fix(ci): add GitHub Pages apt/rpm repository alongside Gemfury

Add a GitHub Pages-based apt/rpm repository as an additional publishing
target alongside the existing Gemfury publisher. This provides a fallback
if the Gemfury token is unavailable.

Changes:
- Add update-package-repo job to publish workflow using peaceiris/actions-gh-pages
- Fix release.ids to include deb-and-rpm-packages so artifacts upload to GitHub Release
- Add --fail flag to Fury curl command to surface HTTP errors
- Keep existing Gemfury publisher and all Fury-based installation references

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: tedim52

.github/workflows/publish.yml

@@ -311,3 +311,73 @@ jobs:
           GEMFURY_PUBLISH_TOKEN: ${{ secrets.GEMFURY_PUBLISH_TOKEN }}
           KURTOSISBOT_GITHUB_TOKEN: ${{ secrets.KURTOSISBOT_GITHUB_TOKEN }}
         run: cli/cli/scripts/build.sh true true
+
+  # ============================================================================
+  # Update apt/rpm Package Repository (GitHub Pages)
+  # ============================================================================
+  update-package-repo:
+    runs-on: ubuntu-latest
+    needs: push-cli-artifacts
+    steps:
+      - name: Install repo tools
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y dpkg-dev createrepo-c
+
+      - name: Checkout existing GitHub Pages
+        uses: actions/checkout@v4
+        with:
+          repository: kurtosis-tech/kurtosis-cli-release-artifacts
+          ref: gh-pages
+          token: ${{ secrets.KURTOSISBOT_GITHUB_TOKEN }}
+          path: repo
+
+      - name: Download deb/rpm from release
+        env:
+          GH_TOKEN: ${{ secrets.KURTOSISBOT_GITHUB_TOKEN }}
+        run: |
+          set -euo pipefail
+          version="${GITHUB_REF_NAME}"
+
+          mkdir -p downloads
+          gh release download "${version}" \
+            --repo kurtosis-tech/kurtosis-cli-release-artifacts \
+            --pattern '*.deb' \
+            --pattern '*.rpm' \
+            --dir downloads
+
+          echo "Downloaded artifacts:"
+          ls -la downloads/
+
+      - name: Update apt repository
+        run: |
+          set -euo pipefail
+          cd repo
+
+          # Flat repo layout: debs and Packages file at the root (like Gemfury)
+          cp ../downloads/*.deb .
+
+          # Generate Packages index for all deb files in the root
+          dpkg-scanpackages --multiversion . > Packages
+          gzip -9c Packages > Packages.gz
+
+      - name: Update rpm repository
+        run: |
+          set -euo pipefail
+          cd repo
+
+          mkdir -p rpm/packages
+          cp ../downloads/*.rpm rpm/packages/
+
+          createrepo_c --update rpm/
+
+      - name: Deploy to GitHub Pages
+        uses: peaceiris/actions-gh-pages@v4
+        with:
+          personal_token: ${{ secrets.KURTOSISBOT_GITHUB_TOKEN }}
+          external_repository: kurtosis-tech/kurtosis-cli-release-artifacts
+          publish_dir: ./repo
+          keep_files: true
+          user_name: kurtosisbot
+          user_email: kurtosisbot@users.noreply.github.com
+          commit_message: "Update package repo for ${{ github.ref_name }}"

cli/cli/.goreleaser.yml

@@ -52,7 +52,6 @@ archives:
       - scripts/completions/scripts/*
     name_template: kurtosis-cli_{{ .Version }}_{{ .Os }}_{{ .Arch }}
 
-# Gemfury accepts deb & rpm packages but not APK, so we build these two separately
 nfpms:
   - id: deb-and-rpm-packages
     package_name: kurtosis-cli
@@ -84,10 +83,10 @@ release:
 
   name_template: "{{ .Version }}"
 
-  # NOTE: these are the archive IDs, not the build/binary IDs
   ids:
     - cli
     - cli-linux-packages
+    - deb-and-rpm-packages
 
 brews:
   # creates a brew formula representing the latest version
@@ -141,15 +140,13 @@ brews:
       The kurtosis CLI is installed with tab completion support. For more details visit https://docs.kurtosis.com/.
 
 publishers:
-  # Inspired by https://netdevops.me/2021/building-and-publishing-deb/rpm-packages-with-goreleaser-and-fury.io/
   - name: fury.io
     ids:
     - deb-and-rpm-packages
     dir: "{{ dir .ArtifactPath }}"
     env:
-      # This will get set by CI; see the CI config for how
       - 'FURY_TOKEN={{ .Env.FURY_TOKEN }}'
-    cmd: "curl -F package=@{{ .ArtifactName }} https://{{ .Env.FURY_TOKEN }}@push.fury.io/kurtosis-tech/"
+    cmd: "curl --fail -F package=@{{ .ArtifactName }} https://{{ .Env.FURY_TOKEN }}@push.fury.io/kurtosis-tech/"
 
 source:
   # Kurt Core is a private project, and we definitely don't want to release source code