amneziawg-go-builder

Automated build pipeline that compiles amneziawg-go from a pinned upstream tag and publishes the resulting binary as a GitHub Release.

The upstream project ships source only — this repo turns a chosen release tag into a ready-to-use linux/amd64 binary so you don't have to build it yourself.

How it works

The version to build is stored in the version file (e.g. v0.2.18). On every push to main that changes version (or the workflow itself), the release workflow:

1. Reads the target tag from the version file.
2. Skips the run if a release for that tag already exists.
3. Clones amneziawg-go at the matching tag.
4. Builds a static binary (CGO_ENABLED=0, GOOS=linux, GOARCH=amd64) via make.
5. Stages the binary together with its .sha256 checksum.
6. Publishes a GitHub Release named after the tag with both files attached.

The workflow can also be triggered manually from the Actions tab (workflow_dispatch).

Releasing a new version

1. Update the version file with the desired upstream tag.
2. Commit and push to main.
3. The workflow builds and publishes the release automatically.

Downloads

Grab the latest binary and checksum from the Releases page. Each release contains:

• amneziawg-go-<version>-linux-amd64 — the compiled binary
• amneziawg-go-<version>-linux-amd64.sha256 — its SHA-256 checksum

Verify the download with:

sha256sum -c amneziawg-go-<version>-linux-amd64.sha256

License

BSD 3-Clause. Note this license covers the build tooling in this repository; the built binary is subject to the license of the upstream amneziawg-go project.