matchlock/.goreleaser.yaml at main · jingkaihe/matchlock · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
version: 2

project_name: matchlock

before:
  hooks:
    - go mod download
    - rm -rf .goreleaser-firecracker && mkdir -p .goreleaser-firecracker/linux-amd64 .goreleaser-firecracker/linux-arm64
    - bash packaging/linux/scripts/fetch-firecracker.sh v1.10.1 amd64 .goreleaser-firecracker/linux-amd64 firecracker
    - bash packaging/linux/scripts/fetch-firecracker.sh v1.10.1 amd64 .goreleaser-firecracker/linux-amd64 jailer
    - bash packaging/linux/scripts/fetch-firecracker.sh v1.10.1 arm64 .goreleaser-firecracker/linux-arm64 firecracker
    - bash packaging/linux/scripts/fetch-firecracker.sh v1.10.1 arm64 .goreleaser-firecracker/linux-arm64 jailer

builds:
  - id: matchlock
    main: ./cmd/matchlock
    binary: matchlock
    goos:
      - linux
    goarch:
      - amd64
      - arm64
    env:
      - CGO_ENABLED=0
    ldflags:
      - >-
        -s -w
        -X github.com/jingkaihe/matchlock/pkg/version.Version={{ .Version }}
        -X github.com/jingkaihe/matchlock/pkg/version.GitCommit={{ .Commit }}
        -X github.com/jingkaihe/matchlock/pkg/version.BuildTime={{ .Date }}

  - id: guest-init
    main: ./cmd/guest-init
    binary: guest-init
    goos:
      - linux
    goarch:
      - amd64
      - arm64
    env:
      - CGO_ENABLED=0
    flags:
      - -trimpath

archives:
  - id: raw-binaries
    ids:
      - matchlock
      - guest-init
    formats:
      - binary
    name_template: >-
      {{ .Binary }}-{{ .Os }}-
      {{- if eq .Arch "amd64" -}}amd64
      {{- else if eq .Arch "arm64" -}}arm64
      {{- else -}}{{ .Arch }}{{- end -}}

checksum:
  name_template: checksums.txt

changelog:
  disable: true

nfpms:
  - id: matchlock-linux
    package_name: matchlock
    ids:
      - matchlock
      - guest-init
    formats:
      - deb
      - rpm
    bindir: /usr/bin
    maintainer: Jingkai He <jingkai@hey.com>
    description: Lightweight micro-VM sandbox for running AI agents securely.
    homepage: https://github.com/jingkaihe/matchlock
    license: MIT
    contents:
      - src: .goreleaser-firecracker/linux-{{ .Arch }}/firecracker
        dst: /usr/libexec/matchlock/firecracker
        file_info:
          mode: 0755
      - src: .goreleaser-firecracker/linux-{{ .Arch }}/jailer
        dst: /usr/libexec/matchlock/jailer
        file_info:
          mode: 0755
      - src: packaging/linux/sysctl/99-matchlock.conf
        dst: /usr/lib/sysctl.d/99-matchlock.conf
        file_info:
          mode: 0644
      - src: packaging/linux/doc/README.packaging.md
        dst: /usr/share/doc/matchlock/README.packaging.md
        file_info:
          mode: 0644
    scripts:
      postinstall: packaging/linux/scripts/postinstall.sh
    overrides:
      deb:
        dependencies:
          - e2fsprogs
          - erofs-utils
          - libcap2-bin
          - nftables
          - kmod
          - procps
      rpm:
        dependencies:
          - e2fsprogs
          - erofs-utils
          - libcap
          - nftables
          - kmod
          - procps-ng

release:
  disable: true