typebasedio
bbc41646ee
Release / release (push) Successful in 27s
- Add scripts/build-release.sh: cross-compile linux+windows amd64 with ldflags injecting main.version and main.commit, write checksums-sha256.txt and release-manifest.json (full commit SHA). - Add scripts/release-check.sh: local mirror of CI (test, vet, build, --version substring check); falls back to Windows artifact when run on a Windows host where the Linux binary can't exec. - Wire main.version / main.commit -> cmd.SetVersionInfo. Default to "dev" / "" so local builds without ldflags still produce a sensible string. Output format: single line 'ctask <version> (<short-sha>)' or 'ctask <version>' / 'ctask dev'. - Add .gitea/workflows/release.yml: triggered on v* tags, runs-on ctask-release (golang:1.26-bookworm). Tag parsed from gitea.ref (not gitea.ref_name). Pure shell + Gitea API; no actions/checkout, no setup-go, no third-party release action. Installs jq at job start. RC tags are deletable+recreatable; final tags are immutable. Verify step downloads published assets, sha256sum -c's, and runs --version. - notes.md: log Phase 0/2/3 + version-injection completion.
74 lines
2.2 KiB
Bash
74 lines
2.2 KiB
Bash
#!/usr/bin/env bash
|
|
# build-release.sh — produce the ctask release artifact set under dist/.
|
|
#
|
|
# This is the single recipe shared between local validation and CI: the
|
|
# Gitea Actions workflow invokes this same script. Running it locally
|
|
# produces byte-identical artifacts (given the same Go toolchain version
|
|
# and commit) so the build is locally verifiable before tagging.
|
|
#
|
|
# Usage:
|
|
# bash scripts/build-release.sh <version>
|
|
#
|
|
# <version> is the release tag verbatim, e.g. "v0.6.1-rc.1". It is
|
|
# injected into the binary via -ldflags -X main.version. The current
|
|
# git HEAD is injected as main.commit.
|
|
#
|
|
# Artifacts produced:
|
|
# dist/ctask-linux-amd64
|
|
# dist/ctask-windows-amd64.exe
|
|
# dist/checksums-sha256.txt
|
|
# dist/release-manifest.json
|
|
set -euo pipefail
|
|
|
|
VERSION="${1:?Usage: build-release.sh <version>}"
|
|
COMMIT="$(git rev-parse HEAD)"
|
|
|
|
# Wipe dist/ to guarantee no stale artifacts from earlier builds leak
|
|
# into the manifest or checksum file.
|
|
rm -rf dist
|
|
mkdir -p dist
|
|
|
|
# CGO_ENABLED=0 forces a pure-Go static link so the Linux binary runs in
|
|
# minimal containers (alpine, distroless, scratch). -s -w strip symbols
|
|
# and DWARF for a smaller artifact.
|
|
LDFLAGS="-s -w -X main.version=${VERSION} -X main.commit=${COMMIT}"
|
|
|
|
CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags "${LDFLAGS}" -o dist/ctask-linux-amd64 ./
|
|
CGO_ENABLED=0 GOOS=windows GOARCH=amd64 go build -ldflags "${LDFLAGS}" -o dist/ctask-windows-amd64.exe ./
|
|
|
|
cd dist
|
|
# Deterministic ordering so a diff between local and CI checksums is
|
|
# easy to read.
|
|
sha256sum ctask-linux-amd64 ctask-windows-amd64.exe > checksums-sha256.txt
|
|
|
|
LINUX_SHA=$(awk '/ctask-linux-amd64$/{print $1}' checksums-sha256.txt)
|
|
WINDOWS_SHA=$(awk '/ctask-windows-amd64\.exe$/{print $1}' checksums-sha256.txt)
|
|
|
|
cat > release-manifest.json <<MANIFEST
|
|
{
|
|
"project": "ctask",
|
|
"version": "${VERSION}",
|
|
"commit": "${COMMIT}",
|
|
"artifacts": [
|
|
{
|
|
"name": "ctask-linux-amd64",
|
|
"os": "linux",
|
|
"arch": "amd64",
|
|
"sha256": "${LINUX_SHA}"
|
|
},
|
|
{
|
|
"name": "ctask-windows-amd64.exe",
|
|
"os": "windows",
|
|
"arch": "amd64",
|
|
"sha256": "${WINDOWS_SHA}"
|
|
}
|
|
]
|
|
}
|
|
MANIFEST
|
|
|
|
echo "Build complete:"
|
|
cat checksums-sha256.txt
|
|
echo ""
|
|
cat release-manifest.json
|
|
echo ""
|