP=$(prlctl exec "$VM_NAME" "ifconfig | grep inet | grep broadcast | grep -Eo '([0-9]{1,3}\.){3}[0-9]{1,3}' | head -1 | tr '\n' '\0'" 2>/dev/null || echo "")
+			if [ ! -z "$TEST_IP" ]; then
+				RESPONSE=$(ssh -o LogLevel=ERROR -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null telegram@"$TEST_IP" -o ServerAliveInterval=60 -t "echo -n 1")
+				if [ "$RESPONSE" == "1" ]; then
+					VM_IP="$TEST_IP"
+					break
+				fi
+			fi
+			sleep 1
+		done
+	fi
+	echo "VM_IP=$VM_IP"
+fi
+
+scp -o LogLevel=ERROR -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -pr "$CODESIGNING_SUBPATH" telegram@"$VM_IP":codesigning_data
+scp -o LogLevel=ERROR -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -pr "$BASE_DIR/$BUILDBOX_DIR/transient-data/build-configuration" telegram@"$VM_IP":telegram-configuration
+
+scp -o LogLevel=ERROR -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -pr "$BUILDBOX_DIR/guest-build-telegram.sh" "$BUILDBOX_DIR/transient-data/source.tar" telegram@"$VM_IP":
+
+ssh -o LogLevel=ERROR -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null telegram@"$VM_IP" -o ServerAliveInterval=60 -t "export BUILD_NUMBER=\"$BUILD_NUMBER\"; export BAZEL_HTTP_CACHE_URL=\"$BAZEL_HTTP_CACHE_URL\"; $GUEST_SHELL -l guest-build-telegram.sh $BUILD_CONFIGURATION" || true
+
+OUTPUT_PATH="build/artifacts"
+rm -rf "$OUTPUT_PATH"
+mkdir -p "$OUTPUT_PATH"
+
+scp -o LogLevel=ERROR -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -pr telegram@"$VM_IP":"telegram-ios/build/artifacts/*" "$OUTPUT_PATH/"
+
+if [ -z "$RUNNING_VM" ]; then
+	if [ "$BUILD_MACHINE" == "linux" ]; then
+		virsh destroy "$VM_NAME"
+		virsh undefine "$VM_NAME" --remove-all-storage --nvram
+	elif [ "$BUILD_MACHINE" == "macOS" ]; then
+		echo "Deleting VM..."
+		#prlctl stop "$VM_NAME" --kill
+		#prlctl delete "$VM_NAME"
+	fi
+fi
+
+if [ ! -f "$OUTPUT_PATH/Telegram.ipa" ]; then
+	exit 1
+fi

buildbox/deploy-appcenter.sh

@@ -0,0 +1,23 @@
+#!/bin/bash
+
+set -e
+set -x
+
+IPA_PATH="build/artifacts/Telegram.ipa"
+DSYM_PATH="build/artifacts/Telegram.DSYMs.zip"
+
+if [ `which appcenter` ]; then
+    APPCENTER="$(which appcenter)"
+else
+    APPCENTER="/usr/local/bin/appcenter"
+fi
+
+$APPCENTER login --token "$API_TOKEN"
+
+NEXT_WAIT_TIME=0
+until [ $NEXT_WAIT_TIME -eq 5 ] || $APPCENTER distribute release --app "$API_USER_NAME/$API_APP_NAME" -f "$IPA_PATH" -g Internal; do
+    sleep $(( NEXT_WAIT_TIME++ ))
+done
+[ $NEXT_WAIT_TIME -lt 10 ]
+
+$APPCENTER crashes upload-symbols --app "$API_USER_NAME/$API_APP_NAME" --symbol "$DSYM_PATH"

buildbox/deploy-telegram.sh

@@ -0,0 +1,74 @@
+#!/bin/bash
+
+set -e
+
+COMMIT_COMMENT="$(git log -1 --pretty=%B)"
+case "$COMMIT_COMMENT" in 
+  *"[nodeploy]"*)
+	exit 0
+    ;;
+esac
+
+CONFIGURATION="$1"
+
+if [ -z "$CONFIGURATION" ]; then
+	echo "Usage: sh deploy-telegram.sh CONFIGURATION"
+	exit 1
+fi
+
+if [ ! `which setup-telegram-build.sh` ]; then
+	echo "setup-telegram-build.sh not found in PATH $PATH"
+	exit 1
+fi
+
+BASE_DIR=$(pwd)
+BUILDBOX_DIR="buildbox"
+mkdir -p "$BUILDBOX_DIR/transient-data"
+
+source `which setup-telegram-build.sh`
+setup_telegram_build "$CONFIGURATION" "$BASE_DIR/$BUILDBOX_DIR/transient-data"
+
+COMMIT_ID=$(git rev-parse HEAD)
+COMMIT_AUTHOR=$(git log -1 --pretty=format:'%an')
+if [ -z "$2" ]; then
+	COMMIT_COUNT=$(git rev-list --count HEAD)
+	COMMIT_COUNT="$(($COMMIT_COUNT+1000))"
+	BUILD_NUMBER="$COMMIT_COUNT"
+else
+	BUILD_NUMBER="$2"
+fi
+
+if [ "$CONFIGURATION" == "hockeyapp" ] || [ "$CONFIGURATION" == "appcenter-experimental" ] || [ "$CONFIGURATION" == "appcenter-experimental-2" ] || [ "$CONFIGURATION" == "appstore-development" ]; then
+	FASTLANE_PASSWORD=""
+	FASTLANE_ITC_TEAM_NAME=""
+elif [ "$CONFIGURATION" == "appstore" ]; then
+	FASTLANE_PASSWORD="$TELEGRAM_BUILD_APPSTORE_PASSWORD"
+	FASTLANE_ITC_TEAM_NAME="$TELEGRAM_BUILD_APPSTORE_TEAM_NAME"
+	FASTLANE_ITC_USERNAME="$TELEGRAM_BUILD_APPSTORE_USERNAME"
+else
+	echo "Unknown configuration $CONFIGURATION"
+	exit 1
+fi
+
+OUTPUT_PATH="build/artifacts"
+IPA_PATH="$OUTPUT_PATH/Telegram.ipa"
+DSYM_PATH="$OUTPUT_PATH/Telegram.DSYMs.zip"
+
+if [ ! -f "$IPA_PATH" ]; then
+	echo "$IPA_PATH not found"
+	exit 1
+fi
+
+if [ ! -f "$DSYM_PATH" ]; then
+	echo "$DSYM_PATH not found"
+	exit 1
+fi
+
+if [ "$1" == "appstore" ]; then
+	export DELIVER_ITMSTRANSPORTER_ADDITIONAL_UPLOAD_PARAMETERS="-t DAV"
+	FASTLANE_PASSWORD="$FASTLANE_PASSWORD" xcrun altool --upload-app --type ios --file "$IPA_PATH" --username "$FASTLANE_ITC_USERNAME" --password "@env:FASTLANE_PASSWORD"
+elif [ "$1" == "hockeyapp" ]; then
+	API_USER_NAME="$API_USER_NAME" API_APP_NAME="$API_APP_NAME" API_TOKEN="$API_TOKEN" sh buildbox/deploy-appcenter.sh
+elif [ "$1" == "appcenter-experimental" ] || [ "$1" == "appcenter-experimental-2" ] || [ "$1" == "appstore-development" ]; then
+	API_USER_NAME="$API_USER_NAME" API_APP_NAME="$API_APP_NAME" API_TOKEN="$API_TOKEN" sh buildbox/deploy-appcenter.sh
+fi

buildbox/guest-build-telegram.sh

@@ -0,0 +1,122 @@
+#!/bin/sh
+
+set -x
+
+if [ -z "BUILD_NUMBER" ]; then
+	echo "BUILD_NUMBER is not set"
+	exit 1
+fi
+
+if [ "$1" == "hockeyapp" ] || [ "$1" == "appcenter-experimental" ] || [ "$1" == "appcenter-experimental-2" ] || [ "$1" == "testinghockeyapp" ]; then
+	CERTS_PATH="$HOME/codesigning_data/certs/enterprise"
+elif [ "$1" == "testinghockeyapp-local" ]; then
+	CERTS_PATH="$HOME/codesigning_data/certs/enterprise"
+elif [ "$1" == "appstore" ]; then
+	CERTS_PATH="$HOME/codesigning_data/certs/distribution"
+elif [ "$1" == "appstore-development" ]; then
+	CERTS_PATH="$HOME/codesigning_data/certs/development"
+elif [ "$1" == "verify" ]; then
+	CERTS_PATH="$HOME/codesigning_data/certs/distribution"
+else
+	echo "Unknown configuration $1"
+	exit 1
+fi
+
+MY_KEYCHAIN="temp.keychain"
+MY_KEYCHAIN_PASSWORD="secret"
+
+if [ ! -z "$(security list-keychains | grep "$MY_KEYCHAIN")" ]; then
+	security delete-keychain "$MY_KEYCHAIN" || true
+fi
+security create-keychain -p "$MY_KEYCHAIN_PASSWORD" "$MY_KEYCHAIN"
+security list-keychains -d user -s "$MY_KEYCHAIN" $(security list-keychains -d user | sed s/\"//g)
+security set-keychain-settings "$MY_KEYCHAIN"
+security unlock-keychain -p "$MY_KEYCHAIN_PASSWORD" "$MY_KEYCHAIN"
+
+SOURCE_PATH="telegram-ios"
+
+if [ -d "$SOURCE_PATH" ]; then
+	echo "Directory $SOURCE_PATH should not exist"
+	exit 1
+fi
+
+mkdir "$SOURCE_PATH"
+
+USE_RAMDISK="0"
+
+if [ "$USE_RAMDISK" == "1" ]; then
+	SIZE_IN_BLOCKS=$((12*1024*1024*1024/512))
+	DEV=`hdid -nomount ram://$SIZE_IN_BLOCKS`
+
+	if [ $? -eq 0 ]; then
+		newfs_hfs -v 'ram disk' $DEV
+		eval `/usr/bin/stat -s "$SOURCE_PATH"`
+		mount -t hfs -o union -o nobrowse -o nodev -o noatime $DEV "$SOURCE_PATH"
+		chown $st_uid:$st_gid "$SOURCE_PATH"
+		chmod $st_mode "$SOURCE_PATH"
+	else
+		echo "Error creating ramdisk"
+		exit 1
+	fi
+fi
+
+echo "Unpacking files..."
+
+mkdir -p "$SOURCE_PATH/buildbox"
+mkdir -p "$SOURCE_PATH/buildbox/transient-data"
+#cp -r "$HOME/codesigning_teams" "$SOURCE_PATH/buildbox/transient-data/teams"
+
+BASE_DIR=$(pwd)
+cd "$SOURCE_PATH"
+tar -xf "../source.tar"
+
+for f in "$CERTS_PATH"/*.p12; do
+	security import "$f" -k "$MY_KEYCHAIN" -P "" -T /usr/bin/codesign -T /usr/bin/security
+done
+
+for f in "$CERTS_PATH"/*.cer; do
+	#sudo security add-trusted-cert -d -r trustRoot -p codeSign -k "$MY_KEYCHAIN" "$f"
+	security import "$f" -k "$MY_KEYCHAIN" -P "" -T /usr/bin/codesign -T /usr/bin/security
+done
+
+security import "build-system/AppleWWDRCAG3.cer" -k "$MY_KEYCHAIN" -P "" -T /usr/bin/codesign -T /usr/bin/security
+
+security set-key-partition-list -S apple-tool:,apple: -k "$MY_KEYCHAIN_PASSWORD" "$MY_KEYCHAIN"
+
+if [ "$1" == "hockeyapp" ] || [ "$1" == "appcenter-experimental" ] || [ "$1" == "appcenter-experimental-2" ] || [ "$1" == "appstore-development" ]; then
+	APP_CONFIGURATION="release_arm64"
+elif [ "$1" == "appstore" ]; then
+	APP_CONFIGURATION="release_universal"
+elif [ "$1" == "verify" ]; then
+	APP_CONFIGURATION="release_universal"
+else
+	echo "Unsupported configuration $1"
+	exit 1
+fi
+
+python3 build-system/Make/Make.py \
+    --bazel="$(pwd)/tools/bazel" \
+    --cacheHost="$BAZEL_HTTP_CACHE_URL" \
+    build \
+    --configurationPath="$HOME/telegram-configuration" \
+    --buildNumber="$BUILD_NUMBER" \
+    --disableParallelSwiftmoduleGeneration \
+    --configuration="$APP_CONFIGURATION" \
+    --apsEnvironment=production
+
+OUTPUT_PATH="build/artifacts"
+rm -rf "$OUTPUT_PATH"
+mkdir -p "$OUTPUT_PATH"
+
+for f in bazel-out/applebin_ios-ios_arm*-opt-ST-*/bin/Telegram/Telegram.ipa; do
+	cp "$f" $OUTPUT_PATH/
+done
+
+mkdir -p build/DSYMs
+for f in bazel-out/applebin_ios-ios_arm*-opt-ST-*/bin/Telegram/*.dSYM; do
+	cp -R "$f" build/DSYMs/
+done
+
+zip -r "./$OUTPUT_PATH/Telegram.DSYMs.zip" build/DSYMs 1>/dev/null
+
+cd "$BASE_DIR"

buildbox/verify-telegram.sh

@@ -0,0 +1,56 @@
+#!/bin/bash
+
+set -e
+set -x
+
+CONFIGURATION="$1"
+MODE="$2"
+
+if [ -z "$CONFIGURATION" ] || [ -z "$MODE" ] ; then
+	echo "Usage: sh deploy-telegram.sh CONFIGURATION [cached|full]"
+	exit 1
+fi
+
+if [ "$MODE" == "cached" ]; then
+	BAZEL_HTTP_CACHE_URL="$BAZEL_HTTP_CACHE_URL"
+	ERROR_OUTPUT_PATH="build/verifysanity_artifacts"
+elif [ "$MODE" == "full" ]; then
+	BAZEL_HTTP_CACHE_URL=""
+	ERROR_OUTPUT_PATH="build/verify_artifacts"
+else
+	echo "Unknown mode $MODE"
+	exit 1
+fi
+
+OUTPUT_PATH="build/artifacts"
+
+if [ "$CONFIGURATION" == "appstore" ]; then
+	if [ -z "$IPA_PATH" ]; then
+		IPA_PATH="$OUTPUT_PATH/Telegram.ipa"
+	fi
+else
+	echo "Unknown configuration $CONFIGURATION"
+	exit 1
+fi
+
+if [ ! -f "$IPA_PATH" ]; then
+	echo "$IPA_PATH not found"
+	exit 1
+fi
+
+VERIFY_PATH="TelegramVerifyBuild.ipa"
+
+rm -f "$VERIFY_PATH"
+cp "$IPA_PATH" "$VERIFY_PATH"
+
+BAZEL_HTTP_CACHE_URL="$BAZEL_HTTP_CACHE_URL" sh buildbox/build-telegram.sh verify
+
+python3 tools/ipadiff.py "$IPA_PATH" "$VERIFY_PATH"
+retVal=$?
+if [ $retVal -ne 0 ]; then
+    mkdir -p "$ERROR_OUTPUT_PATH"
+    cp "$IPA_PATH" "$ERROR_OUTPUT_PATH"/
+    exit 1
+fi
+
+