fix: Create RPM source tarball on host to avoid QEMU emulation issues

Move tarball creation from inside the container to the GitHub Actions
host to work around QEMU emulation problems with tar operations.

Author: libraz

.github/workflows/release.yml

@@ -11,10 +11,18 @@ permissions:
 jobs:
   build-rpm:
     name: Build RPM Package (${{ matrix.arch }})
-    runs-on: ubuntu-latest
+    # Use native runners for each architecture to avoid QEMU emulation issues
+    # QEMU has known problems with tar operations that cause rpmbuild to fail
+    runs-on: ${{ matrix.runner }}
     strategy:
       matrix:
-        arch: [x86_64, aarch64]
+        include:
+          - arch: x86_64
+            runner: ubuntu-latest
+            docker_platform: linux/amd64
+          - arch: aarch64
+            runner: ubuntu-24.04-arm
+            docker_platform: linux/arm64
       fail-fast: false
 
     steps:
@@ -23,11 +31,6 @@ jobs:
         with:
           fetch-depth: 0  # Fetch all history for git describe
 
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
-        with:
-          platforms: arm64,amd64
-
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
@@ -38,37 +41,42 @@ jobs:
           echo "version=$VERSION" >> $GITHUB_OUTPUT
           echo "Building version: $VERSION for architecture: ${{ matrix.arch }}"
 
-      - name: Set architecture-specific variables
-        id: arch
-        run: |
-          if [ "${{ matrix.arch }}" = "x86_64" ]; then
-            echo "docker_platform=linux/amd64" >> $GITHUB_OUTPUT
-            echo "docker_arch=amd64" >> $GITHUB_OUTPUT
-          else
-            echo "docker_platform=linux/arm64" >> $GITHUB_OUTPUT
-            echo "docker_arch=arm64" >> $GITHUB_OUTPUT
-          fi
-
       - name: Build RPM builder Docker image
         run: |
           docker buildx build \
-            --platform ${{ steps.arch.outputs.docker_platform }} \
+            --platform ${{ matrix.docker_platform }} \
             --load \
             --cache-from type=gha,scope=rpmbuild-${{ matrix.arch }} \
             --cache-to type=gha,mode=max,scope=rpmbuild-${{ matrix.arch }} \
             -f support/rpm/Dockerfile.rpmbuild \
             -t mygramdb-rpmbuild:${{ steps.version.outputs.version }}-${{ matrix.arch }} \
             .
 
+      - name: Create source tarball
+        run: |
+          VERSION="${{ steps.version.outputs.version }}"
+          NAME="mygramdb"
+          TARBALL="${NAME}-${VERSION}.tar.gz"
+
+          mkdir -p "$GITHUB_WORKSPACE/rpmsources"
+
+          # Create tarball using git archive for clean reproducible builds
+          git archive --format=tar.gz --prefix="${NAME}-${VERSION}/" HEAD \
+            > "$GITHUB_WORKSPACE/rpmsources/${TARBALL}"
+
+          echo "Created source tarball:"
+          ls -lh "$GITHUB_WORKSPACE/rpmsources/${TARBALL}"
+
       - name: Build RPM packages
         run: |
           # Create output directory in workspace
           mkdir -p "$GITHUB_WORKSPACE/dist/rpm"
 
-          # Run RPM build with absolute paths
+          # Run RPM build with pre-created tarball mounted
           docker run --rm \
-            --platform ${{ steps.arch.outputs.docker_platform }} \
+            --platform ${{ matrix.docker_platform }} \
             -e MYGRAMDB_VERSION="${{ steps.version.outputs.version }}" \
+            -v "$GITHUB_WORKSPACE/rpmsources:/rpmsources:ro" \
             -v "$GITHUB_WORKSPACE/dist:/workspace/dist" \
             mygramdb-rpmbuild:${{ steps.version.outputs.version }}-${{ matrix.arch }}
 
@@ -99,7 +107,7 @@ jobs:
           echo "Testing RPM: $MAIN_RPM"
 
           docker run --rm \
-            --platform ${{ steps.arch.outputs.docker_platform }} \
+            --platform ${{ matrix.docker_platform }} \
             -v "$GITHUB_WORKSPACE/dist:/dist" \
             almalinux:9 bash -c "
             set -e

support/rpm/Dockerfile.rpmbuild

@@ -38,10 +38,12 @@ RUN rpmdev-setuptree
 
 WORKDIR /workspace
 
-# Copy source files
-COPY . /workspace/
+# Copy spec file only (tarball will be mounted at runtime)
+COPY support/rpm/mygramdb.spec /root/rpmbuild/SPECS/
 
 # Create build script
+# NOTE: The source tarball must be pre-created and mounted at /rpmsources/
+# This avoids QEMU emulation issues with tar operations inside containers
 RUN cat > /build-rpm.sh << 'EOF' && chmod +x /build-rpm.sh \
 && echo "Build script created successfully"
 #!/bin/bash
@@ -62,21 +64,17 @@ NAME="mygramdb"
 echo -e "${YELLOW}Building ${NAME}-${VERSION}${NC}"
 echo -e "${YELLOW}Architecture: $(uname -m)${NC}"
 
-# Create source tarball
-echo -e "${YELLOW}Creating source tarball...${NC}"
+# Expect tarball to be mounted at /rpmsources/
 TARBALL="${NAME}-${VERSION}.tar.gz"
-cd /workspace
-# Create tarball from workspace (excluding build artifacts)
-tar --exclude='./build' \
-    --exclude='./dist' \
-    --exclude='./.git' \
-    --exclude='*.o' \
-    --exclude='*.a' \
-    --transform "s,^\.,${NAME}-${VERSION}," \
-    -czf "/root/rpmbuild/SOURCES/${TARBALL}" .
-
-# Copy spec file
-cp support/rpm/mygramdb.spec /root/rpmbuild/SPECS/
+if [ ! -f "/rpmsources/${TARBALL}" ]; then
+    echo -e "${RED}Error: Source tarball not found at /rpmsources/${TARBALL}${NC}"
+    echo -e "${RED}The tarball must be pre-created and mounted into the container.${NC}"
+    exit 1
+fi
+
+# Copy tarball to RPM SOURCES directory
+echo -e "${YELLOW}Copying source tarball to RPM build directory...${NC}"
+cp "/rpmsources/${TARBALL}" "/root/rpmbuild/SOURCES/${TARBALL}"
 
 # Build RPM
 echo -e "${YELLOW}Building RPM package...${NC}"

support/rpm/mygramdb.spec

@@ -136,19 +136,19 @@ fi
 # Static build - no devel package needed
 
 %changelog
-* Tue Nov 19 2025 libraz <libraz@libraz.net> - 1.2.0-1
+* Wed Nov 19 2025 libraz <libraz@libraz.net> - 1.2.0-1
 - Network ACL deny-by-default security enhancement
 - Configuration hot reload via SIGHUP
 - MySQL failover detection with server UUID tracking
 - Rate limiting and connection limits
 - See CHANGELOG.md for full details
 
-* Sun Nov 17 2025 libraz <libraz@libraz.net> - 1.1.0-1
+* Mon Nov 17 2025 libraz <libraz@libraz.net> - 1.1.0-1
 - Query result caching with n-gram invalidation
 - Network ACL with CIDR filtering
 - Prometheus metrics endpoint
 - MySQL SSL/TLS support
 - See docs/releases/v1.1.0.md for details
 
-* Wed Nov 13 2025 libraz <libraz@libraz.net> - 1.0.0-1
+* Thu Nov 13 2025 libraz <libraz@libraz.net> - 1.0.0-1
 - Initial RPM release