add: stripped down release n publish of rpm

Author: Benjosh95

.github/workflows/rpm-test.yml

@@ -0,0 +1,44 @@
+name: RPM Test
+
+on:
+  push:
+    branches:
+      - testrpmworkflow
+  workflow_dispatch:
+
+jobs:
+  rpm-release:
+    runs-on: ubuntu-latest
+    env:
+      GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
+      GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+      GPG_PRIVATE_KEY_FINGERPRINT: ${{ secrets.GPG_FINGERPRINT }}
+      AWS_ACCESS_KEY_ID: ${{ secrets.OBJECT_STORAGE_ACCESS_KEY_ID }}
+      AWS_SECRET_ACCESS_KEY: ${{ secrets.OBJECT_STORAGE_SECRET_ACCESS_KEY }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: "go.mod"
+          cache: true
+
+      - name: Import GPG key
+        uses: crazy-max/ghaction-import-gpg@v6
+        with:
+          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
+          passphrase: ${{ secrets.GPG_PASSPHRASE }}
+
+      - name: Build RPMs
+        run: ./release-rpm.sh
+
+      - name: Install createrepo_c
+        run: sudo apt-get update && sudo apt-get install -y createrepo-c
+
+      - name: Install AWS CLI
+        run: sudo apt-get install -y awscli
+
+      - name: Publish RPM repo
+        run: ./publish-rpm-repo.sh 

goreleaser.rpm.yaml

@@ -0,0 +1,45 @@
+version: 2
+
+before:
+  hooks:
+    - go mod tidy
+
+builds:
+  - id: linux-builds
+    env:
+      - CGO_ENABLED=0
+    goos:
+      - linux
+    goarch:
+      - amd64
+      - arm64
+    binary: "stackit"
+    main: ./cmd/stackit
+    ldflags:
+      - -s -w
+      - -X github.com/stackitcloud/stackit-cli/internal/cmd.Version={{.Version}}
+      - -X github.com/stackitcloud/stackit-cli/internal/cmd.Commit={{.Commit}}
+      - -X github.com/stackitcloud/stackit-cli/internal/cmd.Date={{.Date}}
+
+archives: [] # No archives, just RPMs
+
+nfpms:
+  - id: linux-packages
+    ids:
+      - linux-builds
+    package_name: stackit
+    vendor: STACKIT
+    homepage: https://github.com/stackitcloud/stackit-cli
+    maintainer: STACKIT Developer Tools Team <[email protected]>
+    description: A command-line interface to manage STACKIT resources.
+    license: Apache 2.0
+    formats:
+      - rpm
+    rpm:
+      signature:
+        enabled: true
+        key_file: "{{ .Env.GPG_PRIVATE_KEY }}"
+        passphrase: "{{ .Env.GPG_PASSPHRASE }}"
+    contents:
+      - src: LICENSE.md
+        dst: LICENSE.md 

publish-rpm-repo.sh

@@ -0,0 +1,38 @@
+#!/bin/bash
+
+set -euo pipefail
+
+RPM_OUTPUT_DIR="dist"
+TEMP_DIR=$(mktemp -d)
+GPG_PRIVATE_KEY_FINGERPRINT="${GPG_PRIVATE_KEY_FINGERPRINT:?Set GPG_PRIVATE_KEY_FINGERPRINT}"
+GPG_PASSPHRASE="${GPG_PASSPHRASE:?Set GPG_PASSPHRASE}"
+AWS_ACCESS_KEY_ID="${AWS_ACCESS_KEY_ID:?Set AWS_ACCESS_KEY_ID}"
+AWS_SECRET_ACCESS_KEY="${AWS_SECRET_ACCESS_KEY:?Set AWS_SECRET_ACCESS_KEY}"
+
+# Test environment S3 bucket
+S3_BUCKET="distribution-test"
+S3_ENDPOINT="https://object.storage.eu01.onstackit.cloud"
+RPM_REPO_PATH="rpm/cli"
+
+echo ">>> Preparing RPM repository structure..."
+mkdir -p "$TEMP_DIR/rpm-repo/RPMS"
+
+echo ">>> Copying built RPMs..."
+cp "$RPM_OUTPUT_DIR"/*.rpm "$TEMP_DIR/rpm-repo/RPMS/"
+
+echo ">>> Creating RPM repository metadata..."
+createrepo_c "$TEMP_DIR/rpm-repo"
+
+echo ">>> Signing repository metadata..."
+gpg --batch --yes --pinentry-mode loopback \
+    --local-user="$GPG_PRIVATE_KEY_FINGERPRINT" \
+    --passphrase="$GPG_PASSPHRASE" \
+    --detach-sign --armor "$TEMP_DIR/rpm-repo/repodata/repomd.xml"
+
+echo ">>> Uploading to test bucket..."
+aws s3 sync "$TEMP_DIR/rpm-repo/" "s3://$S3_BUCKET/$RPM_REPO_PATH/" \
+    --endpoint-url "$S3_ENDPOINT" \
+    --delete
+
+rm -rf "$TEMP_DIR"
+echo ">>> RPM repo published to test bucket: $S3_BUCKET/$RPM_REPO_PATH" 

release-rpm.sh

@@ -0,0 +1,15 @@
+#!/bin/bash
+
+set -euo pipefail
+
+: "${GPG_PRIVATE_KEY:?GPG_PRIVATE_KEY must be set}"
+: "${GPG_PASSPHRASE:?GPG_PASSPHRASE must be set}"
+
+export GPG_PRIVATE_KEY
+export GPG_PASSPHRASE
+
+gpg --batch --import <<< "$GPG_PRIVATE_KEY"
+
+goreleaser release --clean --config goreleaser.rpm.yaml --skip-publish --skip-validate
+
+echo "RPM build complete. Find RPMs in ./dist/"