13 Commits

Author	SHA1	Message	Date
unkinben	e7efe0e50d	build: verify artifactapi TLS against the OS CA bundle ... The rpm-vendor skip-check probes artifactapi, which serves an internally-signed cert. Python requests uses certifi (Mozilla CAs) and so fails with CERTIFICATE_VERIFY_FAILED, defeating the skip (builds still proceed via the except path, but never skip). Point the artifactapi session at the OS CA bundle, which trusts the internal CA, with an ARTIFACTAPI_CA_BUNDLE override.	2026-07-18 00:24:50 +10:00
unkinben	591a6a2e7a	Publish vendor RPMs to artifactapi rpm-vendor, one package per job ... Builds currently push to Gitea's RPM registry and run build-all in a single job. Publish instead to the artifactapi rpm-vendor local repos (real yum repos; repodata regenerates automatically) and give each vendor package its own job so failures are isolated and builds parallelise. Because builds no longer land in Gitea, the "skip already-built version" check now probes artifactapi. - tools/build: repoint check_package_exists from the Gitea packages API to the artifactapi rpm-vendor repo (GET the served Packages/<file>.rpm path). Add get_vendor_repo() (distro -> rpm-vendor-<suffix>) and get_rpm_arch() (amd64 -> x86_64), and carry arch on PackageInfo so the probed filename matches the built RPM. - .woodpecker: replace the per-distro build-all pipelines with per-distro matrix pipelines over PACKAGE, so each package builds in its own job. deploy-*.yaml (master push) build each package and PUT its RPM to the distro's rpm-vendor repo; build-*.yaml (pull_request) build as a check. - tools/gen-pipelines + `make pipelines`: generate the .woodpecker matrix pipelines from rpms/*/metadata.yaml (source of truth for target distros); regenerate after adding or removing packages.	2026-07-18 00:09:38 +10:00
unkinben	8a3a585f8c	fix/distro-aware-package-check (#164) ... Reviewed-on: #164	2026-05-17 23:43:35 +10:00
unkinben	818a48fa78	fix: add --network=host to docker and fix build tool fallback order ... Pass --network=host to docker build and docker create so package builds can reach the network. Reorder auto-detection so Docker is tried before buildah/native, only falling back when the explicit flag is not set.	2026-04-25 16:11:40 +10:00
unkinben	f408d3d705	feat: migrate to woodpeckerci ... - update build tool for kubernetes auth - update build tool to build packages without docker (native + buildah) - add woodpecker pre-commit and build jobs - add woodpecker deployment jobs - cleanup gitea actions workflows	2026-03-07 17:11:20 +11:00
unkinben	745ce03757	fix: standardize artifact directory structure for multi-distro support ... Remove per-package subdirectories from build output to align with workflow expectations. Update deploy workflow paths to match repository-based structure (dist/repository/*.rpm). This enables consistent artifact handling across different Linux distributions.	2026-03-01 22:11:23 +11:00
unkinben	1f1b1cfe32	chore: update urls to artifactapi ... - change github urls to artifactapi - change gitea urls to artifactapi - change scripts in nfpm to use full path - update unrar to 7.12	2026-01-17 20:21:04 +11:00
unkinben	e09d0c4bc6	chore: update build tool, puppet-initial ... - update build tool with github_release_pattern - update puppet-initial to reduce impact on upgrades	2026-01-17 15:18:26 +11:00
unkinben	6d379d99b6	chore: update build job, fixed versions ... - changed all releases from 1-el8 and 1-el9 to 1 - updated build job to write files to per-repository directories	2026-01-03 23:24:58 +11:00
unkinben	5cdbe3a6b5	feat: enhance GitHub release tracking with pattern support and version extraction ... - Add github_release_pattern field to support multi-product repositories - Implement get_github_releases_by_pattern() for filtered release matching - Add parse_github_version_release() to extract version-release components - Update openbao plugin packages with release patterns and correct versions - Configure openbao-plugins meta package for manual versioning - Fix HashiCorp package GitHub repository references - Support complex tag formats like "secrets-consul-v0.1.0" and "v7.1.3-1" This enables automatic updates for packages sharing GitHub repos while maintaining proper RPM version/release semantics and backward compatibility.	2025-12-30 22:38:23 +11:00
unkinben	2954835dd0	feat: add GitHub integration for automated package updates ... - add GitHub API functions to fetch latest releases and compare versions - implement package update checking against GitHub repositories - add upgrade and upgrade-all CLI commands with dry-run support - include .ruff_cache in .gitignore for cleaner repository	2025-12-29 22:08:15 +11:00
unkinben	182641132a	refactor: modernise RPM builder with Python tooling v2 ... - Migrate from legacy shell-based build system to modern Python tooling - Update all metadata.yaml files to new schema with per-distro builds - Standardise build scripts with curl -L, envsubst, and error handling - Convert nfpm.yaml templates to use environment variable substitution - Update Dockerfile to accept all package metadata as build arguments - Modernise Makefile to use new Python build tool commands - Update CI workflow to use tools/build instead of make	2025-11-30 20:27:05 +11:00
unkinben	b3ba980f9f	refactor: modernise RPM builder with Python tooling ... - Replace Makefile version/release file system with metadata.yaml only - Add Python build automation (./tools/build) with Gitea API integration - Add GitHub release updater (./tools/update-gh) for version management - Centralize Dockerfiles into single parameterized Dockerfile - Remove 54+ individual package Dockerfiles and version directories - Update Makefile to use new Python tooling - Add GITEA_API_TOKEN validation to prevent duplicate builds - Support both explicit version/release args and metadata.yaml reading	2025-11-30 03:39:58 +11:00