fix(ci): replace Gemfury with GitHub Pages apt/rpm repository

The GEMFURY_PUBLISH_TOKEN is no longer valid and cannot be regenerated due
to permission issues on the Gemfury org. Replace the Fury publisher with a
self-hosted apt/rpm repository on GitHub Pages using the existing
kurtosis-cli-release-artifacts repo.

Changes:
- Remove publishers section from goreleaser config
- Fix release.ids to include deb-and-rpm-packages so artifacts upload to GitHub Release
- Remove FURY_TOKEN from build script (keep GITHUB_TOKEN)
- Add update-package-repo job to publish workflow that generates apt/rpm repo metadata
- Update all installation docs and CI test references to use GitHub Pages URL
- Update CircleCI config test jobs to use new apt URL

Users can now install from: https://kurtosis-tech.github.io/kurtosis-cli-release-artifacts/

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: tedim52

.circleci/config.yml

@@ -730,7 +730,7 @@ jobs:
       - <<: *steps_install_go
 
       - run: |
-          echo "deb [trusted=yes] https://apt.fury.io/kurtosis-tech/ /" | sudo tee /etc/apt/sources.list.d/kurtosis.list
+          echo "deb [trusted=yes] https://kurtosis-tech.github.io/kurtosis-cli-release-artifacts/ /" | sudo tee /etc/apt/sources.list.d/kurtosis.list
           sudo apt update
           sudo apt install kurtosis-cli
       # We don't send metrics to avoid polluting our logs
@@ -801,7 +801,7 @@ jobs:
           at: "<< pipeline.parameters.workspace-with-cli-binary-and-images-mountpoint >>"
 
       - run: |
-          echo "deb [trusted=yes] https://apt.fury.io/kurtosis-tech/ /" | sudo tee /etc/apt/sources.list.d/kurtosis.list
+          echo "deb [trusted=yes] https://kurtosis-tech.github.io/kurtosis-cli-release-artifacts/ /" | sudo tee /etc/apt/sources.list.d/kurtosis.list
           sudo apt update
           sudo apt install kurtosis-cli
       # We don't send metrics to avoid polluting our logs
@@ -841,7 +841,7 @@ jobs:
       - <<: *steps_install_go
 
       - run: |
-          echo "deb [trusted=yes] https://apt.fury.io/kurtosis-tech/ /" | sudo tee /etc/apt/sources.list.d/kurtosis.list
+          echo "deb [trusted=yes] https://kurtosis-tech.github.io/kurtosis-cli-release-artifacts/ /" | sudo tee /etc/apt/sources.list.d/kurtosis.list
           sudo apt update
           sudo apt install kurtosis-cli
       # We don't send metrics to avoid polluting our logs
@@ -1047,7 +1047,7 @@ jobs:
       - <<: *steps_install_go
 
       - run: |
-          echo "deb [trusted=yes] https://apt.fury.io/kurtosis-tech/ /" | sudo tee /etc/apt/sources.list.d/kurtosis.list
+          echo "deb [trusted=yes] https://kurtosis-tech.github.io/kurtosis-cli-release-artifacts/ /" | sudo tee /etc/apt/sources.list.d/kurtosis.list
           sudo apt update
           sudo apt install kurtosis-cli curl
       # We don't send metrics to avoid polluting our logs

.github/workflows/build.yml

@@ -875,7 +875,7 @@ jobs:
       # Install released Kurtosis CLI from apt
       - name: Install released Kurtosis CLI
         run: |
-          echo "deb [trusted=yes] https://apt.fury.io/kurtosis-tech/ /" | sudo tee /etc/apt/sources.list.d/kurtosis.list
+          echo "deb [trusted=yes] https://kurtosis-tech.github.io/kurtosis-cli-release-artifacts/ /" | sudo tee /etc/apt/sources.list.d/kurtosis.list
           sudo apt-get update
           sudo apt-get install -y kurtosis-cli
 

.github/workflows/publish.yml

@@ -308,6 +308,75 @@ jobs:
 
       - name: Build and publish CLI
         env:
-          GEMFURY_PUBLISH_TOKEN: ${{ secrets.GEMFURY_PUBLISH_TOKEN }}
           KURTOSISBOT_GITHUB_TOKEN: ${{ secrets.KURTOSISBOT_GITHUB_TOKEN }}
         run: cli/cli/scripts/build.sh true true
+
+  # ============================================================================
+  # Update apt/rpm Package Repository (GitHub Pages)
+  # ============================================================================
+  update-package-repo:
+    runs-on: ubuntu-latest
+    needs: push-cli-artifacts
+    steps:
+      - name: Install repo tools
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y dpkg-dev createrepo-c
+
+      - name: Checkout existing GitHub Pages
+        uses: actions/checkout@v4
+        with:
+          repository: kurtosis-tech/kurtosis-cli-release-artifacts
+          ref: gh-pages
+          token: ${{ secrets.KURTOSISBOT_GITHUB_TOKEN }}
+          path: repo
+
+      - name: Download deb/rpm from release
+        env:
+          GH_TOKEN: ${{ secrets.KURTOSISBOT_GITHUB_TOKEN }}
+        run: |
+          set -euo pipefail
+          version="${GITHUB_REF_NAME}"
+
+          mkdir -p downloads
+          gh release download "${version}" \
+            --repo kurtosis-tech/kurtosis-cli-release-artifacts \
+            --pattern '*.deb' \
+            --pattern '*.rpm' \
+            --dir downloads
+
+          echo "Downloaded artifacts:"
+          ls -la downloads/
+
+      - name: Update apt repository
+        run: |
+          set -euo pipefail
+          cd repo
+
+          # Flat repo layout: debs and Packages file at the root (like Gemfury)
+          cp ../downloads/*.deb .
+
+          # Generate Packages index for all deb files in the root
+          dpkg-scanpackages --multiversion . > Packages
+          gzip -9c Packages > Packages.gz
+
+      - name: Update rpm repository
+        run: |
+          set -euo pipefail
+          cd repo
+
+          mkdir -p rpm/packages
+          cp ../downloads/*.rpm rpm/packages/
+
+          createrepo_c --update rpm/
+
+      - name: Deploy to GitHub Pages
+        uses: peaceiris/actions-gh-pages@v4
+        with:
+          personal_token: ${{ secrets.KURTOSISBOT_GITHUB_TOKEN }}
+          external_repository: kurtosis-tech/kurtosis-cli-release-artifacts
+          publish_dir: ./repo
+          keep_files: true
+          user_name: kurtosisbot
+          user_email: kurtosisbot@users.noreply.github.com
+          commit_message: "Update package repo for ${{ github.ref_name }}"

cli/cli/.goreleaser.yml

@@ -52,7 +52,6 @@ archives:
       - scripts/completions/scripts/*
     name_template: kurtosis-cli_{{ .Version }}_{{ .Os }}_{{ .Arch }}
 
-# Gemfury accepts deb & rpm packages but not APK, so we build these two separately
 nfpms:
   - id: deb-and-rpm-packages
     package_name: kurtosis-cli
@@ -84,10 +83,9 @@ release:
 
   name_template: "{{ .Version }}"
 
-  # NOTE: these are the archive IDs, not the build/binary IDs
   ids:
     - cli
-    - cli-linux-packages
+    - deb-and-rpm-packages
 
 brews:
   # creates a brew formula representing the latest version
@@ -140,17 +138,6 @@ brews:
     caveats: |
       The kurtosis CLI is installed with tab completion support. For more details visit https://docs.kurtosis.com/.
 
-publishers:
-  # Inspired by https://netdevops.me/2021/building-and-publishing-deb/rpm-packages-with-goreleaser-and-fury.io/
-  - name: fury.io
-    ids:
-    - deb-and-rpm-packages
-    dir: "{{ dir .ArtifactPath }}"
-    env:
-      # This will get set by CI; see the CI config for how
-      - 'FURY_TOKEN={{ .Env.FURY_TOKEN }}'
-    cmd: "curl -F package=@{{ .ArtifactName }} https://{{ .Env.FURY_TOKEN }}@push.fury.io/kurtosis-tech/"
-
 source:
   # Kurt Core is a private project, and we definitely don't want to release source code
   enabled: false

cli/cli/scripts/build.sh

@@ -72,9 +72,8 @@ fi
 export CLI_BINARY_FILENAME \
 export VERSION="${version}"
 if "${should_publish_arg}"; then
-    # These environment variables will be set ONLY when publishing, in the CI environment
-    # See the CI config for details on how these get set
-    export FURY_TOKEN="${GEMFURY_PUBLISH_TOKEN}"
+    # This environment variable will be set ONLY when publishing, in the CI environment
+    # See the CI config for details on how it gets set
     export GITHUB_TOKEN="${KURTOSISBOT_GITHUB_TOKEN}"
 fi
 # ^^^^^^^^ Goreleaser variables ^^^^^^^^^^^^^^^^^^^

docs/docs/get-started/installing-the-cli.md

@@ -49,7 +49,7 @@ xcode-select --install
 <TabItem value="apt" label="apt (Ubuntu)">
 
 ```bash
-echo "deb [trusted=yes] https://apt.fury.io/kurtosis-tech/ /" | sudo tee /etc/apt/sources.list.d/kurtosis.list
+echo "deb [trusted=yes] https://kurtosis-tech.github.io/kurtosis-cli-release-artifacts/ /" | sudo tee /etc/apt/sources.list.d/kurtosis.list
 sudo apt update
 sudo apt install kurtosis-cli
 ```
@@ -60,7 +60,7 @@ sudo apt install kurtosis-cli
 ```bash
 echo '[kurtosis]
 name=Kurtosis
-baseurl=https://yum.fury.io/kurtosis-tech/
+baseurl=https://kurtosis-tech.github.io/kurtosis-cli-release-artifacts/rpm
 enabled=1
 gpgcheck=0' | sudo tee /etc/yum.repos.d/kurtosis.repo
 sudo yum install kurtosis-cli

docs/docs/guides/installing-historical-versions.md

@@ -46,7 +46,7 @@ sudo apt remove kurtosis-cli
 :::
 
 ```bash
-echo "deb [trusted=yes] https://apt.fury.io/kurtosis-tech/ /" | sudo tee /etc/apt/sources.list.d/kurtosis.list
+echo "deb [trusted=yes] https://kurtosis-tech.github.io/kurtosis-cli-release-artifacts/ /" | sudo tee /etc/apt/sources.list.d/kurtosis.list
 sudo apt update
 sudo apt remove kurtosis-cli
 sudo apt install kurtosis-cli=<version> -V
@@ -68,7 +68,7 @@ sudo yum remove kurtosis-cli
 ```bash
 echo '[kurtosis]
 name=Kurtosis
-baseurl=https://yum.fury.io/kurtosis-tech/
+baseurl=https://kurtosis-tech.github.io/kurtosis-cli-release-artifacts/rpm
 enabled=1
 gpgcheck=0' | sudo tee /etc/yum.repos.d/kurtosis.repo
 sudo yum remove kurtosis-cli