feat: add crucible image and sow-tools binary channel promote

2026-06-27 18:15:08 +02:00
parent dd92379b68
commit 7589c5f220
6 changed files with 220 additions and 0 deletions
@@ -50,3 +50,22 @@ jobs:
          bash scripts/emit-release-fragment.sh
      - uses: actions/upload-artifact@v3
        with: { name: release-fragment, path: release-fragment.json }
+
+      # Service tier: only vX.Y.Z → release; anything else rejects.
+      # SHA is the 12-char git SHA from the "Resolve tag" step above.
+      - name: Promote channel
+        env:
+          TAG: ${{ github.ref_name }}
+          SHA: ${{ steps.tag.outputs.sha }}
+          GITEA_TOKEN: ${{ secrets.PACKAGE_TOKEN }}
+          GITEA_SERVER: ${{ github.server_url }}
+          GITEA_OWNER: ${{ github.repository_owner }}
+          REGISTRY_HOST: ${{ env.REGISTRY }}
+          REGISTRY_USER: ${{ secrets.REGISTRY_USER }}
+          REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}
+        run: |
+          if [[ "$TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+            nix shell nixpkgs#skopeo --command bash scripts/promote-crucible.sh release "$SHA"
+          else
+            printf 'unsupported tag for service tier: %s\n' "$TAG" >&2; exit 1
+          fi