netx/.github/workflows/release-linux.yml
oliver 846aa3e680 Linux x86_64 offline release; configurable API and bundled PostgreSQL ports.
- packaging/linux: netx-<ver>-linux-x86_64.tar.gz with bundled Python 3.12,
  PostgreSQL 16 and web/dist (glibc >= 2.17). install.sh (install/update/
  reinstall), netxctl (start/stop/status/logs, set-port, set-bind,
  set-pg-port, reconfigure-db, check-update/update/auto-update, backup,
  uninstall), systemd units, nohup fallback without systemd. Privilege
  drop, detaching and tar go through the bundled Python, so bare images
  without su/runuser/setsid/tar work.
- Updates: same GitHub/Forgejo/manifest sources as Windows, sha256
  verified, pre-update pg_dump, automatic rollback when the new version
  does not come up.
- Non-loopback bind: generated bootstrap admin password and
  NETX_UME_VERIFY_TLS=true, as security_bootstrap requires.
- Build in manylinux2014 + check_bundle.sh (GLIBC <= 2.17, no missing
  libs); release-linux.yml builds on v* tags and smoke-tests offline on
  CentOS 7, Rocky 9, Ubuntu 18.04/24.04, Debian 12, openSUSE Leap 15 and
  openEuler 22.03 before attaching to the release.
- Windows: Setup DB page gets a bundled PG port field and
  /BundledPgPort=; set_pg_port.ps1 + tray "Built-in database port";
  reconfigure keeps the configured port; postgresql.conf is written
  without a BOM (PS 5.1 Set-Content -Encoding utf8 broke postgres).
- Forgejo/GitHub publish scripts include the Linux package.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-14 10:09:07 +08:00

92 lines
2.8 KiB
YAML

name: Release Linux
on:
push:
tags:
- "v*"
workflow_dispatch:
permissions:
contents: write
jobs:
build:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
with:
node-version: "20"
- name: Check tag matches pyproject version
if: startsWith(github.ref, 'refs/tags/')
run: |
ver="$(sed -n 's/^[[:space:]]*version[[:space:]]*=[[:space:]]*"\([^"]*\)".*/\1/p' pyproject.toml | head -n1)"
[ "${GITHUB_REF_NAME}" = "v${ver}" ] || { echo "tag ${GITHUB_REF_NAME} != v${ver}"; exit 1; }
- name: Cache PostgreSQL build + downloads
uses: actions/cache@v4
with:
path: packaging/cache/linux
key: linux-x86_64-${{ hashFiles('packaging/linux/versions.env', 'packaging/linux/build_in_container.sh') }}-${{ hashFiles('requirements.txt') }}
restore-keys: |
linux-x86_64-${{ hashFiles('packaging/linux/versions.env', 'packaging/linux/build_in_container.sh') }}-
- name: Build package
run: bash packaging/linux/build_linux_release.sh
- uses: actions/upload-artifact@v4
with:
name: netx-linux-x86_64
path: |
packaging/release/netx-*-linux-x86_64.tar.gz
packaging/release/netx-*-linux-x86_64.tar.gz.sha256
retention-days: 7
smoke:
needs: build
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
image:
- centos:7
- rockylinux:9
- ubuntu:18.04
- ubuntu:24.04
- debian:12
- opensuse/leap:15
- openeuler/openeuler:22.03
steps:
- uses: actions/checkout@v4
- uses: actions/download-artifact@v4
with:
name: netx-linux-x86_64
path: pkg
- name: Offline install smoke (${{ matrix.image }})
run: |
tarball="$(ls pkg/netx-*-linux-x86_64.tar.gz)"
# Minimal images may not ship tar: unpack on the runner and mount both.
mkdir -p pkgx && tar xzf "$tarball" -C pkgx
docker run --rm --network none \
-v "$PWD/pkg:/pkg:ro" -v "$PWD/pkgx:/pkgx:ro" \
-v "$PWD/packaging/linux/smoke_test.sh:/smoke.sh:ro" \
"${{ matrix.image }}" bash /smoke.sh "/pkg/$(basename "$tarball")" "/pkgx/$(ls pkgx)"
release:
needs: smoke
if: startsWith(github.ref, 'refs/tags/')
runs-on: ubuntu-latest
steps:
- uses: actions/download-artifact@v4
with:
name: netx-linux-x86_64
path: pkg
# Release notes come from the Windows workflow; only attach files here.
- name: Upload to GitHub Release
uses: softprops/action-gh-release@v2
with:
files: |
pkg/netx-*-linux-x86_64.tar.gz
pkg/netx-*-linux-x86_64.tar.gz.sha256