mirror of
https://github.com/anand34577/ferrum.git
synced 2026-09-11 21:38:59 +00:00
Anand
9b3d093eb8
- Add 48 new MCP/AI-assistant tools covering guest lifecycle, node operations, firewall/security, and backup/replication/HA/storage/SDN management. Every mutating tool is admin-gated the same way guest_power_action already is; migrate/resize/move-disk, node reboot/shutdown, disk wipe, cert revocation, and cluster-node removal are deliberately left out as being as destructive as a delete. - ai_chat.go: when a provider (chiefly Needle, a pure tool-router with no narrative output of its own) finishes calling tools but returns nothing to say, render the tool results themselves as the answer instead of the misleading "ran out of tool calls" message. - needle.go: serialize every request against the shared Needle subprocess (it handles one request at a time) to stop concurrent callers from racing it, and surface the subprocess's captured output when a request fails because it died mid-response, instead of a bare network error. - Dockerfile: switch the final stage from distroless "static" to "base" — the bundled Needle CLI is a dynamically-linked glibc binary and cannot run in an image with no libc at all. - .github/workflows/release.yml: build and push a multi-arch (amd64/arm64) Docker image to ghcr.io on every version tag, tagged with the version and "latest". - Dockerfile/README: add OCI image labels and document the published GHCR image as the primary Docker install path.
107 lines
3.1 KiB
YAML
107 lines
3.1 KiB
YAML
name: Release
|
|
|
|
# Cross-compiles ferrum for Linux/Windows/macOS and publishes the archives
|
|
# (plus a checksums.txt) as GitHub Release assets whenever a "vX.Y.Z" tag is
|
|
# pushed — a thin wrapper around scripts/build.sh, so a local
|
|
# `scripts/build.sh all` produces the exact same artifacts. Also builds and
|
|
# pushes a multi-arch (amd64/arm64) Docker image straight from the repo's own
|
|
# Dockerfile to ghcr.io, tagged with the same version and "latest".
|
|
on:
|
|
push:
|
|
tags:
|
|
- "v[0-9]+.[0-9]+.[0-9]+"
|
|
workflow_dispatch:
|
|
inputs:
|
|
tag:
|
|
description: "Tag to build and (re)publish (e.g. v1.2.3)"
|
|
required: true
|
|
|
|
permissions:
|
|
contents: write
|
|
|
|
jobs:
|
|
docker:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: read
|
|
packages: write # to push to ghcr.io
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
with:
|
|
ref: ${{ inputs.tag || github.ref }}
|
|
|
|
- name: Resolve tag and image name
|
|
id: vars
|
|
run: |
|
|
echo "tag=${{ inputs.tag || github.ref_name }}" >> "$GITHUB_OUTPUT"
|
|
# ghcr.io requires a lowercase image name; github.repository is
|
|
# already lowercase for this repo, but this keeps the workflow
|
|
# correct if it's ever forked under a mixed-case owner/name.
|
|
echo "image=ghcr.io/$(echo '${{ github.repository }}' | tr '[:upper:]' '[:lower:]')" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Set up QEMU
|
|
uses: docker/setup-qemu-action@v3
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
|
|
- name: Log in to GHCR
|
|
uses: docker/login-action@v3
|
|
with:
|
|
registry: ghcr.io
|
|
username: ${{ github.actor }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: Build and push image
|
|
uses: docker/build-push-action@v6
|
|
with:
|
|
context: .
|
|
platforms: linux/amd64,linux/arm64
|
|
push: true
|
|
tags: |
|
|
${{ steps.vars.outputs.image }}:${{ steps.vars.outputs.tag }}
|
|
${{ steps.vars.outputs.image }}:latest
|
|
|
|
build:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0 # scripts/build.sh derives VERSION from `git describe`
|
|
ref: ${{ inputs.tag || github.ref }}
|
|
|
|
- name: Set up Go
|
|
uses: actions/setup-go@v5
|
|
with:
|
|
go-version-file: go.mod
|
|
|
|
- name: Set up Node
|
|
uses: actions/setup-node@v4
|
|
with:
|
|
node-version: "22"
|
|
cache: npm
|
|
cache-dependency-path: web/package-lock.json
|
|
|
|
- name: Install zip
|
|
run: command -v zip >/dev/null || (sudo apt-get update && sudo apt-get install -y zip)
|
|
|
|
- name: Build & package all platforms
|
|
run: bash scripts/build.sh all
|
|
|
|
- name: Verify checksums
|
|
run: |
|
|
cd dist
|
|
sha256sum -c checksums.txt
|
|
|
|
- name: Publish release
|
|
uses: softprops/action-gh-release@v2
|
|
with:
|
|
tag_name: ${{ inputs.tag || github.ref_name }}
|
|
generate_release_notes: true
|
|
files: |
|
|
dist/ferrum_*.tar.gz
|
|
dist/ferrum_*.zip
|
|
dist/checksums.txt
|