Skip to content

feat(release): sha256 sidecars + manifest.json #4

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
markovejnovic merged 1 commit into from
Jun 24, 2026
Merged

feat(release): sha256 sidecars + manifest.json #4

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
33 changes: 30 additions & 3 deletions src/vmlinux/gha/release.clj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
(:require
[babashka.fs :as fs]
[babashka.process :refer [shell]]
[cheshire.core :as json]
[selmer.parser :as p]))

(defn- release-tag [sha] (str "release-" sha))
Expand Down Expand Up @@ -30,15 +31,41 @@
(< attempt 6) (do (Thread/sleep (* attempt 2000)) (recur (inc attempt)))
:else (throw (ex-info (str "gh release upload failed for " asset) {:asset asset}))))))

(defn- stage-asset!
"Copy the build binary to its release asset name and write a `<asset>.sha256`
sidecar in sha256sum(1) format. Returns the [asset sidecar] paths."
[build]
(let [name (asset-name build)
asset (str (fs/parent (:binary-path build)) "/" name)
sidecar (str asset ".sha256")]
(fs/copy (:binary-path build) asset {:replace-existing true})
(spit sidecar (str (:sha256-sum build) " " name "\n"))
[asset sidecar]))

(defn- manifest-json
[sha assets]
(json/generate-string {:sha sha,
:builds (mapv (fn [{:keys [name arch version sha256-sum], :as build}]
{:name name,
:arch (clojure.core/name arch),
:version version,
:asset (asset-name build),
:sha256 sha256-sum})
assets)}
{:pretty true}))

(defn create
[sha assets]
(let [tag (release-tag sha)]
(when-not (exists? sha)
(shell "gh" "release" "create" tag "--title" (title sha) "--notes" (notes sha)))
(->> assets
(mapv (fn [build]
(future (let [asset (str (fs/parent (:binary-path build)) "/" (asset-name build))]
(fs/copy (:binary-path build) asset {:replace-existing true})
(upload! tag asset)))))
(future (let [[asset sidecar] (stage-asset! build)]
(upload! tag asset)
(upload! tag sidecar)))))
(run! deref))
(let [manifest (str (fs/parent (:binary-path (first assets))) "/manifest.json")]
(spit manifest (manifest-json sha assets))
(upload! tag manifest))
tag))