ci: publish release assets to Gitea

ci/publish-gitea-release.sh

@@ -0,0 +1,78 @@
+#!/usr/bin/env bash
+# Create/update the Gitea Release after all platform package workflows succeed.
+set -euo pipefail
+
+tag="${CI_COMMIT_TAG:-}"
+[[ "$tag" =~ ^v[0-9]+\.[0-9]+\.[0-9]+(-[0-9A-Za-z.-]+)?$ ]] || {
+  echo "release must run from a vMAJOR.MINOR.PATCH tag" >&2
+  exit 2
+}
+[[ -n "${GITEA_TOKEN:-}" ]] || { echo "GITEA_TOKEN is required" >&2; exit 2; }
+
+version="${tag#v}"
+gitea_base="${GITEA_BASE:-http://192.168.2.162:3100}"
+gitea_base="${gitea_base%/}"
+gitea_host="${gitea_base#https://}"
+gitea_host="${gitea_host#http://}"
+gitea_host="${gitea_host%%/*}"
+gitea_host="${gitea_host%%:*}"
+api="$gitea_base/api/v1/repos/justme/MyMonitor"
+tmp="$(mktemp -d)"
+netrc="$tmp/netrc"
+release_json="$tmp/release.json"
+assets_json="$tmp/assets.json"
+chmod 700 "$tmp"
+printf 'machine %s login justme password %s\n' "$gitea_host" "$GITEA_TOKEN" > "$netrc"
+chmod 600 "$netrc"
+trap 'rm -rf "$tmp"' EXIT
+
+release_status="$(curl --silent --show-error --retry 3 --netrc-file "$netrc" \
+  --output "$release_json" --write-out '%{http_code}' "$api/releases/tags/$tag")"
+if [[ "$release_status" == 404 ]]; then
+  payload="$(printf '{"tag_name":"%s","target_commitish":"%s","name":"MyMonitor %s","body":"Agent and Probe archives for Linux and Windows amd64 and arm64. Backend OCI images: registry.oeo.one/monitor/monitor-backend:%s (linux/amd64 and linux/arm64).","draft":false,"prerelease":false}' \
+    "$tag" "${CI_COMMIT_SHA:-}" "$tag" "$version")"
+  release_status="$(curl --silent --show-error --retry 3 --netrc-file "$netrc" \
+    --header 'Content-Type: application/json' --data "$payload" \
+    --output "$release_json" --write-out '%{http_code}' "$api/releases")"
+fi
+[[ "$release_status" =~ ^2 ]] || {
+  echo "Gitea Release lookup/create failed (HTTP $release_status)" >&2
+  cat "$release_json" >&2
+  exit 1
+}
+release_id="$(grep -o '"id":[[:space:]]*[0-9][0-9]*' "$release_json" | head -1 | tr -cd '0-9')"
+[[ -n "$release_id" ]] || { echo "Could not read Gitea Release ID" >&2; exit 1; }
+curl --fail-with-body --silent --show-error --retry 3 --netrc-file "$netrc" \
+  "$api/releases/$release_id/assets" -o "$assets_json"
+
+assets=(
+  "monitor-agent-v$version-linux-amd64.tar.gz"
+  "monitor-agent-v$version-linux-arm64.tar.gz"
+  "monitor-probe-v$version-linux-amd64.tar.gz"
+  "monitor-probe-v$version-linux-arm64.tar.gz"
+  "monitor-agent-v$version-windows-amd64.zip"
+  "monitor-agent-v$version-windows-arm64.zip"
+  "monitor-probe-v$version-windows-amd64.zip"
+  "monitor-probe-v$version-windows-arm64.zip"
+)
+for archive in "${assets[@]}"; do
+  for name in "$archive" "$archive.sha256"; do
+    if grep -Eq "\"name\"[[:space:]]*:[[:space:]]*\"$name\"" "$assets_json"; then
+      echo "release asset $name already exists; keeping the existing asset"
+      continue
+    fi
+    file="$tmp/$name"
+    curl --fail-with-body --silent --show-error --retry 3 --netrc-file "$netrc" \
+      "$gitea_base/api/packages/justme/generic/monitor-node/$version/$name" -o "$file"
+    status="$(curl --silent --show-error --retry 3 --netrc-file "$netrc" \
+      --header 'Content-Type: application/octet-stream' --upload-file "$file" \
+      --output /dev/null --write-out '%{http_code}' \
+      "$api/releases/$release_id/assets?name=$name")"
+    case "$status" in
+      2*) echo "attached $name" ;;
+      *) echo "Gitea Release asset upload failed for $name (HTTP $status)" >&2; exit 1 ;;
+    esac
+  done
+done
+
+echo "published Gitea Release $tag: https://git.oeo.one/justme/MyMonitor/releases/tag/$tag"