feat: add Stackit-cli support for different package managers (zypper, dnf) #909

Benjosh95 · 2025-08-07T07:06:20Z

JIRA-Ticket: https://jira.schwarz/secure/RapidBoard.jspa?rapidView=41274&view=detail&selectedIssue=STACKITCLI-213#

What Was Implemented:

RPM packages & repo & repometadata get built and signed with (existing) GPG (Ed25519) Key retrieved from prod bucket.
All gets currently published into test bucket (distribution-test) in test env https://portal.stackit.cloud/projects/66b03760-125b-4c63-9624-741e8a418c02/object-storage/buckets/distribution-test
CLI Installation (docker) scripts created for all relevant and ed25519 supporting distributions
Documentation updated in INSTALLATION.md

Overview of the workflow (isolated and stripped down for testing):

rpm-test.yml (worfklow starts when pushed on this branch) => release-rpm.sh (setup gpg & calls goreleaser) => goreleaser.rpm.yml (builds & signs the rpm packages) => rpm-test.yml (worfklow continues) => publish-rpm-repo.sh (creates a rpm repo and rpm metadata for the already created rpm packages & signs rpm metadata & publishes to distribution-test bucket for now)

Testing-Instructions for supported distributions (having RPM Version +4.15 for ed25519 signature of gpg Key)

Fedora 35+ => ./scripts/test-fedora.sh [ ]
RHEL 9+ => ./scripts/test-rhel9.sh [ ]
AlmaLinux 9+ => ./scripts/test-almalinux9.sh [ ]
Rocky Linux 9+ => ./scripts/test-rocky9.sh [ ]
OpenSUSE Tumbleweed => ./scripts/test-opensuse.sh [ ]

Next ToDos after changes were reviewed:

combine and cleanup some of the logic [ ]
transfer testing workflow logic (rpm-test.yml) into prod release worfklow (release.yml) and remove it afterwards. [ ]
transfer testing goreleaser logic into prod goreleaser script and remove it afterwards. [ ]

Cleanup and clarify:

renamed nfpms id from linux-packages to linux_packages, does it cause any problems? [ ]
remove test secrets from github [ ]
does the pm-badge need an update? [ ]
Where to finally put the testing scripts? [ ]

Checklist

Issue was linked above
Code format was applied: make fmt
Examples were added / adjusted (see e.g. here)
Docs are up-to-date: make generate-docs (will be checked by CI)
Unit tests got implemented or updated
Unit tests are passing: make test (will be checked by CI)
No linter issues: make lint (will be checked by CI)

…tu runners

rubenhoenle · 2025-08-09T18:39:20Z

.github/workflows/rpm-test.yml

+          cache: true
+
+      - name: Install GoReleaser
+        run: go install github.com/goreleaser/goreleaser/v2@latest


Please use https://github.com/goreleaser/goreleaser-action like we do in the release workflow

Fyusel

Very nice with those testing scripts (I am still reviewing and need to test 😇).
Can you rebase your commits a little bit (remove some of them e.g. via git rebase -i).?

Fyusel · 2025-08-11T07:35:55Z

.github/workflows/release.yaml

+      # aptly version 1.6.0 results in an segmentation fault. Therefore we fall back to version 1.5.0.
+      # Since it is not possible to specify a version via brew command a formula was added for aptly 1.5.0
+      # (source: https://github.com/Homebrew/homebrew-core/pull/202415/files)
+      - name: Install Aptly version 1.5.0


Since you are installing this on ubuntu it seems to be that this is not version 1.5.0 anymore. Does this work on ubuntu so was the mentioned isse with aptly version 1.6.0 only an issue on mac?
If so, then the added brew formula can be removed and of course this note as well.

Fyusel · 2025-08-11T07:39:54Z

.github/workflows/release.yaml

      - name: Publish packages to APT repo
-        if: contains(github.ref_name, '-') == false


Why is this removed?

Fyusel · 2025-08-11T07:44:55Z

goreleaser.rpm.yaml

@@ -0,0 +1,42 @@
+version: 2


For my understanding: This will be added/merged later to the .goreleaser.yaml, right?

Fyusel · 2025-08-11T11:41:37Z

scripts/test-almalinux9.sh

+docker exec $CONTAINER_NAME bash -c "
+    if command -v stackit >/dev/null 2>&1; then
+        echo '✅ stackit command found: \$(which stackit)'
+        echo '✅ Version: \$(stackit version)'


This does not work on my side. I get the plain output of "which stackit".

Suggested change

echo '✅ Version: \$(stackit version)'

echo "✅ stackit command found: $(which stackit)"

If changing to this I get the error: "stackit command not found"

Fyusel · 2025-08-11T11:45:11Z

scripts/test-fedora.sh

+docker exec $CONTAINER_NAME bash -c "
+    if command -v stackit >/dev/null 2>&1; then
+        echo '✅ stackit command found: \$(which stackit)'
+        echo '✅ Version: \$(stackit version)'


Fyusel · 2025-08-11T11:51:24Z

scripts/test-almalinux9.sh

@@ -0,0 +1,117 @@
+#!/bin/bash


If we want to keep those test files:
Most of the content from almalinux fedora, rhel9 and rocky9 are the same. Is there a possibility to use one generic script for them?
Same maybe for the two opensuse scripts.

Fyusel · 2025-08-11T11:52:32Z

scripts/test-fedora.sh

+    if ! command -v stackit >/dev/null 2>&1; then
+        echo '✅ stackit command no longer found'
+    else
+        echo '❌ stackit command still found: \$(which stackit)'


I don't get there in my test but here would be the same issue

Fyusel · 2025-08-12T08:53:24Z

scripts/test-opensuse.sh

+docker exec $CONTAINER_NAME bash -c "
+    zypper clean --all
+    zypper refresh
+    zypper repos


I am getting an error here. It seems to be that the Repository of the Stackit CLI is present but could not be refreshed. However the installation step works. Have you seen this on your side as well?

Repository 'STACKIT CLI Repository' is invalid. [stackit-cli|https://distribution-test.object.storage.eu01.onstackit.cloud/rpm/cli] Failed to retrieve new repository metadata. History: - Signature verification failed for repomd.xml Please check if the URIs defined for this repository are pointing to a valid repository. Skipping repository 'STACKIT CLI Repository' because of the above error. Some of the repositories have not been refreshed because of an error.

Same message for the other opensuse script (The output above is with "--non-interactive" for zypper, just tested this as well. So the message without this is slightly different.

github-actions · 2025-08-20T02:55:01Z

This PR was marked as stale after 7 days of inactivity and will be closed after another 7 days of further inactivity. If this PR should be kept open, just add a comment, remove the stale label or push new commits to it.

Benjosh95 added 27 commits July 30, 2025 09:26

add rpm workflow

38a3f01

add rpm publish script

c2d604b

fix: use Docker for createrepo_c in RPM publishing workflow

09ecfd4

add docker to release workflow

26d6b36

fix: improve Docker startup on macOS runner

3f0d5f1

fix: use simpler Colima setup for Docker on macOS

c135f16

fix: install both docker and colima

11f441e

fix: clean Colima setup for Docker on macOS

ac73cc0

feat: implement clean multi-job workflow with separate macOS and Ubun…

45de844

…tu runners

fix: add sudo to aptly installation commands

30f7304

add: stripped down release n publish of rpm

8e28cda

fix: executable

8329c51

add goreleaser

d515533

fix: change skip-publish to snapshot

10a1811

change embedded signing

f889c76

fix main path

d57a1eb

fix gpg key path instead of content

f28a60c

import key with passphrase

75bd37b

provide passphrase with nfpm env

ff61000

provide nfpms envs

6a65f28

change package id test

d83516d

adjust aws cli install

e8a0323

moving envs and keys

84eb11f

aws cli test

22edfa0

test-env object-storage credentials

356efd8

add scripts for testing different distros and update install guide

eb41856

rename test script

a8449a4

rubenhoenle reviewed Aug 9, 2025

View reviewed changes

Fyusel reviewed Aug 11, 2025

View reviewed changes

Fyusel reviewed Aug 12, 2025

View reviewed changes

github-actions bot added the Stale label Aug 20, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat: add Stackit-cli support for different package managers (zypper, dnf) #909

feat: add Stackit-cli support for different package managers (zypper, dnf) #909

Uh oh!

Benjosh95 commented Aug 7, 2025 •

edited

Loading

Uh oh!

rubenhoenle Aug 9, 2025

Uh oh!

Fyusel left a comment

Uh oh!

Fyusel Aug 11, 2025

Uh oh!

Fyusel Aug 11, 2025

Uh oh!

Fyusel Aug 11, 2025

Uh oh!

Fyusel Aug 11, 2025

Uh oh!

Fyusel Aug 11, 2025

Uh oh!

Fyusel Aug 11, 2025

Uh oh!

Fyusel Aug 11, 2025

Uh oh!

Fyusel Aug 12, 2025

Uh oh!

Fyusel Aug 12, 2025

Uh oh!

github-actions bot commented Aug 20, 2025

Uh oh!

Uh oh!

		- name: Publish packages to APT repo
		if: contains(github.ref_name, '-') == false

	echo '✅ Version: \$(stackit version)'
	echo "✅ stackit command found: $(which stackit)"

feat: add Stackit-cli support for different package managers (zypper, dnf) #909

Are you sure you want to change the base?

feat: add Stackit-cli support for different package managers (zypper, dnf) #909

Uh oh!

Conversation

Benjosh95 commented Aug 7, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What Was Implemented:

Overview of the workflow (isolated and stripped down for testing):

Testing-Instructions for supported distributions (having RPM Version +4.15 for ed25519 signature of gpg Key)

Next ToDos after changes were reviewed:

Cleanup and clarify:

Checklist

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Fyusel left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

github-actions bot commented Aug 20, 2025

Uh oh!

Uh oh!

Benjosh95 commented Aug 7, 2025 •

edited

Loading