5f16574 build: Add "upload" build step — heartwood

modified .dockerignore

@@ -1 +1,4 @@

 target
 scripts
 debian
 systemd

modified VERSIONING.md

@@ -9,9 +9,9 @@ versions which follow [Semantic Versioning][semver].

 ## Format
 Versioning of the Radicle Stack is based on Git tags. During the build phase
 (`build.rs`), we search for the most recent tag that starts with a `v`
 character, eg. `v1.0.0`, and use that as the basis for computing the version.
 Versioning of the Radicle Stack is based on Git tags. During the build phase,
 we search for the most recent tag that starts with a `v` character, eg.
 `v1.0.0`, and use that as the basis for computing the version.
 If we're building code that is pointed to by that tag directly, that code will
 inherit that version number, with the `v` character stripped. For example:

@@ -19,12 +19,11 @@ inherit that version number, with the `v` character stripped. For example:

 .0.0
 If on the other hand, the commit we are building has no version tag pointing to
 it, we will use the most recent version tag by walking the history backwards
 until we hit a tagged commit, and suffixing the version number with `-dev`,
 plus the short hash of the commit. This indicates a development version that is
 not released and not meant to be packaged or distributed. For example:
 it, the output of `git describe` is used as-is. This indicates a development
 version that is not released and not meant to be packaged or distributed. For
 example:
 .0.0-dev+5a3cd6d
 .0.0-6-ga3ffe51d
 Tags used for versioning are always annotated and signed, and follow the format:

@@ -40,7 +39,7 @@ For example:

 .0.0-rc.2
 These releases are meant to be packaged (they don't have `-dev` in them).
 These releases are meant to be packaged.
 ## Semantics

modified build/Dockerfile

@@ -95,6 +95,7 @@ COPY --from=builder /src/*.1 /builds/x86_64-apple-darwin/man/man1/

 # Create and compress reproducible archive.
 WORKDIR /builds
 RUN x86_64-unknown-linux-musl/bin/rad version --json > radicle.json
 RUN apk update && apk add --no-cache tar xz
 RUN find * -maxdepth 0 -type d -exec mv '{}' "radicle-$RADICLE_VERSION-{}" \; && \
     find * -maxdepth 0 -type d -exec tar \

@@ -107,6 +108,7 @@ RUN find * -maxdepth 0 -type d -exec mv '{}' "radicle-$RADICLE_VERSION-{}" \; &&

     --format=posix \
     --pax-option=exthdr.name=%d/PaxHeaders/%f,delete=atime,delete=ctime \
     --mode='go+u,go-w' \
     --remove-files \
     --create --xz \
     --file="{}.tar.xz" \
     '{}' \;

modified build/build.sh

@@ -25,12 +25,7 @@ main() {

   tempdir="$(mktemp -d)"
   gitarchive="$tempdir/heartwood-$rev.tar.gz"
   keypath="$(rad path)/keys/radicle.pub"
   if ! version="$(git describe --match='v*' --candidates=1 2>/dev/null)"; then
     echo "fatal: no version tag found by 'git describe'" ; exit 1
   fi
   # Remove `v` prefix from version.
   version=${version#v}
   version="$(build/version.sh)"
   image=radicle-build-$version
   if [ ! -f "$keypath" ]; then

@@ -54,25 +49,17 @@ main() {

   echo "Creating container (radicle-build-container).."
   podman --cgroup-manager=cgroupfs create --replace --name radicle-build-container $image
   targets="\
     x86_64-unknown-linux-musl \
     aarch64-unknown-linux-musl \
     x86_64-apple-darwin \
     aarch64-apple-darwin"
   # Copy build artifacts to output folder.
   outdir=build/artifacts/
   mkdir -p $outdir
   podman cp --overwrite radicle-build-container:/builds/. $outdir
   for target in $targets; do
     outdir=build/artifacts/$target
     echo "Copying artifacts for $target.."
     mkdir -p $outdir
     rm -rf $outdir/*
   for target in $(cat build/targets); do
     echo "Signing artifacts for $target.."
     filename="radicle-$version-$target.tar.xz"
     filepath="$outdir/$filename"
     # Copy archive to target folder.
     podman cp radicle-build-container:/builds/$filename $outdir
     # Output SHA256 digest of archive.
     checksum="$(cd $outdir && sha256sum $filename)"
     echo "Checksum of $filepath is $(echo "$checksum" | cut -d' ' -f1)"

added build/targets

@@ -0,0 +1,4 @@

 x86_64-unknown-linux-musl
 aarch64-unknown-linux-musl
 x86_64-apple-darwin
 aarch64-apple-darwin

added build/upload.sh

@@ -0,0 +1,39 @@

 #!/bin/sh
 set -e
 SSH_LOGIN=${SSH_LOGIN:-release}
 SSH_ADDRESS=${SSH_ADDRESS:-$SSH_LOGIN@files.radicle.xyz}
 SSH_KEY="$(rad path)/keys/radicle"
 main() {
   version="$(build/version.sh)"
   echo "Uploading Radicle $version..."
   if [ -z "$version" ]; then
     echo "fatal: empty version number" >&2 ; exit 1
   fi
   # Create remote folder.
   ssh -i $SSH_KEY $SSH_ADDRESS mkdir -p /mnt/radicle/files/releases/$version
   # Copy files over.
   scp -i $SSH_KEY build/artifacts/radicle-$version* $SSH_ADDRESS:/mnt/radicle/files/releases/$version
   scp -i $SSH_KEY build/artifacts/radicle.json $SSH_ADDRESS:/mnt/radicle/files/releases/$version
   for target in $(cat build/targets); do
     archive=/mnt/radicle/files/releases/$version/radicle-$version-$target.tar.xz
     symlink=/mnt/radicle/files/releases/$version/radicle-$target.tar.xz
     echo "Creating symlinks for $target.."
     ssh -i $SSH_KEY $SSH_ADDRESS ln -snf $archive $symlink
     ssh -i $SSH_KEY $SSH_ADDRESS ln -snf $archive.sig $symlink.sig
     ssh -i $SSH_KEY $SSH_ADDRESS ln -snf $archive.sha256 $symlink.sha256
   done
   echo "Creating 'latest' symlink.."
   ssh -i $SSH_KEY $SSH_ADDRESS ln -snf /mnt/radicle/files/releases/$version /mnt/radicle/files/releases/latest
   echo "Done."
 }
 main "$@"

added build/version.sh

@@ -0,0 +1,9 @@

 #!/bin/sh
 if ! version="$(git describe --match='v*' --candidates=1 2>/dev/null)"; then
   echo "fatal: no version tag found by 'git describe'" >&2 ; exit 1
 fi
 # Remove `v` prefix from version.
 version=${version#v}
 echo $version