desktop: release-publish pipeline + one-command Linux installer
Desktop (Tauri) / Tauri desktop (Linux) (push) Successful in 3m45s
Desktop (Tauri) / Tauri desktop (Linux) (push) Successful in 3m45s
Phase A of the desktop Release + install path (M10 / tasks 2014, 1998): - .forgejo/workflows/desktop.yml: tag-gated "Publish release" step + contents:write. On a v* tag the build now publishes a Fabled-Git Release with the de-bundled AppImage + .deb attached — a stable, versioned fetch target (Actions artifacts are ephemeral/test-only). Dormant on dev/main. - desktop/packaging/publish-release.sh: creates/reuses the Release via the Forgejo API using the runner-injected token; idempotent asset replace. - desktop/packaging/install.sh: curl|sh one-command installer — native .deb on Debian/Ubuntu, de-bundled AppImage everywhere else (installed to ~/Applications/ThoughtSync.AppImage, matching src/integration.rs so the app sees itself integrated). AppImage path needs no sudo. Plumbing only — no release cut (rule 2); activates on the operator's first v* tag. In-app self-update (tauri-plugin-updater + signed latest.json) is Phase B, gated on the operator's signing key. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FRgehjoz7Yv8LkUfADxACm
This commit is contained in:
Executable
+123
@@ -0,0 +1,123 @@
|
||||
#!/bin/sh
|
||||
#
|
||||
# ThoughtSync desktop — one-command Linux installer.
|
||||
#
|
||||
# curl -fsSL https://git.fabledsword.com/bvandeusen/thoughtsync/raw/branch/main/desktop/packaging/install.sh | sh
|
||||
#
|
||||
# Fetches the LATEST published release for this machine's architecture and
|
||||
# installs it, ending with a working app + menu entry. Native-first:
|
||||
# * Debian/Ubuntu (dpkg+apt) -> the native .deb (system libs; needs sudo).
|
||||
# * everything else (Arch/CachyOS/Fedora/…) -> the de-bundled AppImage,
|
||||
# installed user-locally (no sudo). The AppImage's graphics libs are
|
||||
# stripped in CI (see debundle-graphics.sh), so it uses the host GPU stack
|
||||
# and renders where a stock Tauri AppImage would black-window (issue 2021).
|
||||
#
|
||||
# POSIX sh (dash-safe) so `curl … | sh` works everywhere. Dependency-light and
|
||||
# auditable on purpose — read it before you pipe it.
|
||||
set -eu
|
||||
|
||||
INSTANCE="https://git.fabledsword.com"
|
||||
REPO="bvandeusen/thoughtsync"
|
||||
API="$INSTANCE/api/v1/repos/$REPO"
|
||||
|
||||
say() { printf '==> %s\n' "$1"; }
|
||||
die() { printf 'error: %s\n' "$1" >&2; exit 1; }
|
||||
have() { command -v "$1" >/dev/null 2>&1; }
|
||||
|
||||
have curl || die "curl is required."
|
||||
|
||||
# --- architecture gate ------------------------------------------------------
|
||||
# Only x86_64 is built today; arm64 will be added when the CI matrix grows. The
|
||||
# release-asset naming carries the arch, but since only one arch ships now we
|
||||
# match by file extension below and just guard the arch here.
|
||||
arch="$(uname -m)"
|
||||
case "$arch" in
|
||||
x86_64 | amd64) : ;;
|
||||
*) die "ThoughtSync ships x86_64 Linux builds only right now (this machine: $arch)." ;;
|
||||
esac
|
||||
|
||||
# --- resolve the latest release ---------------------------------------------
|
||||
say "Finding the latest ThoughtSync release…"
|
||||
json="$(curl -fsSL "$API/releases/latest" 2>/dev/null)" || die \
|
||||
"no published release found at $INSTANCE/$REPO/releases — the maintainer publishes one by pushing a v* tag."
|
||||
|
||||
# Pull asset URLs straight out of the release JSON (no jq): the only
|
||||
# .AppImage/.deb URLs present are the asset download links.
|
||||
appimage_url="$(printf '%s' "$json" | grep -oE 'https?://[^"]+\.AppImage' | head -1 || true)"
|
||||
deb_url="$(printf '%s' "$json" | grep -oE 'https?://[^"]+\.deb' | head -1 || true)"
|
||||
version="$(printf '%s' "$json" | grep -oE '"tag_name":"[^"]+"' | head -1 | sed -E 's/.*:"([^"]+)".*/\1/')"
|
||||
[ -n "$appimage_url" ] || [ -n "$deb_url" ] || die "the latest release has no installable Linux asset."
|
||||
say "Latest release: ${version:-unknown}"
|
||||
|
||||
tmp="$(mktemp -d)"
|
||||
trap 'rm -rf "$tmp"' EXIT INT TERM
|
||||
|
||||
# --- native .deb path (Debian/Ubuntu) ---------------------------------------
|
||||
if have dpkg && have apt-get && [ -n "$deb_url" ]; then
|
||||
say "Debian-family system detected — installing the native .deb"
|
||||
curl -fSL -o "$tmp/thoughtsync.deb" "$deb_url"
|
||||
if [ "$(id -u)" -eq 0 ]; then sudo=""; else
|
||||
have sudo || die "installing the .deb needs root; re-run as root or install sudo."
|
||||
sudo="sudo"
|
||||
fi
|
||||
say "Installing (you may be prompted for your password)…"
|
||||
# apt-get resolves the .deb's dependencies (webkit2gtk etc.); dpkg is the
|
||||
# fallback if this apt is too old for local-file installs.
|
||||
$sudo apt-get install -y "$tmp/thoughtsync.deb" || $sudo dpkg -i "$tmp/thoughtsync.deb"
|
||||
say "Done. Launch ThoughtSync from your application menu."
|
||||
exit 0
|
||||
fi
|
||||
|
||||
# --- universal AppImage path (user-local, no sudo) --------------------------
|
||||
# Install into ~/Applications/ThoughtSync.AppImage — the SAME location the app's
|
||||
# own self-integration uses (src/integration.rs) — so the running app sees
|
||||
# itself already installed and never makes a second copy or menu entry.
|
||||
say "Installing the de-bundled AppImage (user-local, no sudo)"
|
||||
[ -n "$appimage_url" ] || die "no AppImage asset on the latest release."
|
||||
|
||||
apps_dir="$HOME/Applications"
|
||||
dest="$apps_dir/ThoughtSync.AppImage"
|
||||
mkdir -p "$apps_dir"
|
||||
say "Downloading $(basename "$appimage_url")…"
|
||||
curl -fSL -o "$tmp/ThoughtSync.AppImage" "$appimage_url"
|
||||
chmod +x "$tmp/ThoughtSync.AppImage"
|
||||
mv -f "$tmp/ThoughtSync.AppImage" "$dest"
|
||||
|
||||
# Menu entry — written to match integration.rs verbatim (same paths + fields),
|
||||
# so the app reports is_integrated=true and won't duplicate it.
|
||||
apps_menu="$HOME/.local/share/applications"
|
||||
icons_dir="$HOME/.local/share/icons"
|
||||
mkdir -p "$apps_menu" "$icons_dir"
|
||||
|
||||
# Best-effort: pull the real icon out of the AppImage (.DirIcon) so the menu
|
||||
# entry looks right immediately. Extraction is a non-GUI unsquash (no FUSE, no
|
||||
# black-window risk); if it fails we fall back to the themed name and the app
|
||||
# writes its embedded icon on first launch anyway.
|
||||
icon_ref="thoughtsync"
|
||||
if ( cd "$tmp" && "$dest" --appimage-extract .DirIcon >/dev/null 2>&1 ) \
|
||||
&& cp -L "$tmp/squashfs-root/.DirIcon" "$icons_dir/thoughtsync.png" 2>/dev/null; then
|
||||
icon_ref="$icons_dir/thoughtsync.png"
|
||||
fi
|
||||
rm -rf "$tmp/squashfs-root" 2>/dev/null || true
|
||||
|
||||
cat > "$apps_menu/thoughtsync.desktop" <<EOF
|
||||
[Desktop Entry]
|
||||
Type=Application
|
||||
Name=ThoughtSync
|
||||
Comment=Capture a fleeting thought in a second
|
||||
Exec=$dest %U
|
||||
Icon=$icon_ref
|
||||
Terminal=false
|
||||
Categories=Utility;Office;
|
||||
StartupWMClass=ThoughtSync
|
||||
EOF
|
||||
|
||||
have update-desktop-database && update-desktop-database "$apps_menu" >/dev/null 2>&1 || true
|
||||
|
||||
# Convenience CLI launcher.
|
||||
mkdir -p "$HOME/.local/bin"
|
||||
ln -sf "$dest" "$HOME/.local/bin/thoughtsync"
|
||||
|
||||
say "Installed to $dest"
|
||||
printf ' Launch it from your application menu, or run \033[1mthoughtsync\033[0m'
|
||||
printf ' (if ~/.local/bin is on your PATH).\n'
|
||||
Reference in New Issue
Block a user