Enable Debian Build,Sign,Publish via GH Actions by endersonmaia · Pull Request #5 · cartesi/linux-packages

endersonmaia · 2026-04-22T19:27:51Z

Add CI builds for Debian and Alpine packages across multiple architectures

This PR introduces a full CI/CD pipeline for building, signing, and publishing Cartesi Linux packages for both Debian/Ubuntu and Alpine Linux, targeting three architectures: amd64/x86_64, arm64/aarch64, and riscv64.

What's new

Packaging scripts

Debian (debian/): Added Makefile, Dockerfile, build scripts, and DEBBUILD specs for all packages (cartesi-machine-emulator, cartesi-machine-guest-tools, cartesi-machine-guest-linux-headers, cartesi-machine-linux-image, cartesi-machine-rootfs-image, xgenext2fs), including split install files, control, copyright, rules, and patch series.
Alpine (alpine/): Added Makefile, Dockerfile, and APKBUILD specs for the same set of packages, plus a re-sign helper script.

CI/CD workflows

.github/workflows/debian.yml: Multi-arch matrix build (ubuntu-24.04, ubuntu-24.04-arm, ubuntu-24.04-riscv) with GHA cache for Docker layers and built packages; includes build, test, sign, and publish jobs. Scoped to trigger only on changes under debian/**.
.github/workflows/alpine.yml: Multi-arch matrix build with analogous structure, CDN fetch before sync, and upload step. Scoped to trigger only on changes under alpine/**.
PACKAGES_ALLARCH (architecture-independent packages like linux-image and rootfs-image) is only built on amd64 to avoid duplicate artifacts.

Distribution targets

Added Debian 13 (Trixie) to the test matrix.
Alpine bumped to 3.23; TARGET_ARCH fixed for cross-platform Docker builds.

CDN / package repository

Built packages are persisted in a dedicated cdn git LFS branch (cdn/apt and cdn/apk), enabling downstream consumers to pull from cartesi.github.io/linux-packages.

Version bumps

cartesi-machine-emulator → 0.20.0
cartesi-machine-guest-tools and cartesi-machine-linux-image → 0.17.2

Documentation

README.md updated to list all supported distros and point to cartesi.github.io/linux-packages.
Added debian/README.md and alpine/README.md with per-distro usage instructions.

edubart · 2026-04-24T21:14:58Z

+Debian/Ubuntu packages are available in [debian](debian) subdirectory.
+Alpine packages are available in [alpine](alpine) subdirectory.
+
+You can find instructions on the sub directories.


We need to create a LICENSE and AUTHORS file.
Also mention the LICENSE.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

…mulator(-dev) cartesi-machine-emulator 0.21.0 renamed its public C headers (machine-c-api.h -> cm.h, jsonrpc-machine-c-api.h -> cm-jsonrpc.h), breaking cartesi-rollups-node's cgo build, which still targets the old header names (no released upstream tag adapts to the rename yet). Runtime Depends was already capped to <0.21.0; Build-Depends/makedepends were not, so apt/apk happily pulled the newest -dev package once 0.21.0 was published locally. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

…blish A single package failing (e.g. cartesi-rollups-node) previously took down the whole pipeline: `make packages` stopped at the first failing package, none of the post-build steps had an `if:` guard so already-built packages never got uploaded as artifacts, and every downstream job (check/test/sign/ publish) was skipped by default once the matrixed build job reported failure for any single arch/package - even architectures where everything built fine. - debian.yml/alpine.yml: `make -k packages` (keep-going) plus `continue-on-error` on the build step so later packages still get a chance and already-built ones still get uploaded (`if: always()`); a final step re-raises the failure afterwards so the job still shows red. - debian-check/test/sign and alpine-check/test/sign: guard with `!cancelled()` so they still run (and gate on actual artifact presence) instead of being skipped by default `needs` semantics when a build leg fails. - debian.yml's cdn-restore step used `lfs: false` while cdn's .gitattributes marks *.deb as LFS-tracked; fixed to `lfs: true` to match alpine.yml and avoid resolving Build-Depends against LFS pointer files once real packages exist on the cdn branch. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

edubart and others added 3 commits January 23, 2025 11:39

feat: add package scripts for Debian and Alpine

b50d94f

feat: bump emulator, rootfs and tools

c4c076b

feat: bump emulator (0.20.0), rootfs and tools (0.17.2)

461ded2

endersonmaia self-assigned this Apr 22, 2026

endersonmaia requested review from diegonehab and edubart April 22, 2026 19:28

endersonmaia temporarily deployed to signing April 22, 2026 22:55 — with GitHub Actions Inactive

endersonmaia temporarily deployed to github-pages April 22, 2026 22:56 — with GitHub Actions Inactive

endersonmaia temporarily deployed to signing April 24, 2026 12:44 — with GitHub Actions Inactive

endersonmaia temporarily deployed to github-pages April 24, 2026 12:45 — with GitHub Actions Inactive

endersonmaia temporarily deployed to signing April 24, 2026 20:21 — with GitHub Actions Inactive

endersonmaia had a problem deploying to github-pages April 24, 2026 20:22 — with GitHub Actions Failure

endersonmaia had a problem deploying to github-pages April 24, 2026 20:24 — with GitHub Actions Failure

endersonmaia temporarily deployed to github-pages April 24, 2026 20:46 — with GitHub Actions Inactive

edubart requested changes Apr 24, 2026

View reviewed changes

diegonehab requested a review from vfusco April 26, 2026 12:18

endersonmaia force-pushed the feature/ci-debian-build-multiple-archs branch from 2842311 to 184ae88 Compare April 27, 2026 13:21

endersonmaia temporarily deployed to signing April 27, 2026 13:37 — with GitHub Actions Inactive

endersonmaia temporarily deployed to github-pages April 27, 2026 13:37 — with GitHub Actions Inactive

edubart added the enhancement New feature or request label Apr 28, 2026

edubart added this to Machine Unit Apr 28, 2026

github-project-automation Bot moved this to Todo in Machine Unit Apr 28, 2026

github-project-automation Bot moved this from Todo to In Progress in Machine Unit Apr 28, 2026

edubart requested changes Apr 29, 2026

View reviewed changes

Comment thread .github/workflows/debian.yml

endersonmaia force-pushed the feature/ci-debian-build-multiple-archs branch from 329e5f9 to c700e3b Compare April 29, 2026 20:39

endersonmaia temporarily deployed to signing April 29, 2026 21:00 — with GitHub Actions Inactive

endersonmaia temporarily deployed to github-pages April 29, 2026 21:01 — with GitHub Actions Inactive

endersonmaia temporarily deployed to signing May 4, 2026 12:59 — with GitHub Actions Inactive

endersonmaia temporarily deployed to github-pages May 4, 2026 13:02 — with GitHub Actions Inactive

endersonmaia force-pushed the feature/ci-debian-build-multiple-archs branch from 0c7b63d to bf6c2c7 Compare May 4, 2026 13:24

endersonmaia temporarily deployed to github-pages June 10, 2026 23:01 — with GitHub Actions Inactive

fix: avoid rm failing

169c4b3

endersonmaia had a problem deploying to signing June 11, 2026 21:27 — with GitHub Actions Failure

endersonmaia temporarily deployed to signing June 11, 2026 23:54 — with GitHub Actions Inactive

endersonmaia temporarily deployed to github-pages June 11, 2026 23:55 — with GitHub Actions Inactive

endersonmaia temporarily deployed to signing June 12, 2026 22:04 — with GitHub Actions Inactive

endersonmaia temporarily deployed to github-pages June 12, 2026 22:08 — with GitHub Actions Inactive

endersonmaia added 5 commits June 30, 2026 17:20

refactor: builder images

055234c

fix(alpine): inject KEY_NAME to setup-env.sh

8bca770

feat: improve reproducibility

cd14722

feat: add cartesi-rollups-node Debian and Alpine packages

68735ef

fix(alpine): download .apk from git LFS

0fec973

endersonmaia force-pushed the feature/ci-debian-build-multiple-archs branch from 9d8a862 to 0fec973 Compare June 30, 2026 20:21

endersonmaia temporarily deployed to signing June 30, 2026 21:36 — with GitHub Actions Inactive

endersonmaia deployed to github-pages June 30, 2026 21:37 — with GitHub Actions View deployment

edubart moved this from In Progress to Waiting Review in Machine Unit Aug 5, 2026

endersonmaia and others added 12 commits August 5, 2026 15:10

feat(debian): bump cartesi-machine-guest-linux-headers to 0.21.0

4114d3e

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

feat(debian): bump cartesi-machine-linux-image to 0.21.0

78b42bc

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

feat(debian): bump cartesi-machine-guest-tools to 0.18.0

c507e3d

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

feat(debian): bump cartesi-machine-rootfs-image to 0.18.0

35c435d

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

feat(debian): bump cartesi-machine-emulator to 0.21.0

c42a903

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

feat(alpine): bump cartesi-machine-guest-linux-headers to 0.21.0

3dafd50

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

feat(alpine): bump cartesi-machine-linux-image to 0.21.0

a6ec691

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

feat(alpine): bump cartesi-machine-guest-tools to 0.18.0

6c76c88

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

feat(alpine): bump cartesi-machine-rootfs-image to 0.18.0

1e8b4cb

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

feat(alpine): bump cartesi-machine-emulator to 0.21.0

05a9636

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

endersonmaia temporarily deployed to signing August 5, 2026 21:53 — with GitHub Actions Inactive

endersonmaia deployed to signing August 5, 2026 23:21 — with GitHub Actions Active

Navigation Menu

Uh oh!

Enable Debian Build,Sign,Publish via GH Actions - #5

Enable Debian Build,Sign,Publish via GH Actions#5
endersonmaia wants to merge 48 commits into
mainfrom
feature/ci-debian-build-multiple-archs

endersonmaia commented Apr 22, 2026 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

edubart Apr 24, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

endersonmaia commented Apr 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Add CI builds for Debian and Alpine packages across multiple architectures

What's new

Packaging scripts

CI/CD workflows

Distribution targets

CDN / package repository

Version bumps

Documentation

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

edubart Apr 24, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

endersonmaia commented Apr 22, 2026 •

edited

Loading