feat: Add RPM packaging and GitHub Actions release workflow

Implement comprehensive RPM packaging with static linking for RHEL/AlmaLinux/Rocky Linux 9.

## RPM Packaging
- Add spec file for building static-linked RPM packages (support/rpm/mygramdb.spec)
- Create Docker-based RPM build environment (support/rpm/Dockerfile.rpmbuild)
- Implement automated build script (support/rpm/test-rpm-build.sh)
- Add systemd service file (support/systemd/mygramdb.service)
- Use Git tag-based versioning for RPM packages

## GitHub Actions
- Add release workflow triggered by version tags (v*)
- Automated RPM build, test, and GitHub release creation
- Install verification in AlmaLinux 9 container

## Static Linking
- Configure CMake with -DBUILD_SHARED_LIBS=OFF for minimal dependencies
- Only requires libicu and MySQL client libraries (auto-installed)
- Binary size: ~1.8MB for mygramdb, ~68KB for mygram-cli

## File Organization
- Move Docker files to support/docker/
- Move development scripts to support/dev/
- Add support/rpm/ for RPM packaging infrastructure
- Add support/systemd/ for systemd service files

## Daemon & Security Features
- Add daemon mode support (--daemon flag)
- Implement root user prevention for security
- Add file logging support (--log-file flag)
- Comprehensive daemon and logging tests

## Testing Infrastructure
- Reorganize tests into integration/ and unit test directories
- Add integration test scripts for daemon mode and security
- Add comprehensive logging configuration tests
- Improve test organization and isolation

## Documentation
- Update installation docs with RPM installation instructions
- Add daemon mode and logging configuration examples
- Update Docker deployment documentation

Breaking Changes:
- Docker-related files moved from docker/ to support/docker/
- scripts/run-clang-tidy.sh moved to support/dev/

Closes: Issues related to RPM packaging and release automation

Author: libraz

.github/workflows/ci.yml

@@ -40,7 +40,7 @@ jobs:
               - 'third_party/**'
               - 'Makefile'
               - 'Dockerfile'
-              - 'docker/**'
+              - 'support/docker/**'
               - 'examples/**'
               - '.dockerignore'
 

.github/workflows/release.yml

@@ -0,0 +1,110 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+permissions:
+  contents: write
+
+jobs:
+  build-rpm:
+    name: Build RPM Package
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0  # Fetch all history for git describe
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Extract version from tag
+        id: version
+        run: |
+          VERSION="${GITHUB_REF#refs/tags/v}"
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+          echo "Building version: $VERSION"
+
+      - name: Build RPM package
+        run: |
+          cd support/rpm
+          ./test-rpm-build.sh
+
+      - name: List generated RPMs
+        run: |
+          echo "Generated RPM packages:"
+          ls -lh dist/rpm/*.rpm
+
+      - name: Test RPM installation (AlmaLinux 9)
+        run: |
+          docker run --rm -v "$(pwd)/dist:/dist" almalinux:9 bash -c "
+            echo '=== Installing Oracle MySQL 8.0 repository ==='
+            dnf install -y https://dev.mysql.com/get/mysql84-community-release-el9-1.noarch.rpm > /dev/null 2>&1
+            dnf module disable -y mysql > /dev/null 2>&1
+
+            echo '=== Installing MygramDB RPM ==='
+            dnf install -y /dist/rpm/mygramdb-${{ steps.version.outputs.version }}-*.el9.*.rpm
+
+            echo '=== Verifying installation ==='
+            echo 'Checking for missing library dependencies...'
+            ldd /usr/bin/mygramdb | grep 'not found' && exit 1 || echo 'mygramdb: OK'
+            ldd /usr/bin/mygram-cli | grep 'not found' && exit 1 || echo 'mygram-cli: OK'
+
+            echo '=== Installation test passed! ==='
+          "
+
+      - name: Upload RPM artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: rpm-packages
+          path: |
+            dist/rpm/*.rpm
+          retention-days: 30
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v1
+        with:
+          name: Release ${{ steps.version.outputs.version }}
+          draft: false
+          prerelease: false
+          generate_release_notes: true
+          files: |
+            dist/rpm/mygramdb-${{ steps.version.outputs.version }}-*.el9.*.rpm
+            dist/rpm/mygramdb-debuginfo-${{ steps.version.outputs.version }}-*.el9.*.rpm
+            dist/rpm/mygramdb-debugsource-${{ steps.version.outputs.version }}-*.el9.*.rpm
+          body: |
+            ## MygramDB ${{ steps.version.outputs.version }}
+
+            ### Installation (RHEL/AlmaLinux/Rocky Linux 9)
+
+            ```bash
+            # Install Oracle MySQL 8.0 repository
+            sudo dnf install -y https://dev.mysql.com/get/mysql84-community-release-el9-1.noarch.rpm
+            sudo dnf module disable -y mysql
+
+            # Download and install MygramDB RPM
+            wget https://github.com/${{ github.repository }}/releases/download/v${{ steps.version.outputs.version }}/mygramdb-${{ steps.version.outputs.version }}-1.el9.aarch64.rpm
+            sudo dnf install -y ./mygramdb-${{ steps.version.outputs.version }}-1.el9.aarch64.rpm
+
+            # Configure and start service
+            sudo cp /etc/mygramdb/config.yaml.example /etc/mygramdb/config.yaml
+            sudo vi /etc/mygramdb/config.yaml  # Edit configuration
+            sudo systemctl enable --now mygramdb
+            ```
+
+            ### Package Details
+            - **Platform**: RHEL 9 / AlmaLinux 9 / Rocky Linux 9
+            - **Architecture**: aarch64 (ARM64)
+            - **Build Type**: Static linking (minimal dependencies)
+            - **Dependencies**: libicu, MySQL client libraries (auto-installed)
+
+            ### Files Included
+            - Binary: `/usr/bin/mygramdb`
+            - CLI client: `/usr/bin/mygram-cli`
+            - Systemd service: `/usr/lib/systemd/system/mygramdb.service`
+            - Config example: `/etc/mygramdb/config.yaml.example`
+            - Data directory: `/var/lib/mygramdb`

.gitignore

@@ -2,6 +2,7 @@
 build/
 build-*/
 cmake-build-*/
+dist/
 *.o
 *.a
 *.so
@@ -58,7 +59,7 @@ snapshots/
 
 # SQL files (may contain sensitive data)
 *.sql
-!docker/mysql/init/*.sql
+!support/docker/mysql/init/*.sql
 
 # Backup directory
 backup/

CMakeLists.txt

@@ -2,7 +2,33 @@ cmake_minimum_required(VERSION 3.15)
 # Set CMake policy to suppress deprecation warnings from dependencies
 cmake_policy(SET CMP0048 NEW)
 cmake_policy(SET CMP0077 NEW)
-project(MygramDB VERSION 1.0.0 LANGUAGES CXX C)
+
+# Get version from environment variable or git tag
+if(DEFINED ENV{MYGRAMDB_VERSION})
+  set(PROJECT_VERSION_FROM_ENV "$ENV{MYGRAMDB_VERSION}")
+  message(STATUS "Version from environment: ${PROJECT_VERSION_FROM_ENV}")
+  project(MygramDB VERSION ${PROJECT_VERSION_FROM_ENV} LANGUAGES CXX C)
+else()
+  # Get version from git tag
+  execute_process(
+    COMMAND git describe --tags --abbrev=0
+    WORKING_DIRECTORY ${CMAKE_SOURCE_DIR}
+    OUTPUT_VARIABLE GIT_TAG
+    OUTPUT_STRIP_TRAILING_WHITESPACE
+    ERROR_QUIET
+  )
+
+  # Parse version from tag (remove 'v' prefix if present)
+  if(GIT_TAG)
+    string(REGEX REPLACE "^v" "" PROJECT_VERSION_FROM_GIT "${GIT_TAG}")
+    message(STATUS "Version from git tag: ${PROJECT_VERSION_FROM_GIT}")
+  else()
+    set(PROJECT_VERSION_FROM_GIT "0.0.0")
+    message(WARNING "No git tag found, using default version: ${PROJECT_VERSION_FROM_GIT}")
+  endif()
+
+  project(MygramDB VERSION ${PROJECT_VERSION_FROM_GIT} LANGUAGES CXX C)
+endif()
 
 # C++ Standard
 set(CMAKE_CXX_STANDARD 17)
@@ -102,7 +128,9 @@ if(PkgConfig_FOUND)
   if(MYSQL_FOUND)
     message(STATUS "Found MySQL client via pkg-config")
     message(STATUS "  Include dirs: ${MYSQL_INCLUDE_DIRS}")
-    message(STATUS "  Libraries: ${MYSQL_LIBRARIES}")
+    message(STATUS "  Libraries: ${MYSQL_LINK_LIBRARIES}")
+    # Use LINK_LIBRARIES which includes full link flags
+    set(MYSQL_LIBRARIES ${MYSQL_LINK_LIBRARIES})
   endif()
 endif()
 

Dockerfile

@@ -64,7 +64,7 @@ RUN mkdir -p /var/lib/mygramdb /etc/mygramdb && \
 COPY --from=builder /build/examples/config-minimal.yaml /etc/mygramdb/config.yaml.example
 
 # Copy entrypoint script
-COPY docker/entrypoint.sh /usr/local/bin/entrypoint.sh
+COPY support/docker/entrypoint.sh /usr/local/bin/entrypoint.sh
 RUN chmod +x /usr/local/bin/entrypoint.sh
 
 # Switch to non-root user

Makefile

@@ -147,7 +147,7 @@ format-check:
 
 # Check code with clang-tidy
 lint: build
-	@bash scripts/run-clang-tidy.sh
+	@bash support/dev/run-clang-tidy.sh
 
 # Build and run mygramdb
 run: build

docker-compose.yml

@@ -24,7 +24,7 @@ services:
       - "${MYSQL_PORT:-3306}:3306"
     volumes:
       - mysql_data:/var/lib/mysql
-      - ./docker/mysql/init:/docker-entrypoint-initdb.d:ro
+      - ./support/docker/mysql/init:/docker-entrypoint-initdb.d:ro
     healthcheck:
       test: ["CMD", "mysqladmin", "ping", "-h", "localhost", "-u", "root", "-p${MYSQL_ROOT_PASSWORD:-root_secure_password}"]
       interval: 10s

docs/en/configuration.md

@@ -80,15 +80,15 @@ memory:
 dump:
   dir: "/var/lib/mygramdb/dumps"
   default_filename: "mygramdb.dmp"
-  interval_sec: 600
+  interval_sec: 0                   # 0 = disabled (set to 7200 for 120-minute intervals)
   retain: 3
 
 api:
   tcp:
     bind: "127.0.0.1"
     port: 11016
   http:
-    enable: true
+    enable: false                   # Disabled by default
     bind: "127.0.0.1"
     port: 8080
     enable_cors: false
@@ -102,6 +102,7 @@ network:
 logging:
   level: "info"
   json: true
+  file: ""
 ```
 
 ### JSON Format (config.json)
@@ -175,7 +176,7 @@ The same configuration in JSON format:
   "dump": {
     "dir": "/var/lib/mygramdb/dumps",
     "default_filename": "mygramdb.dmp",
-    "interval_sec": 600,
+    "interval_sec": 0,
     "retain": 3
   },
   "api": {
@@ -184,7 +185,7 @@ The same configuration in JSON format:
       "port": 11016
     },
     "http": {
-      "enable": true,
+      "enable": false,
       "bind": "127.0.0.1",
       "port": 8080,
       "enable_cors": false,
@@ -460,7 +461,7 @@ Dump (snapshot) persistence settings with automatic backup:
   - Directory is created automatically on startup if it doesn't exist
   - Write permissions are verified at startup
 - **default_filename**: Default filename for manual `DUMP SAVE` commands (default: `mygramdb.dmp`)
-- **interval_sec**: Auto-save interval in seconds (default: `600`, `0` = disabled)
+- **interval_sec**: Auto-save interval in seconds (default: `0` = disabled, recommended: `7200` for 120-minute intervals)
   - Automatic dumps are saved with timestamp-based filenames: `auto_YYYYMMDD_HHMMSS.dmp`
   - Similar to Redis RDB persistence
 - **retain**: Number of auto-saved dumps to retain (default: `3`)
@@ -485,7 +486,7 @@ api:
 ```yaml
 api:
   http:
-    enable: true                    # Default: true
+    enable: true                    # Default: false
     bind: "127.0.0.1"               # Default: 127.0.0.1 (localhost only)
     port: 8080                      # Default: 8080
     enable_cors: false              # Default: disabled. Enable only when exposing to browsers.
@@ -538,11 +539,28 @@ Logging configuration:
 - **level**: Log level (default: `info`)
   - Options: `debug`, `info`, `warn`, `error`
 - **json**: JSON format output (default: `true`)
+- **file**: Log file path (default: `""` = stdout)
+  - Empty string: log to stdout (recommended for systemd/Docker)
+  - File path: log to file (e.g., `/var/log/mygramdb/mygramdb.log`)
+  - **Required when using `-d`/`--daemon` option** (stdout is redirected to `/dev/null` in daemon mode)
 
 ```yaml
 logging:
   level: "info"
   json: true
+  file: ""                          # Empty = stdout, or set file path
+```
+
+**systemd/Docker (recommended)**:
+```yaml
+logging:
+  file: ""                          # Log to stdout, captured by systemd journal
+```
+
+**Daemon mode (`-d` option)**:
+```yaml
+logging:
+  file: "/var/log/mygramdb/mygramdb.log"  # Must specify file for daemon mode
 ```
 
 ## Cache Section

docs/en/docker-deployment.md

@@ -193,15 +193,15 @@ Adjust these in `docker-compose.prod.yml` based on your workload.
 
 ## Database Initialization
 
-The MySQL container automatically executes scripts in `docker/mysql/init/`:
+The MySQL container automatically executes scripts in `support/docker/mysql/init/`:
 
 - `01-create-tables.sql` - Creates sample tables
 
 To add your own initialization scripts:
 
 ```bash
 # Create your SQL script
-cat > docker/mysql/init/02-my-tables.sql <<EOF
+cat > support/docker/mysql/init/02-my-tables.sql <<EOF
 CREATE TABLE my_table (
     id BIGINT PRIMARY KEY,
     content TEXT