feat: change vault to use artifactapi (#168)

Co-authored-by: Ben Vincent <ben@unkin.net>
Reviewed-on: #168

.gitea/workflows/build.yaml

@@ -1,59 +0,0 @@
-name: Build
-
-on:
-  pull_request:
-  workflow_call:
-  workflow_dispatch:
-
-jobs:
-  build-8:
-    runs-on: almalinux-8
-    container:
-      image: git.unkin.net/unkin/almalinux8-actionsdind:latest
-      options: "--privileged --volume /etc/pki/tls/vault:/etc/pki/tls/vault:ro"
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v3
-
-      - name: Build Packages
-        env:
-          VAULT_ROLE_ID: ${{ secrets.RPMBUILDER_VAULT_ROLEID }}
-        run: |
-          ./tools/build build-all --distro almalinux/el8
-
-      - name: Show RPMs
-        run: |
-          find /workspace -type f -name "*.rpm"
-
-      - name: Upload Artifacts
-        uses: actions/upload-artifact@v3
-        with:
-          name: rpms-8
-          path: /workspace/unkin/rpmbuilder/dist/*/*/*.rpm
-
-  build-9:
-    runs-on: almalinux-8
-    container:
-      image: git.unkin.net/unkin/almalinux9-actionsdind:latest
-      options: "--privileged --volume /etc/pki/tls/vault:/etc/pki/tls/vault:ro"
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v3
-
-      - name: Build Packages
-        env:
-          VAULT_ROLE_ID: ${{ secrets.RPMBUILDER_VAULT_ROLEID }}
-        run: |
-          ./tools/build build-all --distro almalinux/el9
-
-      - name: Show RPMs
-        run: |
-          find /workspace -type f -name "*.rpm"
-
-      - name: Upload Artifacts
-        uses: actions/upload-artifact@v3
-        with:
-          name: rpms-9
-          path: /workspace/unkin/rpmbuilder/dist/*/*/*.rpm

.gitea/workflows/deploy.yaml

@@ -1,66 +0,0 @@
-name: Deploy
-
-on:
-  push:
-    branches:
-      - master
-  workflow_dispatch:
-
-jobs:
-  deploy-8:
-    runs-on: almalinux-8
-    container:
-      image: git.unkin.net/unkin/almalinux8-actionsdind:latest
-      options: --privileged
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v3
-
-      - name: Download Artifacts
-        run: |
-          mkdir -p /workspace/unkin/rpmbuilder/dist/almalinux/el8
-          export PREVIOUS_RUN_ID=$((GITHUB_RUN_NUMBER - 1))
-          curl -L -o /workspace/rpms.zip "https://git.unkin.net/${GITHUB_REPOSITORY}/actions/runs/${PREVIOUS_RUN_ID}/artifacts/rpms-8"
-          unzip /workspace/rpms.zip -d /workspace/unkin/rpmbuilder/dist/almalinux/el8
-
-      - name: Show RPMs
-        run: |
-          find /workspace -type f -name "*.rpm"
-
-      - name: Upload RPMs to Gitea
-        env:
-          DRONECI_PASSWORD: ${{ secrets.DRONECI_PASSWORD }}
-        run: |
-          for rpm in $(find /workspace/unkin/rpmbuilder/dist/almalinux/el8 -type f -name "*.rpm"); do
-            curl --user droneci:${{ secrets.DRONECI_PASSWORD }} --upload-file $rpm https://git.unkin.net/api/packages/unkin/rpm/almalinux/el8/upload
-          done
-
-  deploy-9:
-    runs-on: almalinux-8
-    container:
-      image: git.unkin.net/unkin/almalinux9-actionsdind:latest
-      options: --privileged
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v3
-
-      - name: Download Artifacts
-        run: |
-          mkdir -p /workspace/unkin/rpmbuilder/dist/almalinux/el9
-          export PREVIOUS_RUN_ID=$((GITHUB_RUN_NUMBER - 1))
-          curl -L -o /workspace/rpms.zip "https://git.unkin.net/${GITHUB_REPOSITORY}/actions/runs/${PREVIOUS_RUN_ID}/artifacts/rpms-9"
-          unzip /workspace/rpms.zip -d /workspace/unkin/rpmbuilder/dist/almalinux/el9
-
-      - name: Show RPMs
-        run: |
-          find /workspace -type f -name "*.rpm"
-
-      - name: Upload RPMs to Gitea
-        env:
-          DRONECI_PASSWORD: ${{ secrets.DRONECI_PASSWORD }}
-        run: |
-          for rpm in $(find /workspace/unkin/rpmbuilder/dist/almalinux/el9 -type f -name "*.rpm"); do
-            curl --user droneci:${{ secrets.DRONECI_PASSWORD }} --upload-file $rpm https://git.unkin.net/api/packages/unkin/rpm/almalinux/el9/upload
-          done

.pre-commit-config.yaml

@@ -3,12 +3,24 @@ repos:
   - repo: https://github.com/pre-commit/pre-commit-hooks
     rev: v4.5.0
     hooks:
-      - id: trailing-whitespace
+      - id: check-executables-have-shebangs
-      - id: end-of-file-fixer
+      - id: check-json
+      - id: check-added-large-files
+        args: ['--maxkb=500']
+      - id: check-merge-conflict
+      - id: check-shebang-scripts-are-executable
+      - id: check-symlinks
+      - id: check-toml
       - id: check-yaml
         args: [--allow-multiple-documents]
-      - id: check-merge-conflict
+      - id: detect-aws-credentials
+        args: [--allow-missing-credentials]
       - id: detect-private-key
+      - id: end-of-file-fixer
+      - id: forbid-new-submodules
+      - id: pretty-format-json
+      - id: trailing-whitespace
+
   - repo: https://github.com/adrienverge/yamllint.git
     rev: v1.37.1
     hooks:
@@ -18,6 +30,25 @@ repos:
             "-d {extends: relaxed, rules: {line-length: disable}}",
             "-s",
           ]
+
+  - repo: local
+    hooks:
+      - id: pytest
+        name: Run unit tests
+        entry: make test
+        language: system
+        types: [python]
+        pass_filenames: false
+
+  - repo: https://github.com/python-jsonschema/check-jsonschema
+    rev: 0.37.2
+    hooks:
+      - id: check-jsonschema
+        name: Validate RPM package metadata
+        files: ^rpms/[^/]+/metadata\.yaml$
+        args: [--schemafile, schema/metadata.json]
+        language_version: python3.11
+
   - repo: https://github.com/astral-sh/ruff-pre-commit
     rev: v0.14.7
     hooks:

.woodpecker/build-almalinux8.yaml

@@ -5,14 +5,22 @@ steps:
   - name: build rpms
     image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
     commands:
-      - mkdir -p /app/dist
+      - mkdir -p /woodpecker/rpms
-      - dnf install buildah -y
+      - ln -s /woodpecker/rpms /workspace
       - ./tools/build build-all --distro almalinux/el8 --buildah
     privileged: true
     backend_options:
       kubernetes:
         serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
+
   - name: show rpms
     image: git.unkin.net/unkin/almalinux8-base:latest
     commands:
-      - find /app/dist -type f -name "*.rpm"
+      - find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"

.woodpecker/build-almalinux9.yaml

@@ -5,14 +5,22 @@ steps:
   - name: build rpms
     image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
     commands:
-      - mkdir -p /app/dist/
+      - mkdir -p /woodpecker/rpms
-      - dnf install buildah -y
+      - ln -s /woodpecker/rpms /workspace
       - ./tools/build build-all --distro almalinux/el9 --buildah
     privileged: true
     backend_options:
       kubernetes:
         serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
+
   - name: show rpms
     image: git.unkin.net/unkin/almalinux9-base:latest
     commands:
-      - find /app/dist -type f -name "*.rpm"
+      - find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"

.woodpecker/build-fedora42.yaml

@@ -0,0 +1,26 @@
+when:
+  - event: pull_request
+
+steps:
+  - name: build rpms
+    image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    commands:
+      - mkdir -p /woodpecker/rpms
+      - ln -s /woodpecker/rpms /workspace
+      - ./tools/build build-all --distro fedora/42 --buildah
+    privileged: true
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
+
+  - name: show rpms
+    image: git.unkin.net/unkin/fedora42-base:latest
+    commands:
+      - find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"

.woodpecker/build-fedora43.yaml

@@ -0,0 +1,26 @@
+when:
+  - event: pull_request
+
+steps:
+  - name: build rpms
+    image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    commands:
+      - mkdir -p /woodpecker/rpms
+      - ln -s /woodpecker/rpms /workspace
+      - ./tools/build build-all --distro fedora/43 --buildah
+    privileged: true
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
+
+  - name: show rpms
+    image: git.unkin.net/unkin/fedora43-base:latest
+    commands:
+      - find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"

.woodpecker/build-fedora44.yaml

@@ -0,0 +1,26 @@
+when:
+  - event: pull_request
+
+steps:
+  - name: build rpms
+    image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    commands:
+      - mkdir -p /woodpecker/rpms
+      - ln -s /woodpecker/rpms /workspace
+      - ./tools/build build-all --distro fedora/44 --buildah
+    privileged: true
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
+
+  - name: show rpms
+    image: git.unkin.net/unkin/fedora44-base:latest
+    commands:
+      - find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"

.woodpecker/deploy-almalinux8.yaml

@@ -0,0 +1,50 @@
+when:
+  - event: push
+    branch: master
+
+steps:
+  - name: build-rpms
+    image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    commands:
+      - mkdir -p /woodpecker/rpms
+      - ln -s /woodpecker/rpms /workspace
+      - ./tools/build build-all --distro almalinux/el8 --buildah
+    privileged: true
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
+
+  - name: show-rpms
+    image: git.unkin.net/unkin/almalinux9-base:latest
+    commands:
+      - find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"
+    depends_on: [build-rpms]
+
+  - name: deploy-rpms
+    image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    commands:
+      - |
+        for rpm in $(find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"); do
+          curl --user droneci:$${DRONECI_PASSWORD} --upload-file $rpm https://git.unkin.net/api/packages/unkin/rpm/almalinux/el8/upload
+        done
+    environment:
+      DRONECI_PASSWORD:
+        from_secret: DRONECI_PASSWORD
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 128Mi
+            cpu: 100m
+          limits:
+            memory: 512Mi
+            cpu: 500m
+    depends_on: [build-rpms, show-rpms]

.woodpecker/deploy-almalinux9.yaml

@@ -0,0 +1,50 @@
+when:
+  - event: push
+    branch: master
+
+steps:
+  - name: build-rpms
+    image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    commands:
+      - mkdir -p /woodpecker/rpms
+      - ln -s /woodpecker/rpms /workspace
+      - ./tools/build build-all --distro almalinux/el9 --buildah
+    privileged: true
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
+
+  - name: show-rpms
+    image: git.unkin.net/unkin/almalinux9-base:latest
+    commands:
+      - find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"
+    depends_on: [build-rpms]
+
+  - name: deploy-rpms
+    image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    commands:
+      - |
+        for rpm in $(find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"); do
+          curl --user droneci:$${DRONECI_PASSWORD} --upload-file $rpm https://git.unkin.net/api/packages/unkin/rpm/almalinux/el9/upload
+        done
+    environment:
+      DRONECI_PASSWORD:
+        from_secret: DRONECI_PASSWORD
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 128Mi
+            cpu: 100m
+          limits:
+            memory: 512Mi
+            cpu: 500m
+    depends_on: [build-rpms, show-rpms]

.woodpecker/deploy-fedora42.yaml

@@ -0,0 +1,50 @@
+when:
+  - event: push
+    branch: master
+
+steps:
+  - name: build-rpms
+    image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    commands:
+      - mkdir -p /woodpecker/rpms
+      - ln -s /woodpecker/rpms /workspace
+      - ./tools/build build-all --distro fedora/42 --buildah
+    privileged: true
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
+
+  - name: show-rpms
+    image: git.unkin.net/unkin/fedora42-rpmbuilder:latest
+    commands:
+      - find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"
+    depends_on: [build-rpms]
+
+  - name: deploy-rpms
+    image: git.unkin.net/unkin/fedora42-rpmbuilder:latest
+    commands:
+      - |
+        for rpm in $(find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"); do
+          curl --user droneci:$${DRONECI_PASSWORD} --upload-file $rpm https://git.unkin.net/api/packages/unkin/rpm/fedora/42/upload
+        done
+    environment:
+      DRONECI_PASSWORD:
+        from_secret: DRONECI_PASSWORD
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 128Mi
+            cpu: 100m
+          limits:
+            memory: 512Mi
+            cpu: 500m
+    depends_on: [build-rpms, show-rpms]

.woodpecker/deploy-fedora43.yaml

@@ -0,0 +1,50 @@
+when:
+  - event: push
+    branch: master
+
+steps:
+  - name: build-rpms
+    image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    commands:
+      - mkdir -p /woodpecker/rpms
+      - ln -s /woodpecker/rpms /workspace
+      - ./tools/build build-all --distro fedora/43 --buildah
+    privileged: true
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
+
+  - name: show-rpms
+    image: git.unkin.net/unkin/fedora43-rpmbuilder:latest
+    commands:
+      - find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"
+    depends_on: [build-rpms]
+
+  - name: deploy-rpms
+    image: git.unkin.net/unkin/fedora43-rpmbuilder:latest
+    commands:
+      - |
+        for rpm in $(find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"); do
+          curl --user droneci:$${DRONECI_PASSWORD} --upload-file $rpm https://git.unkin.net/api/packages/unkin/rpm/fedora/43/upload
+        done
+    environment:
+      DRONECI_PASSWORD:
+        from_secret: DRONECI_PASSWORD
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 128Mi
+            cpu: 100m
+          limits:
+            memory: 512Mi
+            cpu: 500m
+    depends_on: [build-rpms, show-rpms]

.woodpecker/deploy-fedora44.yaml

@@ -0,0 +1,50 @@
+when:
+  - event: push
+    branch: master
+
+steps:
+  - name: build-rpms
+    image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    commands:
+      - mkdir -p /woodpecker/rpms
+      - ln -s /woodpecker/rpms /workspace
+      - ./tools/build build-all --distro fedora/44 --buildah
+    privileged: true
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
+
+  - name: show-rpms
+    image: git.unkin.net/unkin/fedora44-rpmbuilder:latest
+    commands:
+      - find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"
+    depends_on: [build-rpms]
+
+  - name: deploy-rpms
+    image: git.unkin.net/unkin/fedora44-rpmbuilder:latest
+    commands:
+      - |
+        for rpm in $(find /woodpecker/src/git.unkin.net/unkin/rpmbuilder/ -type f -name "*.rpm"); do
+          curl --user droneci:$${DRONECI_PASSWORD} --upload-file $rpm https://git.unkin.net/api/packages/unkin/rpm/fedora/44/upload
+        done
+    environment:
+      DRONECI_PASSWORD:
+        from_secret: DRONECI_PASSWORD
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 128Mi
+            cpu: 100m
+          limits:
+            memory: 512Mi
+            cpu: 500m
+    depends_on: [build-rpms, show-rpms]

Makefile

@@ -11,7 +11,7 @@ DISTRO ?= almalinux/el9
 PACKAGES := $(shell find $(ROOT_DIR)/rpms -mindepth 1 -maxdepth 1 -type d -exec test -f {}/metadata.yaml \; -print | xargs -n1 basename | sort)
 
 # Default target to build all packages
-.PHONY: all list build clean
+.PHONY: all list build clean test
 all: build-all
 
 # List all available packages
@@ -47,6 +47,10 @@ dry-run:
 	@echo "Dry run - showing what would be built for distro $(DISTRO):"
 	$(BUILD_TOOL) build-all --distro $(DISTRO) --dry-run
 
+# Run unit tests
+test:
+	@uv run --group dev pytest tests/ -q; rc=$$?; [ $$rc -eq 5 ] && exit 0 || exit $$rc
+
 # Clean target
 clean:
 	@echo "Cleaning build artifacts..."

pyproject.toml

@@ -0,0 +1,11 @@
+[project]
+name = "rpmbuilder"
+version = "0.1.0"
+requires-python = ">=3.11"
+
+[dependency-groups]
+dev = [
+    "pytest>=8",
+    "jsonschema>=4",
+    "pyyaml>=6",
+]

rpms/act_runner/metadata.yaml

@@ -1,18 +1,20 @@
----
+name: act_runner
+github: unknown/act_runner
+description: A runner for Gitea based on act.
 arch: amd64
+platform: linux
+maintainer: Gitea
+homepage: https://gitea.com/gitea/act_runner
+license: MIT
+dist_tag: true
 builds:
 - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: '1'
-    repository: [almalinux/el8]
+  repository:
+  - almalinux/el8
   version: 0.2.12
 - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: '1'
-    repository: [almalinux/el9]
+  repository:
+  - almalinux/el9
   version: 0.2.12
-description: A runner for Gitea based on act.
-github: unknown/act_runner
-homepage: https://gitea.com/gitea/act_runner
-license: MIT
-maintainer: Gitea
-name: act_runner
-platform: linux

rpms/bind_exporter/metadata.yaml

@@ -1,18 +1,20 @@
----
+name: bind_exporter
+github: prometheus-community/bind_exporter
+description: Prometheus exporter for BIND
 arch: amd64
+platform: linux
+maintainer: Prometheus
+homepage: https://github.com/prometheus-community/bind_exporter
+license: Apache-2.0 license
+dist_tag: true
 builds:
 - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: '1'
-    repository: [almalinux/el8]
+  repository:
+  - almalinux/el8
   version: 0.8.0
 - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: '1'
-    repository: [almalinux/el9]
+  repository:
+  - almalinux/el9
   version: 0.8.0
-description: Prometheus exporter for BIND
-github: prometheus-community/bind_exporter
-homepage: https://github.com/prometheus-community/bind_exporter
-license: Apache-2.0 license
-maintainer: Prometheus
-name: bind_exporter
-platform: linux

rpms/boilerplate/metadata.yaml

@@ -7,14 +7,15 @@ platform: linux
 maintainer: Gruntwork
 homepage: https://github.com/gruntwork-io/boilerplate
 license: MIT
+dist_tag: true
 builds:
 - repository:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 0.10.1
+  version: 0.15.0
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 0.10.1
+  version: 0.15.0

rpms/claude-code/metadata.yaml

@@ -0,0 +1,19 @@
+name: claude-code
+description: Claude Code - Anthropic's agentic AI coding tool
+arch: amd64
+platform: linux
+maintainer: Anthropic
+homepage: https://claude.ai/code
+license: Proprietary
+dist_tag: true
+builds:
+- image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  repository:
+  - almalinux/el8
+  version: 2.1.156
+- image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  repository:
+  - almalinux/el9
+  version: 2.1.156

rpms/claude-code/resources/build.sh

@@ -0,0 +1,13 @@
+#!/usr/bin/bash
+
+set -e
+
+# Download claude-code binary
+wget -O /app/claude https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/claude-ai/claude-code-releases/${PACKAGE_VERSION}/linux-x64/claude
+chmod +x /app/claude
+
+# Process the nfpm.yaml template with environment variables
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+# Build the RPM
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/claude-code/resources/nfpm.yaml

@@ -0,0 +1,33 @@
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - claude-code
+  - claude
+
+provides:
+  - claude-code
+  - claude
+
+# Files to include in the package
+contents:
+  - src: /app/claude
+    dst: /usr/bin/claude
+    file_info:
+      mode: 0755
+      owner: root
+      group: root

rpms/cni-plugins/metadata.yaml

@@ -7,14 +7,15 @@ platform: linux
 maintainer: ContainerNetworking
 homepage: https://github.com/containernetworking/plugins
 license: Apache-2.0
+dist_tag: true
 builds:
 - repository:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 1.9.0
+  version: 1.9.1
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 1.9.0
+  version: 1.9.1

rpms/code-server/metadata.yaml

@@ -0,0 +1,20 @@
+name: code-server
+github: coder/code-server
+description: VS Code in the browser.
+arch: amd64
+platform: linux
+maintainer: Coder
+homepage: https://github.com/coder/code-server
+license: MIT
+dist_tag: true
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 4.117.0
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 4.117.0

rpms/code-server/resources/build.sh

@@ -0,0 +1,6 @@
+#!/usr/bin/bash
+
+set -e
+
+curl -L -o /app/dist/code-server-${PACKAGE_VERSION}-${PACKAGE_RELEASE}.x86_64.rpm \
+  https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/coder/code-server/releases/download/v${PACKAGE_VERSION}/code-server-${PACKAGE_VERSION}-amd64.rpm

rpms/code-server/resources/nfpm.yaml

@@ -0,0 +1,14 @@
+# nfpm.yaml - unused, RPM is downloaded directly in build.sh
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}

rpms/consul-cni/metadata.yaml

@@ -1,18 +1,21 @@
----
+name: consul-cni
+github: unknown/consul-cni
+description: Plugin for Consul on Kubernetes to allow configuring traffic redirection
+  rules without escalated container privileges.
 arch: amd64
+platform: linux
+maintainer: Hashicorp
+homepage: https://hashicorp.com
+license: Mozilla Public License, version 2.0
+dist_tag: true
 builds:
 - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: '1'
-    repository: [almalinux/el8]
+  repository:
+  - almalinux/el8
   version: 1.7.1
 - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: '1'
-    repository: [almalinux/el9]
+  repository:
+  - almalinux/el9
   version: 1.7.1
-description: Plugin for Consul on Kubernetes to allow configuring traffic redirection rules without escalated container privileges.
-github: unknown/consul-cni
-homepage: https://hashicorp.com
-license: Mozilla Public License, version 2.0
-maintainer: Hashicorp
-name: consul-cni
-platform: linux

rpms/consul/metadata.yaml

@@ -7,14 +7,22 @@ platform: linux
 maintainer: HashiCorp
 homepage: https://github.com/hashicorp/consul
 license: BUSL-1.1
+dist_tag: true
 builds:
 - repository:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 1.22.2
+  version: 1.22.7
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 1.22.2
+  version: 1.22.7
+- repository:
+  - fedora/42
+  - fedora/43
+  - fedora/44
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 1.22.7

rpms/etcd/metadata.yaml

@@ -7,6 +7,7 @@ platform: linux
 maintainer: https://etcd.io/
 homepage: https://etcd.io/
 license: Apache-2.0
+dist_tag: true
 builds:
 - repository:
   - almalinux/el8

rpms/exportarr/metadata.yaml

@@ -7,6 +7,7 @@ platform: linux
 maintainer: onedr0p
 homepage: https://github.com/onedr0p/exportarr
 license: MIT license
+dist_tag: true
 builds:
 - repository:
   - almalinux/el8

rpms/frr_exporter/metadata.yaml

@@ -6,14 +6,15 @@ platform: linux
 maintainer: Prometheus
 homepage: https://github.com/tynany/frr_exporter
 license: MIT
+dist_tag: true
 builds:
 - repository:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 1.9.0
+  version: 1.11.0
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 1.9.0
+  version: 1.11.0

rpms/g10k/metadata.yaml

@@ -1,18 +1,20 @@
----
+name: g10k
+github: xorpaul/g10k
+description: An r10k fork written in Go, designed to work somwhat similar like puppetlabs/r10k.
 arch: amd64
+platform: linux
+maintainer: xorpaul
+homepage: https://github.com/xorpaul/g10k
+license: Apache2.0
+dist_tag: true
 builds:
 - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: '1'
-    repository: [almalinux/el8]
+  repository:
+  - almalinux/el8
   version: 0.9.10
 - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: '1'
-    repository: [almalinux/el9]
+  repository:
+  - almalinux/el9
   version: 0.9.10
-description: An r10k fork written in Go, designed to work somwhat similar like puppetlabs/r10k.
-github: xorpaul/g10k
-homepage: https://github.com/xorpaul/g10k
-license: Apache2.0
-maintainer: xorpaul
-name: g10k
-platform: linux

rpms/git-delta/metadata.yaml

@@ -0,0 +1,20 @@
+name: git-delta
+github: dandavison/delta
+description: A syntax-highlighting pager for git, diff, grep, and blame output.
+arch: amd64
+platform: linux
+maintainer: dandavison
+homepage: https://github.com/dandavison/delta
+license: MIT
+dist_tag: true
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 0.19.2
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 0.19.2

rpms/git-delta/resources/build.sh

@@ -0,0 +1,12 @@
+#!/usr/bin/bash
+
+set -e
+
+# Note: delta releases use plain version tags (no v prefix)
+wget -O /app/delta-${PACKAGE_VERSION}-x86_64-unknown-linux-musl.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/dandavison/delta/releases/download/${PACKAGE_VERSION}/delta-${PACKAGE_VERSION}-x86_64-unknown-linux-musl.tar.gz
+tar xf /app/delta-${PACKAGE_VERSION}-x86_64-unknown-linux-musl.tar.gz
+mv /app/delta-${PACKAGE_VERSION}-x86_64-unknown-linux-musl/delta /app/delta
+
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/git-delta/resources/nfpm.yaml

@@ -0,0 +1,30 @@
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - git-delta
+
+provides:
+  - git-delta
+
+contents:
+  - src: /app/delta
+    dst: /usr/bin/delta
+    file_info:
+      mode: 0755
+      owner: root
+      group: root

rpms/hadolint/metadata.yaml

@@ -0,0 +1,21 @@
+name: hadolint
+github: hadolint/hadolint
+description: A smarter Dockerfile linter that helps you build best practice Docker
+  images.
+arch: amd64
+platform: linux
+maintainer: hadolint
+homepage: https://github.com/hadolint/hadolint
+license: GPL-3.0
+dist_tag: true
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 2.14.0
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 2.14.0

rpms/hadolint/resources/build.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/bash
+
+set -e
+
+wget -O /app/hadolint https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/hadolint/hadolint/releases/download/v${PACKAGE_VERSION}/hadolint-linux-x86_64
+chmod +x /app/hadolint
+
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/hadolint/resources/nfpm.yaml

@@ -0,0 +1,30 @@
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - hadolint
+
+provides:
+  - hadolint
+
+contents:
+  - src: /app/hadolint
+    dst: /usr/bin/hadolint
+    file_info:
+      mode: 0755
+      owner: root
+      group: root

rpms/helm/metadata.yaml

@@ -6,14 +6,15 @@ platform: linux
 maintainer: Helm Contributors
 homepage: https://github.com/helm/helm
 license: Apache-2.0 license
+dist_tag: true
 builds:
 - repository:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 4.0.5
+  version: 4.1.4
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 4.0.5
+  version: 4.1.4

rpms/helmfile/metadata.yaml

@@ -8,14 +8,15 @@ platform: linux
 maintainer: Helmfile Contributors
 homepage: https://github.com/helmfile/helmfile
 license: MIT
+dist_tag: true
 builds:
 - repository:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 1.2.3
+  version: 1.4.4
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 1.2.3
+  version: 1.4.4

rpms/incus/metadata.yaml

@@ -6,9 +6,10 @@ platform: linux
 maintainer: unkin
 homepage: https://linuxcontainers.org/incus/
 license: Apache-2.0
+dist_tag: true
 builds:
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 6.20.0
+  version: 6.23.0

rpms/jellyfin-ffmpeg-bin/metadata.yaml

@@ -6,6 +6,7 @@ platform: linux
 maintainer: unkin
 homepage: https://github.com/jellyfin/jellyfin-ffmpeg
 license: GPL-3.0
+dist_tag: false
 builds:
 - repository:
   - almalinux/el8

rpms/jellyfin-server/metadata.yaml

@@ -1,13 +1,15 @@
----
+name: jellyfin-server
+github: unknown/jellyfin-server
+description: jellyfin-server package
+dist_tag: false
 builds:
 - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: '1'
-    repository: [almalinux/el8]
+  repository:
+  - almalinux/el8
   version: 10.10.7
 - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: '1'
-    repository: [almalinux/el9]
+  repository:
+  - almalinux/el9
   version: 10.10.7
-description: jellyfin-server package
-github: unknown/jellyfin-server
-name: jellyfin-server

rpms/jellyfin-web/metadata.yaml

@@ -1,13 +1,15 @@
----
+name: jellyfin-web
+github: unknown/jellyfin-web
+description: jellyfin-web package
+dist_tag: false
 builds:
 - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: '1'
-    repository: [almalinux/el8]
+  repository:
+  - almalinux/el8
   version: 10.10.7
 - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: '1'
-    repository: [almalinux/el9]
+  repository:
+  - almalinux/el9
   version: 10.10.7
-description: jellyfin-web package
-github: unknown/jellyfin-web
-name: jellyfin-web

rpms/jsonnet-language-server/metadata.yaml

@@ -1,18 +1,21 @@
----
+name: jsonnet-language-server
-arch: amd64
-builds:
-  - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-    release: '1'
-    repository: [almalinux/el8]
-    version: 0.16.0
-  - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-    release: '1'
-    repository: [almalinux/el9]
-    version: 0.16.0
-description: Jsonnet Language Server Protocol implementation for the Jsonnet templating language.
 github: grafana/jsonnet-language-server
+description: Jsonnet Language Server Protocol implementation for the Jsonnet templating
+  language.
+arch: amd64
+platform: linux
+maintainer: Grafana Labs
 homepage: https://github.com/grafana/jsonnet-language-server
 license: Apache-2.0
-maintainer: Grafana Labs
+dist_tag: true
-name: jsonnet-language-server
+builds:
-platform: linux
+- image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  repository:
+  - almalinux/el8
+  version: 0.17.0
+- image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  repository:
+  - almalinux/el9
+  version: 0.17.0

rpms/jsonnet-lint/metadata.yaml

@@ -1,18 +1,20 @@
----
+name: jsonnet-lint
-arch: amd64
-builds:
-  - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-    release: '1'
-    repository: [almalinux/el8]
-    version: 0.21.0
-  - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-    release: '1'
-    repository: [almalinux/el9]
-    version: 0.21.0
-description: Linter for Jsonnet
 github: google/go-jsonnet
+description: Linter for Jsonnet
+arch: amd64
+platform: linux
+maintainer: Google
 homepage: https://github.com/google/go-jsonnet
 license: Apache-2.0
-maintainer: Google
+dist_tag: true
-name: jsonnet-lint
+builds:
-platform: linux
+- image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  repository:
+  - almalinux/el8
+  version: 0.22.0
+- image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  repository:
+  - almalinux/el9
+  version: 0.22.0

rpms/jsonnet/metadata.yaml

@@ -1,18 +1,20 @@
----
+name: jsonnet
-arch: amd64
-builds:
-  - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-    release: '1'
-    repository: [almalinux/el8]
-    version: 0.21.0
-  - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-    release: '1'
-    repository: [almalinux/el9]
-    version: 0.21.0
-description: A data templating language
 github: google/go-jsonnet
+description: A data templating language
+arch: amd64
+platform: linux
+maintainer: Google
 homepage: https://github.com/google/go-jsonnet
 license: Apache-2.0
-maintainer: Google
+dist_tag: true
-name: jsonnet
+builds:
-platform: linux
+- image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  repository:
+  - almalinux/el8
+  version: 0.22.0
+- image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  repository:
+  - almalinux/el9
+  version: 0.22.0

rpms/kubecolor/metadata.yaml

@@ -0,0 +1,20 @@
+name: kubecolor
+github: kubecolor/kubecolor
+description: Colorize your kubectl output
+arch: amd64
+platform: linux
+maintainer: kubecolor
+homepage: https://github.com/kubecolor/kubecolor
+license: Apache-2.0
+dist_tag: true
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 0.6.0
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 0.6.0

rpms/kubecolor/resources/build.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/bash
+
+set -e
+
+wget -O /app/kubecolor_${PACKAGE_VERSION}_linux_amd64.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/kubecolor/kubecolor/releases/download/v${PACKAGE_VERSION}/kubecolor_${PACKAGE_VERSION}_linux_amd64.tar.gz
+tar xf /app/kubecolor_${PACKAGE_VERSION}_linux_amd64.tar.gz -C /app/ kubecolor
+
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/kubecolor/resources/nfpm.yaml

@@ -0,0 +1,30 @@
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - kubecolor
+
+provides:
+  - kubecolor
+
+contents:
+  - src: /app/kubecolor
+    dst: /usr/bin/kubecolor
+    file_info:
+      mode: 0755
+      owner: root
+      group: root

rpms/kubeconform/metadata.yaml

@@ -6,6 +6,7 @@ platform: linux
 maintainer: Yann Hamon
 homepage: https://github.com/yannh/kubeconform
 license: Apache-2.0
+dist_tag: true
 builds:
 - repository:
   - almalinux/el8

rpms/kubectx/metadata.yaml

@@ -0,0 +1,20 @@
+name: kubectx
+github: ahmetb/kubectx
+description: Faster way to switch between clusters and namespaces in kubectl.
+arch: amd64
+platform: linux
+maintainer: ahmetb
+homepage: https://github.com/ahmetb/kubectx
+license: Apache-2.0
+dist_tag: true
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 0.11.0
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 0.11.0

rpms/kubectx/resources/build.sh

@@ -0,0 +1,13 @@
+#!/usr/bin/bash
+
+set -e
+
+wget -O /app/kubectx_v${PACKAGE_VERSION}_linux_x86_64.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/ahmetb/kubectx/releases/download/v${PACKAGE_VERSION}/kubectx_v${PACKAGE_VERSION}_linux_x86_64.tar.gz
+wget -O /app/kubens_v${PACKAGE_VERSION}_linux_x86_64.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/ahmetb/kubectx/releases/download/v${PACKAGE_VERSION}/kubens_v${PACKAGE_VERSION}_linux_x86_64.tar.gz
+
+tar xf /app/kubectx_v${PACKAGE_VERSION}_linux_x86_64.tar.gz -C /app/ kubectx
+tar xf /app/kubens_v${PACKAGE_VERSION}_linux_x86_64.tar.gz -C /app/ kubens
+
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/kubectx/resources/nfpm.yaml

@@ -0,0 +1,38 @@
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - kubectx
+  - kubens
+
+provides:
+  - kubectx
+  - kubens
+
+contents:
+  - src: /app/kubectx
+    dst: /usr/bin/kubectx
+    file_info:
+      mode: 0755
+      owner: root
+      group: root
+  - src: /app/kubens
+    dst: /usr/bin/kubens
+    file_info:
+      mode: 0755
+      owner: root
+      group: root

rpms/kustomize/metadata.yaml

@@ -1,4 +1,3 @@
----
 name: kustomize
 github: kubernetes-sigs/kustomize
 description: Kubernetes native configuration management
@@ -7,13 +6,16 @@ platform: linux
 maintainer: kubernetes-sigs
 homepage: https://github.com/kubernetes-sigs/kustomize
 license: Apache-2.0
+dist_tag: true
 github_release_pattern: ^kustomize/v.*
 builds:
-  - repository: [almalinux/el8]
+- repository:
+  - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: '1'
   version: 5.8.1
-  - repository: [almalinux/el9]
+- repository:
+  - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: '1'
   version: 5.8.1

rpms/lazydocker/metadata.yaml

@@ -0,0 +1,20 @@
+name: lazydocker
+github: jesseduffield/lazydocker
+description: The lazier way to manage everything docker.
+arch: amd64
+platform: linux
+maintainer: jesseduffield
+homepage: https://github.com/jesseduffield/lazydocker
+license: MIT
+dist_tag: true
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 0.25.2
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 0.25.2

rpms/lazydocker/resources/build.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/bash
+
+set -e
+
+wget -O /app/lazydocker_${PACKAGE_VERSION}_Linux_x86_64.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/jesseduffield/lazydocker/releases/download/v${PACKAGE_VERSION}/lazydocker_${PACKAGE_VERSION}_Linux_x86_64.tar.gz
+tar xf /app/lazydocker_${PACKAGE_VERSION}_Linux_x86_64.tar.gz -C /app/ lazydocker
+
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/lazydocker/resources/nfpm.yaml

@@ -0,0 +1,30 @@
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - lazydocker
+
+provides:
+  - lazydocker
+
+contents:
+  - src: /app/lazydocker
+    dst: /usr/bin/lazydocker
+    file_info:
+      mode: 0755
+      owner: root
+      group: root

rpms/libfoundationdb/metadata.yaml

@@ -1,18 +1,20 @@
----
+name: libfoundationdb
+github: apple/foundationdb
+description: FoundationDB client library - Shared library for FoundationDB applications
 arch: amd64
+platform: linux
+maintainer: FoundationDB Community
+homepage: https://github.com/apple/foundationdb
+license: Apache-2.0
+dist_tag: true
 builds:
 - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: '1'
-    repository: [almalinux/el8]
+  repository:
+  - almalinux/el8
   version: 7.3.71
 - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: '1'
-    repository: [almalinux/el9]
+  repository:
+  - almalinux/el9
   version: 7.3.71
-description: FoundationDB client library - Shared library for FoundationDB applications
-github: apple/foundationdb
-homepage: https://github.com/apple/foundationdb
-license: Apache-2.0
-maintainer: FoundationDB Community
-name: libfoundationdb
-platform: linux

rpms/neovim-glibc-2.17/metadata.yaml

@@ -0,0 +1,21 @@
+name: neovim-glibc-2.17
+github: neovim/neovim-releases
+description: Vim-fork focused on extensibility and usability (glibc 2.17 compatible
+  build).
+arch: amd64
+platform: linux
+maintainer: neovim
+homepage: https://neovim.io
+license: Apache-2.0
+dist_tag: true
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 0.12.2
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 0.12.2

rpms/neovim-glibc-2.17/resources/build.sh

@@ -0,0 +1,11 @@
+#!/usr/bin/bash
+
+set -e
+
+wget -O /app/nvim-linux-x86_64.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/neovim/neovim-releases/releases/download/v${PACKAGE_VERSION}/nvim-linux-x86_64.tar.gz
+tar xf /app/nvim-linux-x86_64.tar.gz
+mv /app/nvim-linux-x86_64/bin/nvim /app/nvim
+
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/neovim-glibc-2.17/resources/nfpm.yaml

@@ -0,0 +1,35 @@
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - neovim-glibc-2.17
+  - neovim
+
+provides:
+  - neovim-glibc-2.17
+  - nvim
+
+conflicts:
+  - neovim
+
+contents:
+  - src: /app/nvim
+    dst: /usr/bin/nvim
+    file_info:
+      mode: 0755
+      owner: root
+      group: root

rpms/neovim/metadata.yaml

@@ -0,0 +1,20 @@
+name: neovim
+github: neovim/neovim
+description: Vim-fork focused on extensibility and usability.
+arch: amd64
+platform: linux
+maintainer: neovim
+homepage: https://neovim.io
+license: Apache-2.0
+dist_tag: true
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 0.12.2
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 0.12.2

rpms/neovim/resources/build.sh

@@ -0,0 +1,11 @@
+#!/usr/bin/bash
+
+set -e
+
+wget -O /app/nvim-linux-x86_64.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/neovim/neovim/releases/download/v${PACKAGE_VERSION}/nvim-linux-x86_64.tar.gz
+tar xf /app/nvim-linux-x86_64.tar.gz
+mv /app/nvim-linux-x86_64/bin/nvim /app/nvim
+
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/neovim/resources/nfpm.yaml

@@ -0,0 +1,35 @@
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - neovim
+  - neovim-glibc-2.17
+
+provides:
+  - neovim
+  - nvim
+
+conflicts:
+  - neovim-glibc-2.17
+
+contents:
+  - src: /app/nvim
+    dst: /usr/bin/nvim
+    file_info:
+      mode: 0755
+      owner: root
+      group: root

rpms/nfpm/metadata.yaml

@@ -7,14 +7,22 @@ platform: linux
 maintainer: GoReleaser
 homepage: https://nfpm.goreleaser.com/
 license: MIT
+dist_tag: true
 builds:
 - repository:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 2.44.1
+  version: 2.46.3
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 2.44.1
+  version: 2.46.3
+- repository:
+  - fedora/42
+  - fedora/43
+  - fedora/44
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 2.46.3

rpms/node_exporter/metadata.yaml

@@ -6,14 +6,15 @@ platform: linux
 maintainer: Prometheus
 homepage: https://github.com/prometheus/node_exporter
 license: Apache-2.0 license
+dist_tag: true
 builds:
 - repository:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 1.10.2
+  version: 1.11.1
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 1.10.2
+  version: 1.11.1

rpms/nomad-autoscaler/metadata.yaml

@@ -8,14 +8,15 @@ platform: linux
 maintainer: Hashicorp
 homepage: https://github.com/hashicorp/nomad-autoscaler
 license: Mozilla Public License, version 2.0
+dist_tag: true
 builds:
 - repository:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 0.4.8
+  version: 0.4.9
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 0.4.8
+  version: 0.4.9

rpms/nomad/metadata.yaml

@@ -1,18 +1,21 @@
----
+name: nomad
+github: unknown/nomad
+description: A simple and flexible scheduler and orchestrator to deploy and manage
+  containers and non-containerized applications across on-premises and clouds at scale.
 arch: amd64
+platform: linux
+maintainer: HashiCorp
+homepage: https://www.nomadproject.io/
+license: BUSL-1.1
+dist_tag: true
 builds:
 - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: '1'
-    repository: [almalinux/el8]
+  repository:
+  - almalinux/el8
   version: 1.10.1
 - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: '1'
-    repository: [almalinux/el9]
+  repository:
+  - almalinux/el9
   version: 1.10.1
-description: A simple and flexible scheduler and orchestrator to deploy and manage containers and non-containerized applications across on-premises and clouds at scale.
-github: unknown/nomad
-homepage: https://www.nomadproject.io/
-license: BUSL-1.1
-maintainer: HashiCorp
-name: nomad
-platform: linux

rpms/nzbget/metadata.yaml

@@ -7,14 +7,15 @@ platform: linux
 maintainer: nzbgetcom
 homepage: https://github.com/nzbgetcom/nzbget
 license: GPL-2.0
+dist_tag: true
 builds:
 - repository:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-  release: 2
+  release: 1
-  version: '25.4'
+  version: '26.1'
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-  release: 2
+  release: 1
-  version: '25.4'
+  version: '26.1'

rpms/nzbget_exporter/metadata.yaml

@@ -1,18 +1,20 @@
----
+name: nzbget_exporter
+github: frebib/nzbget-exporter
+description: Prometheus exporter for NZBGet
 arch: amd64
+platform: linux
+maintainer: Prometheus
+homepage: https://github.com/frebib/nzbget-exporter
+license: MIT
+dist_tag: true
 builds:
 - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: '1'
-    repository: [almalinux/el8]
+  repository:
+  - almalinux/el8
   version: 2025.08.03
 - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: '1'
-    repository: [almalinux/el9]
+  repository:
+  - almalinux/el9
   version: 2025.08.03
-description: Prometheus exporter for NZBGet
-github: frebib/nzbget-exporter
-homepage: https://github.com/frebib/nzbget-exporter
-license: MIT
-maintainer: Prometheus
-name: nzbget_exporter
-platform: linux

rpms/openbao-plugin-secret-consul/metadata.yaml

@@ -1,12 +1,13 @@
 name: openbao-plugin-secret-consul
 github: openbao/openbao-plugins
-github_release_pattern: "^secrets-consul-v.*"
 description: OpenBao secrets engine plugin for HashiCorp Consul
 arch: amd64
 platform: linux
 maintainer: OpenBao Community
 homepage: https://github.com/openbao/openbao-plugins
 license: MPL-2.0
+dist_tag: true
+github_release_pattern: ^secrets-consul-v.*
 builds:
 - repository:
   - almalinux/el8

rpms/openbao-plugin-secret-nomad/metadata.yaml

@@ -1,12 +1,13 @@
 name: openbao-plugin-secret-nomad
 github: openbao/openbao-plugins
-github_release_pattern: "^secrets-nomad-v.*"
 description: OpenBao secrets engine plugin for HashiCorp Nomad
 arch: amd64
 platform: linux
 maintainer: OpenBao Community
 homepage: https://github.com/openbao/openbao-plugins
 license: MPL-2.0
+dist_tag: true
+github_release_pattern: ^secrets-nomad-v.*
 builds:
 - repository:
   - almalinux/el8

rpms/openbao-plugins/metadata.yaml

@@ -6,6 +6,7 @@ platform: linux
 maintainer: OpenBao Community
 homepage: https://github.com/openbao/openbao-plugins
 license: MPL-2.0
+dist_tag: true
 builds:
 - repository:
   - almalinux/el8

rpms/packer/metadata.yaml

@@ -6,14 +6,15 @@ platform: linux
 maintainer: HashiCorp
 homepage: https://www.packer.io/
 license: BUSL-1.1
+dist_tag: true
 builds:
 - repository:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 1.14.3
+  version: 1.15.3
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 1.14.3
+  version: 1.15.3

rpms/pgbouncer_exporter/metadata.yaml

@@ -1,18 +1,20 @@
----
+name: pgbouncer_exporter
-arch: amd64
-builds:
-  - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-    release: '1'
-    repository: [almalinux/el8]
-    version: 0.11.0
-  - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-    release: '1'
-    repository: [almalinux/el9]
-    version: 0.11.0
-description: Prometheus exporter for PgBouncer
 github: prometheus-community/pgbouncer_exporter
+description: Prometheus exporter for PgBouncer
+arch: amd64
+platform: linux
+maintainer: Prometheus
 homepage: https://github.com/prometheus-community/pgbouncer_exporter
 license: Apache-2.0 license
-maintainer: Prometheus
+dist_tag: true
-name: pgbouncer_exporter
+builds:
-platform: linux
+- image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  repository:
+  - almalinux/el8
+  version: 0.12.0
+- image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  repository:
+  - almalinux/el9
+  version: 0.12.0

rpms/postgres_exporter/metadata.yaml

@@ -6,14 +6,15 @@ platform: linux
 maintainer: Prometheus
 homepage: https://github.com/prometheus-community/postgres_exporter
 license: Apache-2.0 license
+dist_tag: true
 builds:
 - repository:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 0.18.1
+  version: 0.19.1
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 0.18.1
+  version: 0.19.1

rpms/puppet-initial/metadata.yaml

@@ -1,17 +1,19 @@
----
+name: puppet-initial
+github: unknown/puppet-initial
+description: A script and service to initialise puppet for the unkin environmnet.
 arch: amd64
+platform: linux
+maintainer: UNKIN
+license: MIT
+dist_tag: true
 builds:
 - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: '1'
-    repository: [almalinux/el8]
+  repository:
+  - almalinux/el8
   version: 1.0.3
 - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: '1'
-    repository: [almalinux/el9]
+  repository:
+  - almalinux/el9
   version: 1.0.3
-description: A script and service to initialise puppet for the unkin environmnet.
-github: unknown/puppet-initial
-license: MIT
-maintainer: UNKIN
-name: puppet-initial
-platform: linux

rpms/puppetdb_exporter/metadata.yaml

@@ -1,18 +1,20 @@
----
+name: puppetdb_exporter
+github: camptocamp/prometheus-puppetdb-exporter
+description: Prometheus exporter for PuppetDB
 arch: amd64
+platform: linux
+maintainer: Comptocamp
+homepage: https://github.com/camptocamp/prometheus-puppetdb-exporter
+license: Apache 2.0 License
+dist_tag: true
 builds:
 - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: '1'
-    repository: [almalinux/el8]
+  repository:
+  - almalinux/el8
   version: 1.1.0
 - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: '1'
-    repository: [almalinux/el9]
+  repository:
+  - almalinux/el9
   version: 1.1.0
-description: Prometheus exporter for PuppetDB
-github: camptocamp/prometheus-puppetdb-exporter
-homepage: https://github.com/camptocamp/prometheus-puppetdb-exporter
-license: Apache 2.0 License
-maintainer: Comptocamp
-name: puppetdb_exporter
-platform: linux

rpms/ruff/metadata.yaml

@@ -6,14 +6,15 @@ platform: linux
 maintainer: Astral.sh
 homepage: https://docs.astral.sh/ruff/
 license: Apache-2.0
+dist_tag: true
 builds:
 - repository:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 0.14.10
+  version: 0.15.12
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 0.14.10
+  version: 0.15.12

rpms/sops/metadata.yaml

@@ -0,0 +1,20 @@
+name: sops
+github: getsops/sops
+description: Simple and flexible tool for managing secrets.
+arch: amd64
+platform: linux
+maintainer: getsops
+homepage: https://github.com/getsops/sops
+license: MPL-2.0
+dist_tag: true
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 3.12.2
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 3.12.2

rpms/sops/resources/build.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/bash
+
+set -e
+
+wget -O /app/sops https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/getsops/sops/releases/download/v${PACKAGE_VERSION}/sops-v${PACKAGE_VERSION}.linux.amd64
+chmod +x /app/sops
+
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/sops/resources/nfpm.yaml

@@ -0,0 +1,30 @@
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - sops
+
+provides:
+  - sops
+
+contents:
+  - src: /app/sops
+    dst: /usr/bin/sops
+    file_info:
+      mode: 0755
+      owner: root
+      group: root

rpms/stalwart-cli/metadata.yaml

@@ -6,6 +6,7 @@ platform: linux
 maintainer: Stalwart Labs
 homepage: https://stalw.art
 license: AGPL-3.0
+dist_tag: true
 builds:
 - repository:
   - almalinux/el8

rpms/stalwart-foundationdb/metadata.yaml

@@ -7,14 +7,15 @@ platform: linux
 maintainer: Stalwart Labs
 homepage: https://stalw.art
 license: AGPL-3.0
+dist_tag: true
 builds:
 - repository:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 0.15.3
+  version: 0.16.3
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 0.15.3
+  version: 0.16.3

rpms/stalwart/metadata.yaml

@@ -6,14 +6,15 @@ platform: linux
 maintainer: Stalwart Labs
 homepage: https://stalw.art
 license: AGPL-3.0
+dist_tag: true
 builds:
 - repository:
   - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
   release: 1
-  version: 0.15.3
+  version: 0.16.3
 - repository:
   - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
   release: 1
-  version: 0.15.3
+  version: 0.16.3

rpms/starship/metadata.yaml

@@ -0,0 +1,21 @@
+name: starship
+github: starship/starship
+description: The minimal, blazing-fast, and infinitely customizable prompt for any
+  shell.
+arch: amd64
+platform: linux
+maintainer: starship
+homepage: https://starship.rs
+license: ISC
+dist_tag: true
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 1.25.1
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 1.25.1

rpms/starship/resources/build.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/bash
+
+set -e
+
+wget -O /app/starship-x86_64-unknown-linux-musl.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/starship/starship/releases/download/v${PACKAGE_VERSION}/starship-x86_64-unknown-linux-musl.tar.gz
+tar xf /app/starship-x86_64-unknown-linux-musl.tar.gz
+
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm