add support for debian files

Co-authored-by: Felix <[email protected]>

Author: krombel

.github/workflows/release.yml

@@ -29,6 +29,28 @@ jobs:
           name: linux-latest
           path: release
 
+  build-debian:
+    name: Build Debian Packages
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: 'go.mod'
+          check-latest: true
+
+      - name: Build
+        run: |
+          make BUILD_NUMBER="${GITHUB_REF#refs/tags/v}" release-deb
+          mkdir release
+          mv build/*.deb release
+      - name: Upload artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: debian-latest
+          path: release
+
   build-windows:
     name: Build Windows
     runs-on: windows-latest
@@ -157,7 +179,7 @@ jobs:
 
   release:
     name: Create and Upload Release
-    needs: [build-linux, build-darwin, build-windows]
+    needs: [build-debian, build-linux, build-darwin, build-windows]
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -178,7 +200,7 @@ jobs:
       - name: Create sha256sum
         run: |
           cd artifacts
-          for dir in linux-latest darwin-latest windows-latest
+          for dir in debian-latest linux-latest darwin-latest windows-latest
           do
             (
               cd $dir
@@ -196,6 +218,10 @@ jobs:
                 sha256sum <nebula | sed 's=-$=nebula-darwin.zip/nebula='
                 sha256sum <nebula-cert | sed 's=-$=nebula-darwin.zip/nebula-cert='
               else
+                for v in *.deb
+                do
+                  sha256sum $v
+                done
                 for v in *.tar.gz
                 do
                   sha256sum $v
@@ -215,4 +241,4 @@ jobs:
             --verify-tag \
             --title "Release ${{ github.ref_name }}" \
             "${{ github.ref_name }}" \
-            SHASUM256.txt *-latest/*.zip *-latest/*.tar.gz
+            SHASUM256.txt *-latest/*.zip *-latest/*.tar.gz *-latest/*.deb

Makefile

@@ -27,6 +27,10 @@ DOCKER_IMAGE_TAG ?= latest
 
 LDFLAGS = -X main.Build=$(BUILD_NUMBER)
 
+ALL_DEBIAN = linux-amd64 \
+	linux-arm-7 \
+	linux-arm64
+
 ALL_LINUX = linux-amd64 \
 	linux-386 \
 	linux-ppc64le \
@@ -86,6 +90,9 @@ docker: docker/linux-$(shell go env GOARCH)
 
 release: $(ALL:%=build/nebula-%.tar.gz)
 
+
+release-deb: $(ALL_DEBIAN:%=build/nebula-%.deb)
+
 release-linux: $(ALL_LINUX:%=build/nebula-%.tar.gz)
 
 release-freebsd: $(ALL_FREEBSD:%=build/nebula-%.tar.gz)
@@ -156,6 +163,22 @@ build/%/nebula.exe: build/%/nebula
 build/%/nebula-cert.exe: build/%/nebula-cert
 	mv $< $@
 
+build/nebula-%.deb: build/%/nebula build/%/nebula-cert
+	cp -av dist/debian/ build/$*
+	sed -i "s/ARCHITECTURE/$(word 2, $(subst -, ,$*))/" build/$*/debian/DEBIAN/control
+	# fix package name
+	if [ "$*" = "linux-arm-7" ]; then \
+	    sed -i "s/arm$$/armhf/" build/$*/debian/DEBIAN/control; \
+	fi
+	sed -i "s/VERSION/$(BUILD_NUMBER)/" build/$*/debian/DEBIAN/control
+	mkdir -p build/$*/debian/usr/bin
+	cp -av build/$*/nebula build/$*/nebula-cert build/$*/debian/usr/bin
+	mkdir -p build/$*/debian/lib/systemd/system
+	cp -v examples/service_scripts/nebula.service build/$*/debian/lib/systemd/system
+	mkdir -p build/$*/debian/etc/nebula
+	cp -v examples/config.yml build/$*/debian/etc/nebula
+	dpkg-deb -Zxz --build --root-owner-group build/$*/debian build/nebula-$*.deb
+
 build/nebula-%.tar.gz: build/%/nebula build/%/nebula-cert
 	tar -zcv -C build/$* -f $@ nebula nebula-cert
 

dist/debian/DEBIAN/conffiles

@@ -0,0 +1 @@
+/etc/nebula/config.yml

dist/debian/DEBIAN/control

@@ -0,0 +1,6 @@
+Package: nebula
+Version: VERSION
+Architecture: ARCHITECTURE
+Maintainer: Freifunk München <[email protected]>
+Description: Nebula network connectivity daemon for encrypted communications
+ More details in https://github.com/slackhq/nebula