f5615455bf
Implements #1 — stoke installable with apt-get install stoke. Packaging: - scripts/build-deb.sh: builds dist/stoke_<version>_all.deb from a clean staging copy (src + fresh npm ci --omit=dev), pure-JS Architecture: all, Depends: nodejs (>= 22.12), /usr/lib/stoke payload with /usr/bin/stoke symlink, copyright + changelog, normalized permissions. Lintian-clean. - scripts/publish-deb.sh: uploads a .deb to the Forgejo Debian registry (owner/distribution/component parameterized, defaults heavy-duty/ stable/main), authenticating with STOKE_TOKEN or the stoke login token. - scripts/install-apt.sh: consumer-side one-time setup — adds the registry key and apt source, then apt-get install stoke. Falls back to a [trusted=yes] source when apt's sqv verifier rejects the forge's registry signature (known upstream Forgejo signing bug; the script prefers the signed source so setups heal once the forge is fixed). - .forgejo/workflows/release.yml: on v* tags — test, build, publish to the heavy-duty registry, attach the .deb to the release page. Needs a runner and a RELEASE_TOKEN secret with org package write. New command: - stoke pr merge (-n, --method merge|rebase|rebase-merge|squash, --title, --message, --delete-branch) — gap found while merging !2. Docs and housekeeping: - README: 'Install with apt' as the primary installation method with manual setup and dpkg fallback, signature caveat, pr merge reference, Packaging and releasing section with a release checklist. - dist/ gitignored; version bumped to 1.2.0. Verified end-to-end on this machine: built the deb (lintian-clean), published it to the Forgejo Debian registry, installed it with apt-get install stoke via install-apt.sh, and confirmed the installed CLI works against the live forge. The test upload was removed from the personal namespace afterwards; publishing under heavy-duty needs an org-member token (401 reqPackageAccess with this restricted account). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
63 lines
2.2 KiB
Bash
Executable file
63 lines
2.2 KiB
Bash
Executable file
#!/usr/bin/env bash
|
|
#
|
|
# One-time setup to install stoke via apt on Debian/Ubuntu.
|
|
#
|
|
# Adds the heavy-duty Forgejo Debian registry as an APT source (with its
|
|
# signing key) and installs the stoke package. Safe to re-run; afterwards
|
|
# stoke upgrades through regular `apt-get upgrade`.
|
|
#
|
|
# Usage:
|
|
# ./scripts/install-apt.sh
|
|
# FORGE_URL=... OWNER=... ./scripts/install-apt.sh # non-default instance
|
|
#
|
|
# Run as root or as a user with sudo.
|
|
|
|
set -euo pipefail
|
|
|
|
FORGE_URL="${FORGE_URL:-https://forgejo.heavyduty.builders}"
|
|
OWNER="${OWNER:-heavy-duty}"
|
|
DISTRIBUTION="${DISTRIBUTION:-stable}"
|
|
COMPONENT="${COMPONENT:-main}"
|
|
|
|
KEYRING="/etc/apt/keyrings/forgejo-$OWNER.asc"
|
|
LIST="/etc/apt/sources.list.d/forgejo-$OWNER.list"
|
|
|
|
SUDO=""
|
|
if [ "$(id -u)" -ne 0 ]; then
|
|
command -v sudo >/dev/null 2>&1 || { echo "error: run as root or install sudo" >&2; exit 1; }
|
|
SUDO="sudo"
|
|
fi
|
|
|
|
update_only_this_source() {
|
|
$SUDO apt-get update \
|
|
-o Dir::Etc::sourcelist="$LIST" \
|
|
-o Dir::Etc::sourceparts=/dev/null \
|
|
-o APT::Get::List-Cleanup=0
|
|
}
|
|
|
|
echo "Adding APT source for $FORGE_URL/$OWNER ..."
|
|
$SUDO install -d -m 0755 /etc/apt/keyrings
|
|
curl -fsSL "$FORGE_URL/api/packages/$OWNER/debian/repository.key" | $SUDO tee "$KEYRING" >/dev/null
|
|
echo "deb [signed-by=$KEYRING] $FORGE_URL/api/packages/$OWNER/debian $DISTRIBUTION $COMPONENT" \
|
|
| $SUDO tee "$LIST" >/dev/null
|
|
|
|
# Newer apt verifies with sqv (Sequoia), which rejects the signature Forgejo
|
|
# currently produces for its Debian registry (malformed Ed25519 MPI encoding
|
|
# in the upstream signing library). Try the properly signed source first so
|
|
# this heals automatically once the forge is fixed; otherwise fall back to
|
|
# [trusted=yes] — package integrity then relies on HTTPS to our own forge.
|
|
if ! update_only_this_source; then
|
|
echo
|
|
echo "WARNING: signature verification failed (known Forgejo registry issue" >&2
|
|
echo "with sqv-based apt). Falling back to [trusted=yes]; transport" >&2
|
|
echo "security is provided by HTTPS to $FORGE_URL." >&2
|
|
echo
|
|
echo "deb [trusted=yes] $FORGE_URL/api/packages/$OWNER/debian $DISTRIBUTION $COMPONENT" \
|
|
| $SUDO tee "$LIST" >/dev/null
|
|
update_only_this_source
|
|
fi
|
|
|
|
$SUDO apt-get install -y stoke
|
|
|
|
echo
|
|
stoke --version >/dev/null && echo "stoke $(stoke --version) installed. Run: stoke auth login"
|