Add musl builds without plugins for static Linux binaries

Add a custom local-artifacts-jobs workflow that builds x86_64 and
aarch64 musl targets with --no-default-features to disable plugins.
This produces fully static Linux binaries that don't require glibc.

The musl builds are named with "no-plugins" suffix to distinguish
them from the regular glibc builds that include plugin support.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: sinelaw

.github/workflows/musl-builds.yml

@@ -0,0 +1,89 @@
+# Musl static builds without plugins support.
+# These builds use --no-default-features to disable the plugins feature,
+# which requires dynamic linking that musl doesn't support.
+# Kept outside the cargo-dist managed release.yml so it won't be overwritten.
+name: Musl Builds
+
+on:
+  # Allow dist to call this as a reusable workflow during release.
+  workflow_call:
+    inputs:
+      plan:
+        required: true
+        type: string
+  # Manual runs for debugging.
+  workflow_dispatch:
+
+jobs:
+  build-musl:
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - target: x86_64-unknown-linux-musl
+            runner: ubuntu-22.04
+          - target: aarch64-unknown-linux-musl
+            runner: ubuntu-22.04
+    runs-on: ${{ matrix.runner }}
+    env:
+      PLAN: ${{ inputs.plan }}
+      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+          submodules: recursive
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: ${{ matrix.target }}
+
+      - name: Install musl tools
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y musl-tools
+          # For aarch64 cross-compilation
+          if [ "${{ matrix.target }}" = "aarch64-unknown-linux-musl" ]; then
+            # Install cross for easier cross-compilation
+            cargo install cross --git https://github.com/cross-rs/cross
+          fi
+
+      - name: Build release binary (no plugins)
+        run: |
+          if [ "${{ matrix.target }}" = "aarch64-unknown-linux-musl" ]; then
+            cross build --release --target ${{ matrix.target }} --no-default-features
+          else
+            cargo build --release --target ${{ matrix.target }} --no-default-features
+          fi
+
+      - name: Get version from Cargo.toml
+        id: version
+        run: |
+          VERSION=$(grep '^version' Cargo.toml | head -1 | sed 's/.*"\(.*\)".*/\1/')
+          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+
+      - name: Create archive
+        run: |
+          # cargo-dist expects tarballs with contents nested under a root dir
+          ARCHIVE_NAME="fresh-editor-no-plugins-${{ matrix.target }}"
+          mkdir -p "${ARCHIVE_NAME}"
+          cp target/${{ matrix.target }}/release/fresh "${ARCHIVE_NAME}/"
+          cp README.md LICENSE "${ARCHIVE_NAME}/" 2>/dev/null || true
+
+          # Create tarball (cargo-dist format: nested under root dir with same name)
+          tar -czvf "${ARCHIVE_NAME}.tar.gz" "${ARCHIVE_NAME}"
+
+          # Create checksum
+          sha256sum "${ARCHIVE_NAME}.tar.gz" > "${ARCHIVE_NAME}.tar.gz.sha256"
+
+          # Show what we built
+          ls -la "${ARCHIVE_NAME}.tar.gz"*
+
+      - name: Upload artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: artifacts-musl-no-plugins-${{ matrix.target }}
+          path: |
+            fresh-editor-no-plugins-${{ matrix.target }}.tar.gz
+            fresh-editor-no-plugins-${{ matrix.target }}.tar.gz.sha256

.github/workflows/release.yml

@@ -165,11 +165,21 @@ jobs:
             ${{ steps.cargo-dist.outputs.paths }}
             ${{ env.BUILD_MANIFEST_NAME }}
 
+  custom-musl-builds:
+    needs:
+      - plan
+    if: ${{ needs.plan.outputs.publishing == 'true' || fromJson(needs.plan.outputs.val).ci.github.pr_run_mode == 'upload' }}
+    uses: ./.github/workflows/musl-builds.yml
+    with:
+      plan: ${{ needs.plan.outputs.val }}
+    secrets: inherit
+
   # Build and package all the platform-agnostic(ish) things
   build-global-artifacts:
     needs:
       - plan
       - build-local-artifacts
+      - custom-musl-builds
     runs-on: "ubuntu-22.04"
     env:
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -216,6 +226,7 @@ jobs:
     needs:
       - plan
       - build-local-artifacts
+      - custom-musl-builds
     uses: ./.github/workflows/linux-packages.yml
     with:
       plan: ${{ needs.plan.outputs.val }}
@@ -225,10 +236,11 @@ jobs:
     needs:
       - plan
       - build-local-artifacts
+      - custom-musl-builds
       - build-global-artifacts
       - custom-linux-packages
     # Only run if we're "publishing", and only if plan, local and global didn't fail (skipped is fine)
-    if: ${{ always() && needs.plan.result == 'success' && needs.plan.outputs.publishing == 'true' && (needs.build-global-artifacts.result == 'skipped' || needs.build-global-artifacts.result == 'success') && (needs.custom-linux-packages.result == 'skipped' || needs.custom-linux-packages.result == 'success') && (needs.build-local-artifacts.result == 'skipped' || needs.build-local-artifacts.result == 'success') }}
+    if: ${{ always() && needs.plan.result == 'success' && needs.plan.outputs.publishing == 'true' && (needs.build-global-artifacts.result == 'skipped' || needs.build-global-artifacts.result == 'success') && (needs.custom-linux-packages.result == 'skipped' || needs.custom-linux-packages.result == 'success') && (needs.build-local-artifacts.result == 'skipped' || needs.build-local-artifacts.result == 'success') && (needs.custom-musl-builds.result == 'skipped' || needs.custom-musl-builds.result == 'success') }}
     env:
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     runs-on: "ubuntu-22.04"

dist-workspace.toml

@@ -21,6 +21,8 @@ include = ["plugins/"]
 npm-scope = "@fresh-editor"
 # Global artifacts jobs to run in CI
 global-artifacts-jobs = ["./linux-packages"]
+# Local artifacts jobs to run in CI
+local-artifacts-jobs = ["./musl-builds"]
 # A GitHub repo to push Homebrew formulas to
 tap = "sinelaw/homebrew-fresh"
 # Publish jobs to run in CI