Start building out arch package

Author: mfinelli

.github/workflows/test.yml

@@ -55,3 +55,52 @@ jobs:
           name: rpm
           path: pkg/rpmbuild/RPMS/**/*.rpm
           retention-days: 1
+
+  # we use a ubuntu image here even just for the arch build because when we
+  # bump the minimum to noble we can unify these two steps (makepkg/packman
+  # are not in the jammy image but they are in the noble image)
+  arch:
+    runs-on: ubuntu-latest
+    container:
+      image: ubuntu:noble
+    # needs: [main]
+    steps:
+      - run: apt-get update
+      - run: apt-get upgrade -y
+      - run: |
+          apt-get install -y \
+            ca-certificates \
+            build-essential \
+            file \
+            gcc-aarch64-linux-gnu \
+            libarchive-tools \
+            makepkg \
+            pacman-package-manager \
+            rclone \
+            tree \
+            unzip
+      - uses: crazy-max/ghaction-import-gpg@v7
+        with:
+          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
+          passphrase: ${{ secrets.GPG_PASSPHRASE }}
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v6
+        with:
+          cache: true
+          go-version-file: go.mod
+      - uses: sqlc-dev/setup-sqlc@v4
+        with:
+          sqlc-version: 1.30.0
+      - run: sqlc generate
+      - run: go install github.com/google/go-licenses/v2@latest
+      - run: useradd -m builder
+      - run: ./pkg/buildarch.bash
+      - uses: actions/upload-artifact@v6
+        with:
+          name: arch
+          path: |
+            pkg/arch/*-aarch64.pkg.tar.zst
+            pkg/arch/*-aarch64.pkg.tar.zst.sig
+            pkg/arch/*-x86_64.pkg.tar.zst
+            pkg/arch/*-x86_64.pkg.tar.zst.sig
+          retention-days: 1

pkg/PKGBUILD

@@ -0,0 +1,24 @@
+pkgname=modctl
+pkgver=PKGVER
+pkgrel=1
+pkgdesc="command line mod manager"
+arch=(aarch64 x86_64)
+url=https://modctl.org
+license=(GPL-3.0-or-later)
+depends=(glibc)
+source=(file://modctl
+        file://modctl.bash
+        file://modctl.fish
+        file://modctl.zsh
+        file://licenses.tar
+        file://LICENSE)
+md5sums=(SKIP SKIP SKIP SKIP SKIP SKIP)
+
+package() {
+  install -Dm0755 "$srcdir/modctl" "$pkgdir/usr/bin/modctl"
+  install -Dm0644 "$srcdir/LICENSE" "$pkgdir/usr/share/licenses/modctl/LICENSE"
+  cp -r "$srcdir/licenses" "$pkgdir/usr/share/licenses/modctl/vendor"
+  install -Dm0644 "$srcdir/modctl.bash" "$pkgdir/usr/share/bash-completions/completions/modctl"
+  install -Dm0644 "$srcdir/modctl.fish" "$pkgdir/usr/share/fish/vendor_completions.d/modctl.fish"
+  install -Dm0644 "$srcdir/modctl.zsh" "$pkgdir/usr/share/zsh/site-functions/_modctl"
+}

pkg/buildarch.bash

@@ -0,0 +1,47 @@
+#!/usr/bin/env bash
+
+pkgver="$(grep -P "^\tVersion:" cmd/root.go | awk -F\" '{print $2}')"
+
+mkdir pkg/arch
+sed -e "s/PKGVER/$pkgver/" pkg/PKGBUILD > pkg/arch/PKGBUILD
+go-licenses save ./... --ignore github.com/mfinelli/modctl --save_path \
+  pkg/licenses
+find pkg/licenses -type f -exec chmod 0644 {} \;
+
+(
+  cd pkg || exit 1
+  tar cvf arch/licenses.tar licenses
+)
+
+make
+./modctl completion bash > pkg/arch/modctl.bash
+./modctl completion fish > pkg/arch/modctl.fish
+./modctl completion zsh > pkg/arch/modctl.zsh
+cp LICENSE pkg/arch
+mv modctl pkg/arch
+
+(
+  set -e
+  chown -R builder:builder pkg/arch
+  cd pkg/arch
+  su builder -c "makepkg --nodeps"
+  find . -name '*-x86_64.pkg.tar.zst' -exec \
+    gpg --detach-sign \
+      -u pkg@modctl.org \
+      {} \;
+)
+
+export CC=aarch64-linux-gnu-gcc
+export GOARCH=arm64
+make modctl
+mv modctl pkg/arch
+
+(
+  set -e
+  cd pkg/arch
+  su builder -c "CARCH=aarch64 makepkg --nodeps"
+  find . -name '*-aarch64.pkg.tar.zst' -exec \
+    gpg --detach-sign \
+      -u pkg@modctl.org \
+      {} \;
+)

pkg/publish.bash

@@ -22,10 +22,13 @@ done
 
 echo "$RCLONE_CONFIG" > pkg/rclone.conf
 
-echo "Pulling current repo state from R2..."
 WORKDIR="$(mktemp -d)"
 mkdir -p "$WORKDIR/repo"
-rclone sync --config pkg/rclone.conf r2:modctl-pkgs "$WORKDIR/repo"
+
+if [[ "${GITHUB_REF}" == refs/tags/v* ]]; then
+  echo "Pulling current repo state from R2..."
+  rclone sync --config pkg/rclone.conf r2:modctl-pkgs "$WORKDIR/repo"
+fi
 
 echo "Exporting public key..."
 gpg --armor --export pkg@modctl.org > "$WORKDIR/repo/pubkey.asc"
@@ -102,6 +105,9 @@ done
 
 tree "$WORKDIR"
 
-rclone sync --config pkg/rclone.conf "$WORKDIR/repo" r2:modctl-pkgs
+if [[ "${GITHUB_REF}" == refs/tags/v* ]]; then
+  echo "Pushing updated repo to R2..."
+  rclone sync --config pkg/rclone.conf "$WORKDIR/repo" r2:modctl-pkgs
+fi
 
 exit 0