Release Pipeline (#9)

nathanjcochran · web-flow · commit 619c882b68d0 · 2025-09-16T12:51:01.000-04:00
* Initial basic .goreleaser.yaml * Initial sketch of .goreleaser.yaml with support for S3 uploads, Linux packages, and homebrew casks * Update license info, include LICENSE and NOTICE in archive * Initial iteration of install.sh script * Skip updating latest.txt for prerelease versions * Improve and clean up .goreleaser.yaml * Use latest Go version * Initial sketch of GitHub Actions release workflow * Remove boilerplate comments from .goreleaser.yaml * Save install script to top-level of S3 bucket * Remove S3 stuff, download directly from GitHub * Update install script to accept optional VERSION env var * Use API_TOKEN_GITHUB_CLOUD for homebrew tap publish * Download from S3 instead of GitHub This reverts commit 5cf721e. * Fix writing latest.txt file * Fix secret access key * Fix S3 bucket ACL issue * Rename module path in all files * Set build-time variables in release pipeline * Fix S3 path for installation artifacts * Fix S3 path in install.sh script * Fix built binary name * Remove release pipeline TODO * Improve install script * Improve logic for selecting install directory * Add comment to top of install.sh script * Verify checksums in scripts/install.sh * Fix verify_installation logic * Consolidate download-with-retry logic * Refactor and rearrange functions in install.sh script * Update installation instructions in README.md * Fix bug in checksum validation logic * Add direct download and linux package instructions * Minor .goreleaser.yaml fixes * Build pre-release for homebrew * Once again skip homebrew publish for prerelease packages * Clean up README.md * Attempt to fix disabling install directory S3 uploads for prereleases * Remove /usr/local/bin as an install directory candidate, eliminate sudo calls, improve logic for finding install dir * Make shasum or sha256sum required * Get started with: tiger auth login * Exponential backoff for download failures
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -0,0 +1,39 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  contents: write
+
+jobs:
+  goreleaser:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+
+      - name: Set up Go
+        uses: actions/setup-go@v6
+        with:
+          go-version-file: 'go.mod'
+
+      - name: Run GoReleaser
+        uses: goreleaser/goreleaser-action@v6
+        with:
+          distribution: goreleaser
+          version: "~> v2"
+          args: release --clean
+        env:
+          # Action-scoped GitHub token used for downloading code, etc.
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          # Cross-repo GitHub token for publishing to timescale/homebrew-tap
+          TAP_GITHUB_TOKEN: ${{ secrets.API_TOKEN_GITHUB_CLOUD }}
+          # AWS credentials for pushing to tiger-cli-releases S3 bucket
+          AWS_ACCESS_KEY_ID: ${{ secrets.ORG_AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.ORG_AWS_SECRET_ACCESS_KEY }}
+          AWS_REGION: us-east-1
diff --git a/.gitignore b/.gitignore
@@ -45,4 +45,7 @@ config.yaml
 *.key
 *.pem
 .env*
-!.env.sample
+!.env.sample
+
+# Build artifacts
+latest.txt
diff --git a/.goreleaser.yaml b/.goreleaser.yaml
@@ -0,0 +1,156 @@
+# yaml-language-server: $schema=https://goreleaser.com/static/schema.json
+# vim: set ts=2 sw=2 tw=0 fo=cnqoj
+version: 2
+
+project_name: tiger-cli
+
+# Create VERSION file before building
+before:
+  hooks:
+    - sh -c 'echo "{{ .Tag }}" > latest.txt'
+
+builds:
+  - main: ./cmd/tiger
+    binary: tiger
+    env:
+      - CGO_ENABLED=0
+    goos:
+      - linux
+      - windows
+      - darwin
+    goarch:
+      - 386
+      - amd64
+      - arm64
+    ldflags:
+      - -s -w
+      - -X github.com/timescale/tiger-cli/internal/tiger/cmd.Version={{.Version}}
+      - -X github.com/timescale/tiger-cli/internal/tiger/cmd.BuildTime={{.Date}}
+      - -X github.com/timescale/tiger-cli/internal/tiger/cmd.GitCommit={{.Commit}}
+
+archives:
+  - id: archive
+    formats: [tar.gz]
+
+    # use zip for windows archives
+    format_overrides:
+      - goos: windows
+        formats: [zip]
+
+    # this name template makes the OS and Arch compatible with the results of `uname`.
+    name_template: >-
+      {{ .ProjectName }}_
+      {{- title .Os }}_
+      {{- if eq .Arch "amd64" }}x86_64
+      {{- else if eq .Arch "386" }}i386
+      {{- else }}{{ .Arch }}{{ end }}
+      {{- if .Arm }}v{{ .Arm }}{{ end }}
+
+    files:
+      - README.md
+      - LICENSE
+      - NOTICE
+
+# Linux package configuration (APT, RPM, etc.)
+nfpms:
+  - id: packages
+    package_name: tiger-cli
+    vendor: Timescale, Inc., d/b/a TigerData
+    homepage: https://github.com/timescale/tiger-cli
+    maintainer: TigerData <support@tigerdata.com>
+    description: |-
+      Tiger CLI - TigerData Cloud Platform CLI
+      Command-line interface for managing TigerData Cloud Platform resources
+    license: Apache-2.0
+    formats:
+      - deb
+      - rpm
+      - apk
+    bindir: /usr/bin
+    priority: extra
+    file_name_template: "{{ .ConventionalFileName }}"
+    rpm:
+      group: Unspecified
+    deb:
+      lintian_overrides:
+        - statically-linked-binary
+
+
+# S3 Blob Storage Configuration
+blobs:
+  # Versioned release artifacts
+  - provider: s3
+    bucket: tiger-cli-releases
+    region: us-east-1
+    directory: "releases/{{ .Tag }}"
+    ids:
+      - archive  # Archive ID
+      - packages # nfpms package ID
+
+  # Upload install script and latest version file to bucket root (skip for prereleases)
+  - provider: s3
+    bucket: tiger-cli-releases
+    region: us-east-1
+    directory: "install"
+    extra_files_only: true
+    disable: '{{ ne .Prerelease "" }}' # Skip this step for pre-releases
+    extra_files:
+      - glob: ./latest.txt
+        name_template: "latest.txt"
+      - glob: ./scripts/install.sh
+        name_template: "install.sh"
+
+# Homebrew cask configuration
+homebrew_casks:
+  - name: tiger-cli
+
+    repository:
+      owner: timescale
+      name: homebrew-tap
+      token: "{{ .Env.TAP_GITHUB_TOKEN }}"
+    homepage: https://github.com/timescale/tiger-cli
+    description: |-
+      Tiger CLI - TigerData Cloud Platform CLI
+      Command-line interface for managing TigerData Cloud Platform resources
+    binary: tiger
+    license: Apache-2.0
+    skip_upload: auto
+    url:
+      template: "https://tiger-cli-releases.s3.us-east-1.amazonaws.com/releases/{{ .Tag }}/{{ .ArtifactName }}"
+    hooks:
+      # TODO: Sign and notarize instead of removing quarantine bit
+      # See: https://goreleaser.com/customization/homebrew_casks/#signing-and-notarizing
+      post:
+        install: |
+          if OS.mac?
+            system_command "/usr/bin/xattr", args: ["-dr", "com.apple.quarantine", "#{staged_path}/tiger"]
+          end
+    # Optional: Add caveats for user instructions
+    caveats: |
+      Tiger CLI has been installed successfully!
+
+      Get started with:
+        tiger auth login
+
+      For help:
+        tiger --help
+
+# Checksum configuration - split into individual files for easier validation
+checksum:
+  split: true
+
+changelog:
+  sort: asc
+  filters:
+    exclude:
+      - "^specs:"
+      # TODO: Other files that should be ignored
+
+# Release configuration
+release:
+  github:
+    owner: timescale
+    name: tiger-cli
+  draft: false
+  prerelease: auto
+  name_template: "Release {{ .Tag }}"
diff --git a/README.md b/README.md
@@ -29,24 +29,35 @@ tiger auth login
 tiger --help
 ```
 
-
 ## Installation
 
+### Install script
+```bash
+curl -fsSL https://tiger-cli-releases.s3.amazonaws.com/install/install.sh | sh
+```
+
 ### Homebrew (macOS/Linux)
 ```bash
-brew install tigerdata/tap/tiger
+brew install timescale/tap/tiger-cli
 ```
 
 ### Go install
 ```bash
-go install github.com/tigerdata/tiger-cli/cmd/tiger@latest
+go install github.com/timescale/tiger-cli/cmd/tiger@latest
 ```
 
 ### Direct binary download
 ```bash
-curl -L https://github.com/tigerdata/tiger-cli/releases/latest/download/tiger-$(uname -s)-$(uname -m) -o tiger
+curl -LO https://github.com/timescale/tiger-cli/releases/latest/download/tiger-cli_$(uname -s)_$(uname -m).tar.gz
+tar -xzf tiger-cli_$(uname -s)_$(uname -m).tar.gz
 chmod +x tiger
-mv tiger /usr/local/bin/
+mkdir -p ~/.local/bin && mv tiger ~/.local/bin/
+```
+
+### Debian/Ubuntu package
+```bash
+curl -LO https://github.com/timescale/tiger-cli/releases/latest/download/tiger-cli_linux_$(dpkg --print-architecture).deb
+sudo dpkg -i tiger-cli_linux_$(dpkg --print-architecture).deb
 ```
 
 ## Usage
@@ -175,4 +186,4 @@ tiger-cli/
 
 ## License
 
-[License information to be added]
+This project is licensed under the Apache License 2.0 - see the [LICENSE](LICENSE) file for details.
diff --git a/TODO.md b/TODO.md
@@ -6,12 +6,6 @@ Blocked:
 
 Active List:
 - should we alias the auth login command to login?
-- add release tooling
-   - goreleaser?
-   - platforms:
-        - apt
-        - brew
-        - curl .sh script
 
 Done:
  - ✅ update exit codes for authentication and permission errors
diff --git a/go.mod b/go.mod
@@ -1,8 +1,6 @@
 module github.com/timescale/tiger-cli
 
-go 1.23.0
-
-toolchain go1.24.6
+go 1.25.1
 
 require (
 	github.com/charmbracelet/bubbletea v1.3.6
@@ -15,6 +13,7 @@ require (
 	github.com/zalando/go-keyring v0.2.6
 	go.uber.org/mock v0.5.2
 	go.uber.org/zap v1.27.0
+	golang.org/x/oauth2 v0.30.0
 	golang.org/x/term v0.33.0
 	gopkg.in/yaml.v3 v3.0.1
 )
@@ -73,7 +72,6 @@ require (
 	go.uber.org/multierr v1.11.0 // indirect
 	golang.org/x/crypto v0.37.0 // indirect
 	golang.org/x/mod v0.25.0 // indirect
-	golang.org/x/oauth2 v0.30.0 // indirect
 	golang.org/x/sync v0.16.0 // indirect
 	golang.org/x/sys v0.34.0 // indirect
 	golang.org/x/text v0.27.0 // indirect
diff --git a/internal/tiger/cmd/version.go b/internal/tiger/cmd/version.go
@@ -7,6 +7,8 @@ import (
 	"github.com/spf13/cobra"
 )
 
+// These variables are set at build time via ldflags in the GoReleaser pipeline
+// for production releases. Default values are used for local development builds.
 var Version = "dev"
 var BuildTime = "unknown"
 var GitCommit = "unknown"
diff --git a/scripts/install.sh b/scripts/install.sh

Original file line number	Diff line number	Diff line change
`@@ -7,6 +7,8 @@ import (`
`7`	`7`	`"github.com/spf13/cobra"`
`8`	`8`	`)`
`9`	`9`
	`10`	`+// These variables are set at build time via ldflags in the GoReleaser pipeline`
	`11`	`+// for production releases. Default values are used for local development builds.`
`10`	`12`	`var Version = "dev"`
`11`	`13`	`var BuildTime = "unknown"`
`12`	`14`	`var GitCommit = "unknown"`