Skip to content

make: add signed release build script#348

Open
cyphar wants to merge 3 commits intomainfrom
signed-releases
Open

make: add signed release build script#348
cyphar wants to merge 3 commits intomainfrom
signed-releases

Conversation

@cyphar
Copy link
Owner

@cyphar cyphar commented Mar 2, 2026

This is modelled after the umoci and runc release scripts, with two
minor changes:

  1. We generate a vendor.tar.zst containing the output of "cargo
    vendor". Most distributions do not need this (Debian packages every
    crate individually, other distros generate their own vendor.tar.zst
    at packaging time) but it is nice to provide anyway.

  2. We do not produce any binary artefacts for our releases at this
    point. We could in principle produce static libpathrs.a libraries
    that people could link against, but that would require also
    compiling with musl to get properly static binaries and would
    complicate the release procedure somewhat.

Fixes #328
Signed-off-by: Aleksa Sarai cyphar@cyphar.com

Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>
@cyphar cyphar added this to the 0.2.4 milestone Mar 2, 2026
The management scripts come from umoci.

Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>
@cyphar cyphar force-pushed the signed-releases branch 5 times, most recently from 20fe969 to 9596751 Compare March 2, 2026 15:04
@codecov
Copy link

codecov bot commented Mar 2, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

This is modelled after the umoci and runc release scripts, with two
minor changes:

 1. We generate a vendor.tar.zst containing the output of "cargo
    vendor". Most distributions do not need this (Debian packages every
    crate individually, other distros generate their own vendor.tar.zst
    at packaging time) but it is nice to provide anyway.

 2. We do not produce any binary artefacts for our releases at this
    point. We could in principle produce static libpathrs.a libraries
    that people could link against, but that would require also
    compiling with musl to get properly static binaries and would
    complicate the release procedure somewhat.

Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>
@cyphar cyphar force-pushed the signed-releases branch from 9596751 to 8b989b3 Compare March 2, 2026 15:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

release: generate and sign archives

1 participant