dguiducci
bb5226a9a9
Nightly Build / build (push) Successful in 7m47s
A `systemctl --user` unit runs under the per-user manager, which systemd starts at first login and stops when the user's last session ends — so closing the SSH session that started Skald killed it, and it never came up at boot. No crash and nothing in the journal: the whole cgroup is simply torn down. Both installers now enable lingering after installing the unit, and update.sh carries the same helper so an installation predating this fix is healed by an ordinary update. A failure to enable it only ever warns, with the manual command — it must not abort an install. Two things found on the way there: update.sh matched `case "$OS" in Linux) ... Darwin)`, but $OS had already been normalized to lowercase at the top of the file, so stop_service and start_service were both silent no-ops. None of the ordering the file documents at its head was executing: the tarball went over the running binary (ETXTBSY, aborting the update mid-way) and the safety-net restart in cleanup() was a no-op too, leaving the box down. Neither workflow published install.sh / install-nightly.sh to the web root, so the scripts served by builds.skaldagent.net were hand-copied and drifting from the repo — an installer fix would reach every existing box through update.sh but never a new one. Nightly publishes the nightly installer, release publishes the release one, both with the same atomic temp-and-rename the tarballs use. Also on the unit: dropped `After=docker.service`, which a user manager silently ignores rather than honouring advisorily, and moved `Restart=on-failure` to `always` — run.sh exits 0 on any graceful shutdown, including one nobody asked for, which on-failure reads as a clean stop. That is also what absorbs the boot race against Docker now that lingering makes us start at boot.
122 lines
4.6 KiB
YAML
122 lines
4.6 KiB
YAML
name: Release
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- release
|
|
pull_request:
|
|
branches:
|
|
- release
|
|
|
|
jobs:
|
|
# ── PR check: verify the version is not already built ───────────────────────
|
|
verify-version:
|
|
if: github.event_name == 'pull_request'
|
|
runs-on: linux-amd64
|
|
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Verify version is new
|
|
run: ./ci/verify-version.sh --builds-dir /var/www/builds.skaldagent.net
|
|
|
|
# ── Push/merge: build, package, and deploy the release ──────────────────────
|
|
release:
|
|
if: github.event_name == 'push'
|
|
runs-on: linux-amd64
|
|
|
|
outputs:
|
|
version: ${{ steps.extract-version.outputs.version }}
|
|
|
|
env:
|
|
CARGO_TARGET_DIR: /home/dguiducci/.cache/skald-ci/target
|
|
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Extract version from Cargo.toml
|
|
id: extract-version
|
|
run: |
|
|
VER="v$(grep '^version' Cargo.toml | head -1 | sed 's/.*"\(.*\)"/\1/')"
|
|
echo "version=$VER" >> "$GITHUB_OUTPUT"
|
|
echo "[release] Building version $VER"
|
|
|
|
# Also run verify-version on push to catch any race (belt-and-suspenders)
|
|
- name: Verify version is new
|
|
run: ./ci/verify-version.sh --builds-dir /var/www/builds.skaldagent.net
|
|
|
|
- name: Build native (linux/amd64)
|
|
run: |
|
|
RUSTFLAGS="-A warnings" cargo build --release --no-default-features
|
|
RUSTFLAGS="-A warnings" cargo build --release --no-default-features -p skald-setup
|
|
|
|
- name: Cross-compile (linux/arm64)
|
|
env:
|
|
CC_aarch64_unknown_linux_gnu: aarch64-linux-gnu-gcc
|
|
AR_aarch64_unknown_linux_gnu: aarch64-linux-gnu-ar
|
|
CARGO_TARGET_AARCH64_UNKNOWN_LINUX_GNU_LINKER: aarch64-linux-gnu-gcc
|
|
run: |
|
|
RUSTFLAGS="-A warnings" cargo build --release --no-default-features --target aarch64-unknown-linux-gnu
|
|
RUSTFLAGS="-A warnings" cargo build --release --no-default-features -p skald-setup --target aarch64-unknown-linux-gnu
|
|
|
|
- name: Package amd64
|
|
run: |
|
|
cd "${GITHUB_WORKSPACE:-.}"
|
|
./ci/package.sh \
|
|
--version "${{ steps.extract-version.outputs.version }}" \
|
|
--os linux \
|
|
--arch amd64 \
|
|
--target-dir /home/dguiducci/.cache/skald-ci/target/release \
|
|
--output dist/
|
|
|
|
- name: Package arm64
|
|
run: |
|
|
cd "${GITHUB_WORKSPACE:-.}"
|
|
./ci/package.sh \
|
|
--version "${{ steps.extract-version.outputs.version }}" \
|
|
--os linux \
|
|
--arch arm64 \
|
|
--target-dir /home/dguiducci/.cache/skald-ci/target/aarch64-unknown-linux-gnu/release \
|
|
--output dist/
|
|
|
|
- name: Deploy to builds.skaldagent.net
|
|
run: |
|
|
cd "${GITHUB_WORKSPACE:-.}"
|
|
VERSION="${{ steps.extract-version.outputs.version }}"
|
|
TARGET="/var/www/builds.skaldagent.net/releases/${VERSION}"
|
|
mkdir -p "$TARGET"
|
|
# Publish each tarball atomically (temp name + rename) so a client can
|
|
# never fetch a half-written file.
|
|
for f in dist/*.tar.gz; do
|
|
name="$(basename "$f")"
|
|
cp "$f" "$TARGET/.$name.tmp"
|
|
mv -f "$TARGET/.$name.tmp" "$TARGET/$name"
|
|
done
|
|
echo "[release] Deployed $VERSION:"
|
|
ls -lh "$TARGET/"
|
|
|
|
- name: Update latest version pointer
|
|
run: |
|
|
VERSION="${{ steps.extract-version.outputs.version }}"
|
|
DEST=/var/www/builds.skaldagent.net/releases
|
|
# Flip LATEST atomically — install.sh/update.sh read it to decide
|
|
# whether to upgrade, so it must never be observed empty or partial.
|
|
printf '%s\n' "$VERSION" > "$DEST/.LATEST.tmp"
|
|
mv -f "$DEST/.LATEST.tmp" "$DEST/LATEST"
|
|
echo "[release] Updated releases/LATEST → $VERSION"
|
|
|
|
- name: Publish the release installer
|
|
run: |
|
|
cd "${GITHUB_WORKSPACE:-.}"
|
|
# install.sh is served straight from the web root
|
|
# (curl -fsSL https://builds.skaldagent.net/install.sh | bash), so
|
|
# without this it stays whatever was copied there by hand and drifts
|
|
# from the repo — a fix to the installer would reach every existing box
|
|
# through update.sh but never a new one. Published here rather than on
|
|
# every push so the served installer always matches a real release.
|
|
ROOT=/var/www/builds.skaldagent.net
|
|
cp install.sh "$ROOT/.install.sh.tmp"
|
|
chmod 644 "$ROOT/.install.sh.tmp"
|
|
mv -f "$ROOT/.install.sh.tmp" "$ROOT/install.sh"
|
|
echo "[release] Published install.sh"
|