From 9285b1c324b2f607bd6307c2f4aa84278df5aa14 Mon Sep 17 00:00:00 2001
From: "blink-so[bot]" <211532188+blink-so[bot]@users.noreply.github.com>
Date: Wed, 10 Sep 2025 00:15:21 +0000
Subject: [PATCH 1/8] feat: add automated cross-platform binary builds and
 releases

Added GitHub Actions workflows for:
- Automated releases on version tags
- Cross-platform binary builds (Linux, macOS, Windows)
- Artifact uploads for testing
- Local build script for development

Supports 6 platforms: Linux/macOS/Windows x amd64/arm64

Co-authored-by: f0ssel <19379394+f0ssel@users.noreply.github.com>
---
 .github/workflows/build.yml   | 108 +++++++++++++++++++++++++
 .github/workflows/ci.yml      |   2 +-
 .github/workflows/release.yml | 148 ++++++++++++++++++++++++++++++++++
 .gitignore                    |   1 +
 RELEASES.md                   | 142 ++++++++++++++++++++++++++++++++
 main.go                       |   5 ++
 scripts/build.sh              |  66 +++++++++++++++
 7 files changed, 471 insertions(+), 1 deletion(-)
 create mode 100644 .github/workflows/build.yml
 create mode 100644 .github/workflows/release.yml
 create mode 100644 RELEASES.md
 create mode 100755 scripts/build.sh

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
new file mode 100644
index 0000000..fdfcfe1
--- /dev/null
+++ b/.github/workflows/build.yml
@@ -0,0 +1,108 @@
+name: Build Binaries
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  build:
+    name: Build Cross-Platform Binaries
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        include:
+          # Linux builds
+          - goos: linux
+            goarch: amd64
+            name: jail-linux-amd64
+          - goos: linux
+            goarch: arm64
+            name: jail-linux-arm64
+          # macOS builds
+          - goos: darwin
+            goarch: amd64
+            name: jail-darwin-amd64
+          - goos: darwin
+            goarch: arm64
+            name: jail-darwin-arm64
+          # Windows builds
+          - goos: windows
+            goarch: amd64
+            name: jail-windows-amd64.exe
+          - goos: windows
+            goarch: arm64
+            name: jail-windows-arm64.exe
+
+    steps:
+    - name: Check out code
+      uses: actions/checkout@v4
+
+    - name: Set up Go
+      uses: actions/setup-go@v5
+      with:
+        go-version: '1.25'
+        check-latest: true
+
+    - name: Cache Go modules
+      uses: actions/cache@v4
+      with:
+        path: |
+          ~/.cache/go-build
+          ~/go/pkg/mod
+        key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+        restore-keys: |
+          ${{ runner.os }}-go-
+
+    - name: Download dependencies
+      run: go mod download
+
+    - name: Build binary
+      env:
+        GOOS: ${{ matrix.goos }}
+        GOARCH: ${{ matrix.goarch }}
+        CGO_ENABLED: 0
+      run: |
+        # Add version info if available
+        VERSION="dev-${{ github.sha }}"
+        if [ "${{ github.ref_type }}" = "tag" ]; then
+          VERSION="${{ github.ref_name }}"
+        fi
+        go build -ldflags="-s -w -X main.version=$VERSION" -o ${{ matrix.name }} .
+
+    - name: Upload binary as artifact
+      uses: actions/upload-artifact@v4
+      with:
+        name: ${{ matrix.name }}
+        path: ${{ matrix.name }}
+        retention-days: 30
+
+  summary:
+    name: Build Summary
+    needs: build
+    runs-on: ubuntu-latest
+    if: always()
+
+    steps:
+    - name: Build Summary
+      run: |
+        echo "## 🛠️ Build Summary" >> $GITHUB_STEP_SUMMARY
+        echo "" >> $GITHUB_STEP_SUMMARY
+        echo "Cross-platform binaries have been built and are available as artifacts." >> $GITHUB_STEP_SUMMARY
+        echo "" >> $GITHUB_STEP_SUMMARY
+        echo "### 📦 Available Binaries" >> $GITHUB_STEP_SUMMARY
+        echo "" >> $GITHUB_STEP_SUMMARY
+        echo "- 🐧 **Linux (x64)**: jail-linux-amd64" >> $GITHUB_STEP_SUMMARY
+        echo "- 🐧 **Linux (ARM64)**: jail-linux-arm64" >> $GITHUB_STEP_SUMMARY
+        echo "- 🍎 **macOS (Intel)**: jail-darwin-amd64" >> $GITHUB_STEP_SUMMARY
+        echo "- 🍎 **macOS (Apple Silicon)**: jail-darwin-arm64" >> $GITHUB_STEP_SUMMARY
+        echo "- 🪟 **Windows (x64)**: jail-windows-amd64.exe" >> $GITHUB_STEP_SUMMARY
+        echo "- 🪟 **Windows (ARM64)**: jail-windows-arm64.exe" >> $GITHUB_STEP_SUMMARY
+        echo "" >> $GITHUB_STEP_SUMMARY
+        echo "### 📎 Download Instructions" >> $GITHUB_STEP_SUMMARY
+        echo "" >> $GITHUB_STEP_SUMMARY
+        echo "1. Go to the **Actions** tab" >> $GITHUB_STEP_SUMMARY
+        echo "2. Click on this workflow run" >> $GITHUB_STEP_SUMMARY
+        echo "3. Scroll down to **Artifacts** section" >> $GITHUB_STEP_SUMMARY
+        echo "4. Download the binary for your platform" >> $GITHUB_STEP_SUMMARY
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c860749..2058bc6 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -44,5 +44,5 @@ jobs:
     - name: Run tests
       run: go test -v -race ./...
 
-    - name: Run build
+    - name: Check build
       run: go build -v ./...
\ No newline at end of file
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
new file mode 100644
index 0000000..ff32fff
--- /dev/null
+++ b/.github/workflows/release.yml
@@ -0,0 +1,148 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*' # Trigger on version tags like v1.0.0, v1.2.3, etc.
+  workflow_dispatch: # Allow manual triggering
+
+jobs:
+  build:
+    name: Build Binaries
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        include:
+          # Linux builds
+          - goos: linux
+            goarch: amd64
+            name: jail-linux-amd64
+          - goos: linux
+            goarch: arm64
+            name: jail-linux-arm64
+          # macOS builds
+          - goos: darwin
+            goarch: amd64
+            name: jail-darwin-amd64
+          - goos: darwin
+            goarch: arm64
+            name: jail-darwin-arm64
+          # Windows builds
+          - goos: windows
+            goarch: amd64
+            name: jail-windows-amd64.exe
+          - goos: windows
+            goarch: arm64
+            name: jail-windows-arm64.exe
+
+    steps:
+    - name: Check out code
+      uses: actions/checkout@v4
+
+    - name: Set up Go
+      uses: actions/setup-go@v5
+      with:
+        go-version: '1.25'
+        check-latest: true
+
+    - name: Cache Go modules
+      uses: actions/cache@v4
+      with:
+        path: |
+          ~/.cache/go-build
+          ~/go/pkg/mod
+        key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+        restore-keys: |
+          ${{ runner.os }}-go-
+
+    - name: Download dependencies
+      run: go mod download
+
+    - name: Build binary
+      env:
+        GOOS: ${{ matrix.goos }}
+        GOARCH: ${{ matrix.goarch }}
+        CGO_ENABLED: 0
+      run: |
+        go build -ldflags="-s -w -X main.version=${{ github.ref_name }}" -o ${{ matrix.name }} .
+
+    - name: Upload binary as artifact
+      uses: actions/upload-artifact@v4
+      with:
+        name: ${{ matrix.name }}
+        path: ${{ matrix.name }}
+        retention-days: 7
+
+  release:
+    name: Create Release
+    needs: build
+    runs-on: ubuntu-latest
+    if: startsWith(github.ref, 'refs/tags/')
+
+    steps:
+    - name: Check out code
+      uses: actions/checkout@v4
+
+    - name: Download all artifacts
+      uses: actions/download-artifact@v4
+      with:
+        path: ./binaries
+
+    - name: Prepare release assets
+      run: |
+        cd binaries
+        # Create compressed archives for each binary
+        for dir in */; do
+          binary_name=$(basename "$dir")
+          cd "$dir"
+          if [[ "$binary_name" == *.exe ]]; then
+            # Windows: create zip
+            zip "../${binary_name%.exe}.zip" "$binary_name"
+          else
+            # Unix: create tar.gz
+            tar -czf "../${binary_name}.tar.gz" "$binary_name"
+          fi
+          cd ..
+        done
+        # List all release assets
+        ls -la *.tar.gz *.zip
+
+    - name: Generate release notes
+      id: release_notes
+      run: |
+        echo "## 🚀 Release ${{ github.ref_name }}" > release_notes.md
+        echo "" >> release_notes.md
+        echo "### 📦 Downloads" >> release_notes.md
+        echo "" >> release_notes.md
+        echo "Choose the appropriate binary for your platform:" >> release_notes.md
+        echo "" >> release_notes.md
+        echo "- **Linux (x64)**: `jail-linux-amd64.tar.gz`" >> release_notes.md
+        echo "- **Linux (ARM64)**: `jail-linux-arm64.tar.gz`" >> release_notes.md
+        echo "- **macOS (Intel)**: `jail-darwin-amd64.tar.gz`" >> release_notes.md
+        echo "- **macOS (Apple Silicon)**: `jail-darwin-arm64.tar.gz`" >> release_notes.md
+        echo "- **Windows (x64)**: `jail-windows-amd64.zip`" >> release_notes.md
+        echo "- **Windows (ARM64)**: `jail-windows-arm64.zip`" >> release_notes.md
+        echo "" >> release_notes.md
+        echo "### 🛠️ Installation" >> release_notes.md
+        echo "" >> release_notes.md
+        echo "1. Download the appropriate binary for your platform" >> release_notes.md
+        echo "2. Extract the archive" >> release_notes.md
+        echo "3. Make the binary executable (Unix): `chmod +x jail`" >> release_notes.md
+        echo "4. Move to your PATH: `sudo mv jail /usr/local/bin/` (Unix)" >> release_notes.md
+        echo "" >> release_notes.md
+        echo "### ✅ Verification" >> release_notes.md
+        echo "" >> release_notes.md
+        echo "Verify installation: `jail --help`" >> release_notes.md
+
+    - name: Create GitHub Release
+      uses: softprops/action-gh-release@v2
+      with:
+        files: |
+          binaries/*.tar.gz
+          binaries/*.zip
+        body_path: release_notes.md
+        draft: false
+        prerelease: ${{ contains(github.ref_name, '-') }}
+        generate_release_notes: true
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.gitignore b/.gitignore
index f83a2fd..1a517a5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -46,3 +46,4 @@ Thumbs.db
 *.pem
 *.crt
 *.key
+build/
diff --git a/RELEASES.md b/RELEASES.md
new file mode 100644
index 0000000..e27ebf6
--- /dev/null
+++ b/RELEASES.md
@@ -0,0 +1,142 @@
+# Releases
+
+This document describes how jail binaries are built and released.
+
+## Automated Releases
+
+### GitHub Releases
+
+Binaries are automatically built and released when you push a version tag:
+
+```bash
+# Create and push a version tag
+git tag v1.0.0
+git push origin v1.0.0
+```
+
+This triggers the **Release** workflow which:
+1. Builds binaries for all supported platforms
+2. Creates compressed archives (`.tar.gz` for Unix, `.zip` for Windows)
+3. Creates a GitHub release with all binaries attached
+4. Generates release notes with download instructions
+
+### Supported Platforms
+
+| Platform | Architecture | Binary Name | Archive |
+|----------|--------------|-------------|----------|
+| Linux | x64 | `jail-linux-amd64` | `.tar.gz` |
+| Linux | ARM64 | `jail-linux-arm64` | `.tar.gz` |
+| macOS | Intel | `jail-darwin-amd64` | `.tar.gz` |
+| macOS | Apple Silicon | `jail-darwin-arm64` | `.tar.gz` |
+| Windows | x64 | `jail-windows-amd64.exe` | `.zip` |
+| Windows | ARM64 | `jail-windows-arm64.exe` | `.zip` |
+
+### Development Builds
+
+Every push to `main` and every PR automatically builds binaries available as **GitHub Actions artifacts**:
+
+1. Go to the **Actions** tab
+2. Click on the latest **Build Binaries** workflow run
+3. Scroll down to **Artifacts** section
+4. Download the binary for your platform
+
+Artifacts are kept for 30 days.
+
+## Local Development
+
+### Quick Build
+
+Build for your current platform:
+
+```bash
+go build -o jail .
+```
+
+### Cross-Platform Build
+
+Use the provided script to build for all platforms:
+
+```bash
+./scripts/build.sh
+```
+
+This creates a `build/` directory with binaries for all supported platforms.
+
+### Manual Cross-Platform Build
+
+```bash
+# Linux x64
+GOOS=linux GOARCH=amd64 go build -o jail-linux-amd64 .
+
+# macOS ARM64 (Apple Silicon)
+GOOS=darwin GOARCH=arm64 go build -o jail-darwin-arm64 .
+
+# Windows x64
+GOOS=windows GOARCH=amd64 go build -o jail-windows-amd64.exe .
+```
+
+### Build with Version Info
+
+```bash
+VERSION="v1.0.0"
+go build -ldflags="-X main.version=$VERSION" -o jail .
+```
+
+## Release Process
+
+### For Maintainers
+
+1. **Prepare Release**:
+   - Ensure all changes are merged to `main`
+   - Update version in relevant files if needed
+   - Test the build locally: `./scripts/build.sh`
+
+2. **Create Release**:
+   ```bash
+   # Create and push version tag
+   git tag v1.2.3
+   git push origin v1.2.3
+   ```
+
+3. **Verify Release**:
+   - Check GitHub Actions completed successfully
+   - Verify release appears in GitHub Releases
+   - Test download and installation of binaries
+
+### Version Naming
+
+- **Stable releases**: `v1.0.0`, `v1.2.3`
+- **Pre-releases**: `v1.0.0-beta.1`, `v1.0.0-rc.1`
+- **Development**: `dev-{git-hash}` (automatic)
+
+Pre-releases (containing `-`) are automatically marked as "pre-release" on GitHub.
+
+## Installation
+
+### From GitHub Releases
+
+1. Go to [Releases](https://github.com/coder/jail/releases)
+2. Download the appropriate binary for your platform
+3. Extract the archive
+4. Make executable (Unix): `chmod +x jail`
+5. Move to PATH: `sudo mv jail /usr/local/bin/`
+
+### Verify Installation
+
+```bash
+jail --help
+```
+
+## Troubleshooting
+
+### Build Issues
+
+- **Go version**: Ensure you're using Go 1.25+
+- **Dependencies**: Run `go mod download` and `go mod verify`
+- **Cross-compilation**: Some platforms may require specific build tags
+
+### Release Issues
+
+- **Tag not triggering release**: Ensure tag follows `v*` pattern
+- **Build failures**: Check GitHub Actions logs
+- **Missing binaries**: Verify all matrix builds completed successfully
diff --git a/main.go b/main.go
index 6a7bb59..ae17de6 100644
--- a/main.go
+++ b/main.go
@@ -7,6 +7,11 @@ import (
 	"github.com/coder/jail/cli"
 )
 
+// Version information injected at build time
+var (
+	version = "dev" // Set via -ldflags "-X main.version=v1.0.0"
+)
+
 func main() {
 	cmd := cli.NewCommand()
 
diff --git a/scripts/build.sh b/scripts/build.sh
new file mode 100755
index 0000000..149e2bd
--- /dev/null
+++ b/scripts/build.sh
@@ -0,0 +1,66 @@
+#!/bin/bash
+
+# Build script for jail - creates binaries for all supported platforms
+
+set -e
+
+# Colors for output
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+NC='\033[0m' # No Color
+
+# Get version from git tag or use dev
+VERSION=$(git describe --tags --exact-match 2>/dev/null || echo "dev-$(git rev-parse --short HEAD)")
+
+echo -e "${BLUE}Building jail binaries...${NC}"
+echo -e "${YELLOW}Version: $VERSION${NC}"
+echo
+
+# Create build directory
+BUILD_DIR="build"
+rm -rf "$BUILD_DIR"
+mkdir -p "$BUILD_DIR"
+
+# Build configurations: OS:ARCH:NAME
+configs=(
+    "linux:amd64:jail-linux-amd64"
+    "linux:arm64:jail-linux-arm64"
+    "darwin:amd64:jail-darwin-amd64"
+    "darwin:arm64:jail-darwin-arm64"
+    "windows:amd64:jail-windows-amd64.exe"
+    "windows:arm64:jail-windows-arm64.exe"
+)
+
+# Build each configuration
+for config in "${configs[@]}"; do
+    IFS=':' read -r goos goarch name <<< "$config"
+    
+    echo -e "${YELLOW}Building $name...${NC}"
+    
+    env GOOS="$goos" GOARCH="$goarch" CGO_ENABLED=0 go build \
+        -ldflags="-s -w -X main.version=$VERSION" \
+        -o "$BUILD_DIR/$name" .
+    
+    if [ $? -eq 0 ]; then
+        size=$(du -h "$BUILD_DIR/$name" | cut -f1)
+        echo -e "${GREEN}✓ Built $name ($size)${NC}"
+    else
+        echo -e "${RED}✗ Failed to build $name${NC}"
+        exit 1
+    fi
+done
+
+echo
+echo -e "${GREEN}All binaries built successfully!${NC}"
+echo -e "${BLUE}Binaries are in the '$BUILD_DIR' directory:${NC}"
+ls -la "$BUILD_DIR"/
+
+echo
+echo -e "${YELLOW}To create release archives:${NC}"
+echo "  cd $BUILD_DIR"
+echo "  tar -czf jail-linux-amd64.tar.gz jail-linux-amd64"
+echo "  tar -czf jail-darwin-amd64.tar.gz jail-darwin-amd64"
+echo "  zip jail-windows-amd64.zip jail-windows-amd64.exe"
+echo "  # ... etc for other platforms"

From f84740e2e2066a95a7c36842d316c786c0cfe4b4 Mon Sep 17 00:00:00 2001
From: "blink-so[bot]" <211532188+blink-so[bot]@users.noreply.github.com>
Date: Wed, 10 Sep 2025 00:17:58 +0000
Subject: [PATCH 2/8] remove Windows builds from release automation

Removed Windows platform support from:
- GitHub Actions release workflow
- GitHub Actions build workflow
- Local build script
- Documentation

Now supports 4 platforms:
- Linux: amd64, arm64
- macOS: amd64 (Intel), arm64 (Apple Silicon)

All builds create .tar.gz archives for consistency.

Co-authored-by: f0ssel <19379394+f0ssel@users.noreply.github.com>
---
 .github/workflows/build.yml   |  9 ---------
 .github/workflows/release.yml | 34 ++++++++--------------------------
 RELEASES.md                   |  5 -----
 scripts/build.sh              |  5 +----
 4 files changed, 9 insertions(+), 44 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index fdfcfe1..39ceb4c 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -27,13 +27,6 @@ jobs:
           - goos: darwin
             goarch: arm64
             name: jail-darwin-arm64
-          # Windows builds
-          - goos: windows
-            goarch: amd64
-            name: jail-windows-amd64.exe
-          - goos: windows
-            goarch: arm64
-            name: jail-windows-arm64.exe
 
     steps:
     - name: Check out code
@@ -97,8 +90,6 @@ jobs:
         echo "- 🐧 **Linux (ARM64)**: jail-linux-arm64" >> $GITHUB_STEP_SUMMARY
         echo "- 🍎 **macOS (Intel)**: jail-darwin-amd64" >> $GITHUB_STEP_SUMMARY
         echo "- 🍎 **macOS (Apple Silicon)**: jail-darwin-arm64" >> $GITHUB_STEP_SUMMARY
-        echo "- 🪟 **Windows (x64)**: jail-windows-amd64.exe" >> $GITHUB_STEP_SUMMARY
-        echo "- 🪟 **Windows (ARM64)**: jail-windows-arm64.exe" >> $GITHUB_STEP_SUMMARY
         echo "" >> $GITHUB_STEP_SUMMARY
         echo "### 📎 Download Instructions" >> $GITHUB_STEP_SUMMARY
         echo "" >> $GITHUB_STEP_SUMMARY
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ff32fff..cf7dcef 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -27,13 +27,6 @@ jobs:
           - goos: darwin
             goarch: arm64
             name: jail-darwin-arm64
-          # Windows builds
-          - goos: windows
-            goarch: amd64
-            name: jail-windows-amd64.exe
-          - goos: windows
-            goarch: arm64
-            name: jail-windows-arm64.exe
 
     steps:
     - name: Check out code
@@ -95,17 +88,12 @@ jobs:
         for dir in */; do
           binary_name=$(basename "$dir")
           cd "$dir"
-          if [[ "$binary_name" == *.exe ]]; then
-            # Windows: create zip
-            zip "../${binary_name%.exe}.zip" "$binary_name"
-          else
-            # Unix: create tar.gz
-            tar -czf "../${binary_name}.tar.gz" "$binary_name"
-          fi
+          # Unix: create tar.gz
+          tar -czf "../${binary_name}.tar.gz" "$binary_name"
           cd ..
         done
         # List all release assets
-        ls -la *.tar.gz *.zip
+        ls -la *.tar.gz
 
     - name: Generate release notes
       id: release_notes
@@ -116,12 +104,10 @@ jobs:
         echo "" >> release_notes.md
         echo "Choose the appropriate binary for your platform:" >> release_notes.md
         echo "" >> release_notes.md
-        echo "- **Linux (x64)**: `jail-linux-amd64.tar.gz`" >> release_notes.md
-        echo "- **Linux (ARM64)**: `jail-linux-arm64.tar.gz`" >> release_notes.md
-        echo "- **macOS (Intel)**: `jail-darwin-amd64.tar.gz`" >> release_notes.md
-        echo "- **macOS (Apple Silicon)**: `jail-darwin-arm64.tar.gz`" >> release_notes.md
-        echo "- **Windows (x64)**: `jail-windows-amd64.zip`" >> release_notes.md
-        echo "- **Windows (ARM64)**: `jail-windows-arm64.zip`" >> release_notes.md
+        echo "- **Linux (x64)**: \`jail-linux-amd64.tar.gz\`" >> release_notes.md
+        echo "- **Linux (ARM64)**: \`jail-linux-arm64.tar.gz\`" >> release_notes.md
+        echo "- **macOS (Intel)**: \`jail-darwin-amd64.tar.gz\`" >> release_notes.md
+        echo "- **macOS (Apple Silicon)**: \`jail-darwin-arm64.tar.gz\`" >> release_notes.md
         echo "" >> release_notes.md
         echo "### 🛠️ Installation" >> release_notes.md
         echo "" >> release_notes.md
@@ -139,10 +125,6 @@ jobs:
       with:
         files: |
           binaries/*.tar.gz
-          binaries/*.zip
         body_path: release_notes.md
-        draft: false
-        prerelease: ${{ contains(github.ref_name, '-') }}
-        generate_release_notes: true
       env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
\ No newline at end of file
diff --git a/RELEASES.md b/RELEASES.md
index e27ebf6..7affb47 100644
--- a/RELEASES.md
+++ b/RELEASES.md
@@ -28,8 +28,6 @@ This triggers the **Release** workflow which:
 | Linux | ARM64 | `jail-linux-arm64` | `.tar.gz` |
 | macOS | Intel | `jail-darwin-amd64` | `.tar.gz` |
 | macOS | Apple Silicon | `jail-darwin-arm64` | `.tar.gz` |
-| Windows | x64 | `jail-windows-amd64.exe` | `.zip` |
-| Windows | ARM64 | `jail-windows-arm64.exe` | `.zip` |
 
 ### Development Builds
 
@@ -70,9 +68,6 @@ GOOS=linux GOARCH=amd64 go build -o jail-linux-amd64 .
 
 # macOS ARM64 (Apple Silicon)
 GOOS=darwin GOARCH=arm64 go build -o jail-darwin-arm64 .
-
-# Windows x64
-GOOS=windows GOARCH=amd64 go build -o jail-windows-amd64.exe .
 ```
 
 ### Build with Version Info
diff --git a/scripts/build.sh b/scripts/build.sh
index 149e2bd..dc597f6 100755
--- a/scripts/build.sh
+++ b/scripts/build.sh
@@ -29,8 +29,6 @@ configs=(
     "linux:arm64:jail-linux-arm64"
     "darwin:amd64:jail-darwin-amd64"
     "darwin:arm64:jail-darwin-arm64"
-    "windows:amd64:jail-windows-amd64.exe"
-    "windows:arm64:jail-windows-arm64.exe"
 )
 
 # Build each configuration
@@ -62,5 +60,4 @@ echo -e "${YELLOW}To create release archives:${NC}"
 echo "  cd $BUILD_DIR"
 echo "  tar -czf jail-linux-amd64.tar.gz jail-linux-amd64"
 echo "  tar -czf jail-darwin-amd64.tar.gz jail-darwin-amd64"
-echo "  zip jail-windows-amd64.zip jail-windows-amd64.exe"
-echo "  # ... etc for other platforms"
+echo "  # ... etc for other platforms"
\ No newline at end of file

From 12234661b283d36ef93b76c2d8fce4a96fbc9ca5 Mon Sep 17 00:00:00 2001
From: "blink-so[bot]" <211532188+blink-so[bot]@users.noreply.github.com>
Date: Wed, 10 Sep 2025 00:21:00 +0000
Subject: [PATCH 3/8] add Makefile with build, clean, test targets

Added comprehensive Makefile with targets:
- make build: Build for current platform
- make build-all: Cross-platform builds
- make test: Run tests
- make clean: Clean artifacts
- make install/uninstall: System installation
- make help: Show all targets

Includes version injection, coverage reports, and development tools.

Co-authored-by: f0ssel <19379394+f0ssel@users.noreply.github.com>
---
 Makefile    | 138 ++++++++++++++++++++++++++++++++++++++++++++++++++++
 RELEASES.md |  26 +++++++++-
 2 files changed, 163 insertions(+), 1 deletion(-)
 create mode 100644 Makefile

diff --git a/Makefile b/Makefile
new file mode 100644
index 0000000..3e5160a
--- /dev/null
+++ b/Makefile
@@ -0,0 +1,138 @@
+# Makefile for jail
+
+# Variables
+BINARY_NAME := jail
+BUILD_DIR := build
+VERSION := $(shell git describe --tags --exact-match 2>/dev/null || echo "dev-$(shell git rev-parse --short HEAD)")
+LDFLAGS := -s -w -X main.version=$(VERSION)
+
+# Default target
+.PHONY: all
+all: build
+
+# Build for current platform
+.PHONY: build
+build:
+	@echo "Building $(BINARY_NAME) for current platform..."
+	@echo "Version: $(VERSION)"
+	go build -ldflags="$(LDFLAGS)" -o $(BINARY_NAME) .
+	@echo "✓ Built $(BINARY_NAME)"
+
+# Build for all supported platforms
+.PHONY: build-all
+build-all:
+	@echo "Building $(BINARY_NAME) for all platforms..."
+	@echo "Version: $(VERSION)"
+	@mkdir -p $(BUILD_DIR)
+	@echo "Building Linux amd64..."
+	GOOS=linux GOARCH=amd64 CGO_ENABLED=0 go build -ldflags="$(LDFLAGS)" -o $(BUILD_DIR)/$(BINARY_NAME)-linux-amd64 .
+	@echo "Building Linux arm64..."
+	GOOS=linux GOARCH=arm64 CGO_ENABLED=0 go build -ldflags="$(LDFLAGS)" -o $(BUILD_DIR)/$(BINARY_NAME)-linux-arm64 .
+	@echo "Building macOS amd64..."
+	GOOS=darwin GOARCH=amd64 CGO_ENABLED=0 go build -ldflags="$(LDFLAGS)" -o $(BUILD_DIR)/$(BINARY_NAME)-darwin-amd64 .
+	@echo "Building macOS arm64..."
+	GOOS=darwin GOARCH=arm64 CGO_ENABLED=0 go build -ldflags="$(LDFLAGS)" -o $(BUILD_DIR)/$(BINARY_NAME)-darwin-arm64 .
+	@echo "✓ All binaries built successfully!"
+	@echo "Binaries are in the '$(BUILD_DIR)' directory:"
+	@ls -la $(BUILD_DIR)/
+
+# Run tests
+.PHONY: test
+test:
+	@echo "Running tests..."
+	go test -v -race ./...
+	@echo "✓ All tests passed!"
+
+# Run tests with coverage
+.PHONY: test-coverage
+test-coverage:
+	@echo "Running tests with coverage..."
+	go test -v -race -coverprofile=coverage.out ./...
+	go tool cover -html=coverage.out -o coverage.html
+	@echo "✓ Coverage report generated: coverage.html"
+
+# Clean build artifacts
+.PHONY: clean
+clean:
+	@echo "Cleaning build artifacts..."
+	rm -f $(BINARY_NAME)
+	rm -rf $(BUILD_DIR)
+	rm -f coverage.out coverage.html
+	@echo "✓ Clean complete!"
+
+# Install binary to system PATH
+.PHONY: install
+install: build
+	@echo "Installing $(BINARY_NAME) to /usr/local/bin..."
+	sudo cp $(BINARY_NAME) /usr/local/bin/
+	@echo "✓ $(BINARY_NAME) installed successfully!"
+
+# Uninstall binary from system PATH
+.PHONY: uninstall
+uninstall:
+	@echo "Uninstalling $(BINARY_NAME) from /usr/local/bin..."
+	sudo rm -f /usr/local/bin/$(BINARY_NAME)
+	@echo "✓ $(BINARY_NAME) uninstalled successfully!"
+
+# Format code
+.PHONY: fmt
+fmt:
+	@echo "Formatting code..."
+	go fmt ./...
+	@echo "✓ Code formatted!"
+
+# Lint code
+.PHONY: lint
+lint:
+	@echo "Linting code..."
+	@if command -v golangci-lint >/dev/null 2>&1; then \
+		golangci-lint run; \
+	else \
+		echo "golangci-lint not found, running go vet instead..."; \
+		go vet ./...; \
+	fi
+	@echo "✓ Linting complete!"
+
+# Tidy dependencies
+.PHONY: tidy
+tidy:
+	@echo "Tidying dependencies..."
+	go mod tidy
+	go mod verify
+	@echo "✓ Dependencies tidied!"
+
+# Development setup
+.PHONY: dev-setup
+dev-setup:
+	@echo "Setting up development environment..."
+	go mod download
+	go mod verify
+	@if ! command -v golangci-lint >/dev/null 2>&1; then \
+		echo "Installing golangci-lint..."; \
+		go install github.com/golangci/golangci-lint/cmd/golangci-lint@latest; \
+	fi
+	@echo "✓ Development environment ready!"
+
+# Show help
+.PHONY: help
+help:
+	@echo "Available targets:"
+	@echo "  build        - Build binary for current platform"
+	@echo "  build-all    - Build binaries for all supported platforms"
+	@echo "  test         - Run tests"
+	@echo "  test-coverage- Run tests with coverage report"
+	@echo "  clean        - Clean build artifacts"
+	@echo "  install      - Install binary to /usr/local/bin"
+	@echo "  uninstall    - Remove binary from /usr/local/bin"
+	@echo "  fmt          - Format code"
+	@echo "  lint         - Lint code (requires golangci-lint)"
+	@echo "  tidy         - Tidy and verify dependencies"
+	@echo "  dev-setup    - Set up development environment"
+	@echo "  help         - Show this help message"
+	@echo ""
+	@echo "Examples:"
+	@echo "  make build           # Build for current platform"
+	@echo "  make build-all       # Build for all platforms"
+	@echo "  make test            # Run tests"
+	@echo "  make clean           # Clean build artifacts"
+	@echo "  make install         # Install to system PATH"
diff --git a/RELEASES.md b/RELEASES.md
index 7affb47..6553784 100644
--- a/RELEASES.md
+++ b/RELEASES.md
@@ -42,6 +42,30 @@ Artifacts are kept for 30 days.
 
 ## Local Development
 
+### Using Makefile (Recommended)
+
+The project includes a Makefile with common development tasks:
+
+```bash
+# Build for current platform
+make build
+
+# Build for all platforms
+make build-all
+
+# Run tests
+make test
+
+# Clean build artifacts
+make clean
+
+# Install to system PATH
+make install
+
+# Show all available targets
+make help
+```
+
 ### Quick Build
 
 Build for your current platform:
@@ -50,7 +74,7 @@ Build for your current platform:
 go build -o jail .
 ```
 
-### Cross-Platform Build
+### Cross-Platform Build Script
 
 Use the provided script to build for all platforms:
 

From 6a404d0ec788b1187682b97339a4d986bea548b9 Mon Sep 17 00:00:00 2001
From: "blink-so[bot]" <211532188+blink-so[bot]@users.noreply.github.com>
Date: Wed, 10 Sep 2025 00:26:01 +0000
Subject: [PATCH 4/8] use Makefile targets in GitHub Actions workflows

Updated workflows to use Makefile targets for consistency:

## CI Workflow
- Use 'make tidy' instead of 'go mod download' + 'go mod verify'
- Use 'make test' instead of 'go test -v -race ./...'
- Use 'make build' instead of 'go build -v ./...'

## Build & Release Workflows
- Use 'make tidy' for dependency management
- Keep direct Go commands for cross-compilation (needed for matrix builds)
- Maintain parallel builds for different platforms

## New Makefile Build Workflow
- Added weekly workflow that demonstrates 'make build-all'
- Builds all platforms in single job using Makefile
- Manual trigger available for testing
- Uploads all binaries as single artifact

This ensures consistency between local development (using Makefile)
and CI/CD (using same Makefile targets where appropriate).

Tested: make tidy && make test && make build works correctly.

Co-authored-by: f0ssel <19379394+f0ssel@users.noreply.github.com>
---
 .github/workflows/build.yml          | 13 +++---
 .github/workflows/ci.yml             |  9 ++---
 .github/workflows/makefile-build.yml | 60 ++++++++++++++++++++++++++++
 .github/workflows/release.yml        | 12 +++---
 4 files changed, 78 insertions(+), 16 deletions(-)
 create mode 100644 .github/workflows/makefile-build.yml

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 39ceb4c..a77a865 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -49,19 +49,22 @@ jobs:
           ${{ runner.os }}-go-
 
     - name: Download dependencies
-      run: go mod download
+      run: make tidy
 
     - name: Build binary
-      env:
-        GOOS: ${{ matrix.goos }}
-        GOARCH: ${{ matrix.goarch }}
-        CGO_ENABLED: 0
       run: |
+        # Set target for cross-compilation
+        export GOOS=${{ matrix.goos }}
+        export GOARCH=${{ matrix.goarch }}
+        export CGO_ENABLED=0
+        
         # Add version info if available
         VERSION="dev-${{ github.sha }}"
         if [ "${{ github.ref_type }}" = "tag" ]; then
           VERSION="${{ github.ref_name }}"
         fi
+        
+        # Build using Go directly for cross-compilation
         go build -ldflags="-s -w -X main.version=$VERSION" -o ${{ matrix.name }} .
 
     - name: Upload binary as artifact
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2058bc6..3d7a248 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -36,13 +36,10 @@ jobs:
           ${{ runner.os }}-go-
 
     - name: Download dependencies
-      run: go mod download
-
-    - name: Verify dependencies
-      run: go mod verify
+      run: make tidy
 
     - name: Run tests
-      run: go test -v -race ./...
+      run: make test
 
     - name: Check build
-      run: go build -v ./...
\ No newline at end of file
+      run: make build
\ No newline at end of file
diff --git a/.github/workflows/makefile-build.yml b/.github/workflows/makefile-build.yml
new file mode 100644
index 0000000..472ad85
--- /dev/null
+++ b/.github/workflows/makefile-build.yml
@@ -0,0 +1,60 @@
+name: Makefile Build
+
+on:
+  workflow_dispatch: # Allow manual triggering
+  schedule:
+    - cron: '0 6 * * 1' # Weekly on Monday at 6 AM UTC
+
+jobs:
+  makefile-build:
+    name: Build All Platforms with Makefile
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Check out code
+      uses: actions/checkout@v4
+
+    - name: Set up Go
+      uses: actions/setup-go@v5
+      with:
+        go-version: '1.25'
+        check-latest: true
+
+    - name: Cache Go modules
+      uses: actions/cache@v4
+      with:
+        path: |
+          ~/.cache/go-build
+          ~/go/pkg/mod
+        key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+        restore-keys: |
+          ${{ runner.os }}-go-
+
+    - name: Set up development environment
+      run: make dev-setup
+
+    - name: Run tests
+      run: make test
+
+    - name: Build all platforms
+      run: make build-all
+
+    - name: Upload all binaries as single artifact
+      uses: actions/upload-artifact@v4
+      with:
+        name: jail-all-platforms-makefile
+        path: build/*
+        retention-days: 7
+
+    - name: Build Summary
+      run: |
+        echo "## 🛠️ Makefile Build Summary" >> $GITHUB_STEP_SUMMARY
+        echo "" >> $GITHUB_STEP_SUMMARY
+        echo "Built all platforms using \`make build-all\`:" >> $GITHUB_STEP_SUMMARY
+        echo "" >> $GITHUB_STEP_SUMMARY
+        echo "\`\`\`" >> $GITHUB_STEP_SUMMARY
+        ls -la build/
+        ls -la build/ >> $GITHUB_STEP_SUMMARY
+        echo "\`\`\`" >> $GITHUB_STEP_SUMMARY
+        echo "" >> $GITHUB_STEP_SUMMARY
+        echo "All binaries are available as a single artifact: \`jail-all-platforms-makefile\`" >> $GITHUB_STEP_SUMMARY
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index cf7dcef..7a1085d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -49,14 +49,16 @@ jobs:
           ${{ runner.os }}-go-
 
     - name: Download dependencies
-      run: go mod download
+      run: make tidy
 
     - name: Build binary
-      env:
-        GOOS: ${{ matrix.goos }}
-        GOARCH: ${{ matrix.goarch }}
-        CGO_ENABLED: 0
       run: |
+        # Set target for cross-compilation
+        export GOOS=${{ matrix.goos }}
+        export GOARCH=${{ matrix.goarch }}
+        export CGO_ENABLED=0
+        
+        # Build using Go directly for cross-compilation
         go build -ldflags="-s -w -X main.version=${{ github.ref_name }}" -o ${{ matrix.name }} .
 
     - name: Upload binary as artifact

From a18b9b3b7bf6a0a3c9bdc92dfcc1d7dd72daf269 Mon Sep 17 00:00:00 2001
From: "blink-so[bot]" <211532188+blink-so[bot]@users.noreply.github.com>
Date: Wed, 10 Sep 2025 00:29:51 +0000
Subject: [PATCH 5/8] simplify Makefile by removing install, uninstall, tidy,
 dev-setup, help targets

Removed targets that are not core to build/test workflow:
- install/uninstall: System installation should be manual
- tidy: Direct go mod commands are clearer in workflows
- dev-setup: Too opinionated for a build tool
- help: Makefile is simple enough without help

Remaining focused targets:
- build: Build for current platform
- build-all: Cross-platform builds
- test: Run tests with race detection
- test-coverage: Generate coverage reports
- clean: Clean build artifacts
- fmt: Format code
- lint: Lint code

Updated GitHub Actions workflows to use direct Go commands
for dependency management instead of removed make tidy.

Updated RELEASES.md to reflect simplified Makefile.

Tested: make build && make test && make clean works correctly.

Co-authored-by: f0ssel <19379394+f0ssel@users.noreply.github.com>
---
 .github/workflows/build.yml          |  5 ++-
 .github/workflows/ci.yml             |  5 ++-
 .github/workflows/makefile-build.yml |  7 +++-
 .github/workflows/release.yml        |  5 ++-
 Makefile                             | 60 +---------------------------
 RELEASES.md                          | 11 +++--
 6 files changed, 25 insertions(+), 68 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a77a865..3f38a1d 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -49,7 +49,10 @@ jobs:
           ${{ runner.os }}-go-
 
     - name: Download dependencies
-      run: make tidy
+      run: go mod download
+
+    - name: Verify dependencies
+      run: go mod verify
 
     - name: Build binary
       run: |
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3d7a248..0777bd0 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -36,7 +36,10 @@ jobs:
           ${{ runner.os }}-go-
 
     - name: Download dependencies
-      run: make tidy
+      run: go mod download
+
+    - name: Verify dependencies
+      run: go mod verify
 
     - name: Run tests
       run: make test
diff --git a/.github/workflows/makefile-build.yml b/.github/workflows/makefile-build.yml
index 472ad85..f9b6663 100644
--- a/.github/workflows/makefile-build.yml
+++ b/.github/workflows/makefile-build.yml
@@ -30,8 +30,11 @@ jobs:
         restore-keys: |
           ${{ runner.os }}-go-
 
-    - name: Set up development environment
-      run: make dev-setup
+    - name: Download dependencies
+      run: go mod download
+
+    - name: Verify dependencies
+      run: go mod verify
 
     - name: Run tests
       run: make test
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7a1085d..891841f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -49,7 +49,10 @@ jobs:
           ${{ runner.os }}-go-
 
     - name: Download dependencies
-      run: make tidy
+      run: go mod download
+
+    - name: Verify dependencies
+      run: go mod verify
 
     - name: Build binary
       run: |
diff --git a/Makefile b/Makefile
index 3e5160a..6c932a6 100644
--- a/Makefile
+++ b/Makefile
@@ -60,20 +60,6 @@ clean:
 	rm -f coverage.out coverage.html
 	@echo "✓ Clean complete!"
 
-# Install binary to system PATH
-.PHONY: install
-install: build
-	@echo "Installing $(BINARY_NAME) to /usr/local/bin..."
-	sudo cp $(BINARY_NAME) /usr/local/bin/
-	@echo "✓ $(BINARY_NAME) installed successfully!"
-
-# Uninstall binary from system PATH
-.PHONY: uninstall
-uninstall:
-	@echo "Uninstalling $(BINARY_NAME) from /usr/local/bin..."
-	sudo rm -f /usr/local/bin/$(BINARY_NAME)
-	@echo "✓ $(BINARY_NAME) uninstalled successfully!"
-
 # Format code
 .PHONY: fmt
 fmt:
@@ -91,48 +77,4 @@ lint:
 		echo "golangci-lint not found, running go vet instead..."; \
 		go vet ./...; \
 	fi
-	@echo "✓ Linting complete!"
-
-# Tidy dependencies
-.PHONY: tidy
-tidy:
-	@echo "Tidying dependencies..."
-	go mod tidy
-	go mod verify
-	@echo "✓ Dependencies tidied!"
-
-# Development setup
-.PHONY: dev-setup
-dev-setup:
-	@echo "Setting up development environment..."
-	go mod download
-	go mod verify
-	@if ! command -v golangci-lint >/dev/null 2>&1; then \
-		echo "Installing golangci-lint..."; \
-		go install github.com/golangci/golangci-lint/cmd/golangci-lint@latest; \
-	fi
-	@echo "✓ Development environment ready!"
-
-# Show help
-.PHONY: help
-help:
-	@echo "Available targets:"
-	@echo "  build        - Build binary for current platform"
-	@echo "  build-all    - Build binaries for all supported platforms"
-	@echo "  test         - Run tests"
-	@echo "  test-coverage- Run tests with coverage report"
-	@echo "  clean        - Clean build artifacts"
-	@echo "  install      - Install binary to /usr/local/bin"
-	@echo "  uninstall    - Remove binary from /usr/local/bin"
-	@echo "  fmt          - Format code"
-	@echo "  lint         - Lint code (requires golangci-lint)"
-	@echo "  tidy         - Tidy and verify dependencies"
-	@echo "  dev-setup    - Set up development environment"
-	@echo "  help         - Show this help message"
-	@echo ""
-	@echo "Examples:"
-	@echo "  make build           # Build for current platform"
-	@echo "  make build-all       # Build for all platforms"
-	@echo "  make test            # Run tests"
-	@echo "  make clean           # Clean build artifacts"
-	@echo "  make install         # Install to system PATH"
+	@echo "✓ Linting complete!"
\ No newline at end of file
diff --git a/RELEASES.md b/RELEASES.md
index 6553784..0ff21b9 100644
--- a/RELEASES.md
+++ b/RELEASES.md
@@ -56,14 +56,17 @@ make build-all
 # Run tests
 make test
 
+# Run tests with coverage
+make test-coverage
+
 # Clean build artifacts
 make clean
 
-# Install to system PATH
-make install
+# Format code
+make fmt
 
-# Show all available targets
-make help
+# Lint code
+make lint
 ```
 
 ### Quick Build

From de71a8fea79f8c8b656daccbfdd60006a7f970f5 Mon Sep 17 00:00:00 2001
From: "blink-so[bot]" <211532188+blink-so[bot]@users.noreply.github.com>
Date: Wed, 10 Sep 2025 00:31:16 +0000
Subject: [PATCH 6/8] remove golangci-lint fallback from lint target

Simplified the lint target to just run golangci-lint directly
instead of falling back to go vet when golangci-lint is not available.

Before:
- Complex shell logic to check if golangci-lint exists
- Fallback to go vet if not found
- Confusing behavior (different tools run depending on environment)

After:
- Simple: golangci-lint run
- Clear error if golangci-lint not installed
- Consistent behavior across environments

Updated RELEASES.md to document the golangci-lint requirement.

Tested: make lint fails cleanly with clear error when golangci-lint missing.

Co-authored-by: f0ssel <19379394+f0ssel@users.noreply.github.com>
---
 Makefile    | 7 +------
 RELEASES.md | 2 ++
 2 files changed, 3 insertions(+), 6 deletions(-)

diff --git a/Makefile b/Makefile
index 6c932a6..1051767 100644
--- a/Makefile
+++ b/Makefile
@@ -71,10 +71,5 @@ fmt:
 .PHONY: lint
 lint:
 	@echo "Linting code..."
-	@if command -v golangci-lint >/dev/null 2>&1; then \
-		golangci-lint run; \
-	else \
-		echo "golangci-lint not found, running go vet instead..."; \
-		go vet ./...; \
-	fi
+	golangci-lint run
 	@echo "✓ Linting complete!"
\ No newline at end of file
diff --git a/RELEASES.md b/RELEASES.md
index 0ff21b9..2a105f3 100644
--- a/RELEASES.md
+++ b/RELEASES.md
@@ -69,6 +69,8 @@ make fmt
 make lint
 ```
 
+**Note**: The `lint` target requires [golangci-lint](https://golangci-lint.run/) to be installed.
+
 ### Quick Build
 
 Build for your current platform:

From b5ec06a5b28c7da297f4cad93da20d08a44bdb47 Mon Sep 17 00:00:00 2001
From: "blink-so[bot]" <211532188+blink-so[bot]@users.noreply.github.com>
Date: Wed, 10 Sep 2025 00:33:09 +0000
Subject: [PATCH 7/8] remove redundant makefile-build workflow

Removed .github/workflows/makefile-build.yml as it duplicated
the functionality of the existing build.yml workflow.

The makefile-build workflow was added to demonstrate make build-all
but it created unnecessary duplication:

- build.yml: Builds on push/PR with matrix for parallel builds
- makefile-build.yml: Weekly + manual trigger using make build-all

The existing build.yml workflow already provides:
- Cross-platform builds for all supported platforms
- Artifact uploads for testing
- Triggered on every push/PR for immediate feedback

Users can run 'make build-all' locally if they want to build
all platforms in a single command.

Now we have a clean, focused workflow structure:
- ci.yml: Testing and verification
- build.yml: Cross-platform binary builds
- release.yml: Automated releases on tags

Co-authored-by: f0ssel <19379394+f0ssel@users.noreply.github.com>
---
 .github/workflows/makefile-build.yml | 63 ----------------------------
 1 file changed, 63 deletions(-)
 delete mode 100644 .github/workflows/makefile-build.yml

diff --git a/.github/workflows/makefile-build.yml b/.github/workflows/makefile-build.yml
deleted file mode 100644
index f9b6663..0000000
--- a/.github/workflows/makefile-build.yml
+++ /dev/null
@@ -1,63 +0,0 @@
-name: Makefile Build
-
-on:
-  workflow_dispatch: # Allow manual triggering
-  schedule:
-    - cron: '0 6 * * 1' # Weekly on Monday at 6 AM UTC
-
-jobs:
-  makefile-build:
-    name: Build All Platforms with Makefile
-    runs-on: ubuntu-latest
-
-    steps:
-    - name: Check out code
-      uses: actions/checkout@v4
-
-    - name: Set up Go
-      uses: actions/setup-go@v5
-      with:
-        go-version: '1.25'
-        check-latest: true
-
-    - name: Cache Go modules
-      uses: actions/cache@v4
-      with:
-        path: |
-          ~/.cache/go-build
-          ~/go/pkg/mod
-        key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
-        restore-keys: |
-          ${{ runner.os }}-go-
-
-    - name: Download dependencies
-      run: go mod download
-
-    - name: Verify dependencies
-      run: go mod verify
-
-    - name: Run tests
-      run: make test
-
-    - name: Build all platforms
-      run: make build-all
-
-    - name: Upload all binaries as single artifact
-      uses: actions/upload-artifact@v4
-      with:
-        name: jail-all-platforms-makefile
-        path: build/*
-        retention-days: 7
-
-    - name: Build Summary
-      run: |
-        echo "## 🛠️ Makefile Build Summary" >> $GITHUB_STEP_SUMMARY
-        echo "" >> $GITHUB_STEP_SUMMARY
-        echo "Built all platforms using \`make build-all\`:" >> $GITHUB_STEP_SUMMARY
-        echo "" >> $GITHUB_STEP_SUMMARY
-        echo "\`\`\`" >> $GITHUB_STEP_SUMMARY
-        ls -la build/
-        ls -la build/ >> $GITHUB_STEP_SUMMARY
-        echo "\`\`\`" >> $GITHUB_STEP_SUMMARY
-        echo "" >> $GITHUB_STEP_SUMMARY
-        echo "All binaries are available as a single artifact: \`jail-all-platforms-makefile\`" >> $GITHUB_STEP_SUMMARY

From 8e6f54c43d525f862f0629875f12ff2178ead8e5 Mon Sep 17 00:00:00 2001
From: "blink-so[bot]" <211532188+blink-so[bot]@users.noreply.github.com>
Date: Wed, 10 Sep 2025 00:34:03 +0000
Subject: [PATCH 8/8] streamline RELEASES.md to focus only on release process

Removed all development-related content from RELEASES.md:

## Removed Sections
- Local Development (Makefile usage, build scripts)
- Development Builds (GitHub Actions artifacts)
- Manual cross-compilation examples
- Build troubleshooting
- Version injection examples

## Kept Release-Focused Content
- Automated release process (git tag workflow)
- Supported platforms table
- Release process for maintainers
- Version naming conventions
- Installation from GitHub releases
- Release troubleshooting

The file now focuses exclusively on:
1. How to cut a release (git tag v1.0.0)
2. What gets built and released
3. How users install releases
4. Troubleshooting release issues

Development information belongs in README.md or separate docs,
not in a release-focused document.

Co-authored-by: f0ssel <19379394+f0ssel@users.noreply.github.com>
---
 RELEASES.md | 87 ++---------------------------------------------------
 1 file changed, 2 insertions(+), 85 deletions(-)

diff --git a/RELEASES.md b/RELEASES.md
index 2a105f3..ca39813 100644
--- a/RELEASES.md
+++ b/RELEASES.md
@@ -16,7 +16,7 @@ git push origin v1.0.0
 
 This triggers the **Release** workflow which:
 1. Builds binaries for all supported platforms
-2. Creates compressed archives (`.tar.gz` for Unix, `.zip` for Windows)
+2. Creates compressed archives (`.tar.gz` for Unix)
 3. Creates a GitHub release with all binaries attached
 4. Generates release notes with download instructions
 
@@ -29,83 +29,6 @@ This triggers the **Release** workflow which:
 | macOS | Intel | `jail-darwin-amd64` | `.tar.gz` |
 | macOS | Apple Silicon | `jail-darwin-arm64` | `.tar.gz` |
 
-### Development Builds
-
-Every push to `main` and every PR automatically builds binaries available as **GitHub Actions artifacts**:
-
-1. Go to the **Actions** tab
-2. Click on the latest **Build Binaries** workflow run
-3. Scroll down to **Artifacts** section
-4. Download the binary for your platform
-
-Artifacts are kept for 30 days.
-
-## Local Development
-
-### Using Makefile (Recommended)
-
-The project includes a Makefile with common development tasks:
-
-```bash
-# Build for current platform
-make build
-
-# Build for all platforms
-make build-all
-
-# Run tests
-make test
-
-# Run tests with coverage
-make test-coverage
-
-# Clean build artifacts
-make clean
-
-# Format code
-make fmt
-
-# Lint code
-make lint
-```
-
-**Note**: The `lint` target requires [golangci-lint](https://golangci-lint.run/) to be installed.
-
-### Quick Build
-
-Build for your current platform:
-
-```bash
-go build -o jail .
-```
-
-### Cross-Platform Build Script
-
-Use the provided script to build for all platforms:
-
-```bash
-./scripts/build.sh
-```
-
-This creates a `build/` directory with binaries for all supported platforms.
-
-### Manual Cross-Platform Build
-
-```bash
-# Linux x64
-GOOS=linux GOARCH=amd64 go build -o jail-linux-amd64 .
-
-# macOS ARM64 (Apple Silicon)
-GOOS=darwin GOARCH=arm64 go build -o jail-darwin-arm64 .
-```
-
-### Build with Version Info
-
-```bash
-VERSION="v1.0.0"
-go build -ldflags="-X main.version=$VERSION" -o jail .
-```
-
 ## Release Process
 
 ### For Maintainers
@@ -113,7 +36,7 @@ go build -ldflags="-X main.version=$VERSION" -o jail .
 1. **Prepare Release**:
    - Ensure all changes are merged to `main`
    - Update version in relevant files if needed
-   - Test the build locally: `./scripts/build.sh`
+   - Test the build locally
 
 2. **Create Release**:
    ```bash
@@ -153,12 +76,6 @@ jail --help
 
 ## Troubleshooting
 
-### Build Issues
-
-- **Go version**: Ensure you're using Go 1.25+
-- **Dependencies**: Run `go mod download` and `go mod verify`
-- **Cross-compilation**: Some platforms may require specific build tags
-
 ### Release Issues
 
 - **Tag not triggering release**: Ensure tag follows `v*` pattern