chore: Add bssh-keygen to release pipeline and update Ubuntu to 26.04

inureyes · inureyes · commit c7f3c8cdbb70 · 2026-04-13T23:14:53.000+09:00
- Include bssh-keygen in build, packaging, and artifact upload steps
- Add bssh-keygen formula update to Homebrew tap workflow
- Update Ubuntu build target from 25.10 (questing) to 26.04 (resolute)
- Include bssh-keygen man page in release packages
diff --git a/.github/workflows/debian_build.yml b/.github/workflows/debian_build.yml
@@ -61,13 +61,13 @@ jobs:
             os: ubuntu-24.04-arm
             version: "24.04"
           - arch: amd64
-            distro: questing
+            distro: resolute
             os: ubuntu-24.04
-            version: "25.10"
+            version: "26.04"
           - arch: arm64
-            distro: questing
+            distro: resolute
             os: ubuntu-24.04-arm
-            version: "25.10"
+            version: "26.04"
           # Binary asset mappings
           - arch: amd64
             package: bssh
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -2,7 +2,7 @@ name: Release
 
 on:
   release:
-    types: [published]
+    types: [published, prereleased]
   workflow_dispatch:
     inputs:
       update_homebrew:
@@ -98,9 +98,9 @@ jobs:
           sudo apt update
           sudo apt install -y musl-tools
 
-      # 5) Build release binaries (bssh and bssh-server)
+      # 5) Build release binaries (bssh, bssh-server, and bssh-keygen)
       - name: Build release binaries
-        run: cargo build --release --target ${{ matrix.target }} --locked --bin bssh --bin bssh-server
+        run: cargo build --release --target ${{ matrix.target }} --locked --bin bssh --bin bssh-server --bin bssh-keygen
 
       # 6) macOS code signing
       - name: Import Distribution certificate
@@ -114,18 +114,19 @@ jobs:
         if: runner.os == 'macOS'
         run: |
           BIN_DIR=target/${{ matrix.target }}/release
-          for bin in bssh bssh-server; do
+          for bin in bssh bssh-server bssh-keygen; do
             codesign --force --timestamp --options runtime \
                      --sign "Distribution" "$BIN_DIR/$bin"
           done
 
-      # 7) Package binaries (separate packages for bssh and bssh-server)
+      # 7) Package binaries (separate packages for bssh, bssh-server, and bssh-keygen)
       - name: Package Linux binaries (tar.gz)
         if: runner.os == 'Linux'
         run: |
           BIN_DIR=target/${{ matrix.target }}/release
           ASSET_BASE="${{ matrix.asset_name }}"
           SERVER_ASSET_BASE="${ASSET_BASE/bssh/bssh-server}"
+          KEYGEN_ASSET_BASE="${ASSET_BASE/bssh/bssh-keygen}"
 
           # Package bssh
           mkdir -p package-bssh
@@ -139,12 +140,19 @@ jobs:
           cp docs/man/bssh-server.8 package-bssh-server/
           tar -C package-bssh-server -czf "${SERVER_ASSET_BASE}.tar.gz" .
 
+          # Package bssh-keygen
+          mkdir -p package-bssh-keygen
+          cp "$BIN_DIR/bssh-keygen" package-bssh-keygen/
+          cp docs/man/bssh-keygen.1 package-bssh-keygen/
+          tar -C package-bssh-keygen -czf "${KEYGEN_ASSET_BASE}.tar.gz" .
+
       - name: Package macOS binaries (zip)
         if: runner.os == 'macOS'
         run: |
           BIN_DIR="target/${{ matrix.target }}/release"
           ASSET_BASE="${{ matrix.asset_name }}"
           SERVER_ASSET_BASE="${ASSET_BASE/bssh/bssh-server}"
+          KEYGEN_ASSET_BASE="${ASSET_BASE/bssh/bssh-keygen}"
 
           # Package bssh
           mkdir -p package-bssh
@@ -158,14 +166,21 @@ jobs:
           cp docs/man/bssh-server.8 package-bssh-server/
           ditto -c -k --sequesterRsrc package-bssh-server "${SERVER_ASSET_BASE}.zip"
 
+          # Package bssh-keygen
+          mkdir -p package-bssh-keygen
+          cp "$BIN_DIR/bssh-keygen" package-bssh-keygen/
+          cp docs/man/bssh-keygen.1 package-bssh-keygen/
+          ditto -c -k --sequesterRsrc package-bssh-keygen "${KEYGEN_ASSET_BASE}.zip"
+
       # 8) Generate checksums
       - name: Generate checksums
         run: |
           ASSET_BASE="${{ matrix.asset_name }}"
           SERVER_ASSET_BASE="${ASSET_BASE/bssh/bssh-server}"
+          KEYGEN_ASSET_BASE="${ASSET_BASE/bssh/bssh-keygen}"
           EXT="${{ matrix.archive_ext }}"
 
-          for file in "${ASSET_BASE}${EXT}" "${SERVER_ASSET_BASE}${EXT}"; do
+          for file in "${ASSET_BASE}${EXT}" "${SERVER_ASSET_BASE}${EXT}" "${KEYGEN_ASSET_BASE}${EXT}"; do
             if [[ "$RUNNER_OS" == "Linux" ]]; then
               sha256sum "$file" > "$file.sha256"
             else
@@ -179,6 +194,7 @@ jobs:
         run: |
           ASSET_BASE="${{ matrix.asset_name }}"
           SERVER_ASSET_BASE="${ASSET_BASE/bssh/bssh-server}"
+          KEYGEN_ASSET_BASE="${ASSET_BASE/bssh/bssh-keygen}"
           EXT="${{ matrix.archive_ext }}"
           TAG="${{ github.event.release.tag_name || github.event.inputs.release_tag }}"
 
@@ -187,10 +203,34 @@ jobs:
             "${ASSET_BASE}${EXT}.sha256" \
             "${SERVER_ASSET_BASE}${EXT}" \
             "${SERVER_ASSET_BASE}${EXT}.sha256" \
+            "${KEYGEN_ASSET_BASE}${EXT}" \
+            "${KEYGEN_ASSET_BASE}${EXT}.sha256" \
             --clobber
         env:
           GH_TOKEN: ${{ github.token }}
 
+  # ============================================================================
+  # Publish pre-release as official release (after all builds complete)
+  # ============================================================================
+  publish-release:
+    name: Publish pre-release as official
+    needs: [build]
+    if: github.event_name == 'release' && github.event.release.prerelease
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Convert pre-release to official release
+        run: |
+          TAG="${{ github.event.release.tag_name }}"
+          gh release edit "$TAG" --prerelease=false
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
   # ============================================================================
   # Microsoft Teams release notification (Power Automate Workflows webhook)
   # ============================================================================
diff --git a/.github/workflows/update_homebrew_formula.yml b/.github/workflows/update_homebrew_formula.yml
@@ -36,7 +36,8 @@ jobs:
           if [ "${{ github.event_name }}" = "workflow_dispatch" ] && [ -n "${{ github.event.inputs.release_tag }}" ]; then
             echo "VERSION=${{ github.event.inputs.release_tag }}" >> $GITHUB_ENV
           else
-            TAG=$(gh api repos/${{ github.repository }}/releases/latest --jq .tag_name)
+            # Get the latest official (non-pre-release) release
+            TAG=$(gh release view --json tagName --jq .tagName)
             echo "VERSION=$TAG" >> $GITHUB_ENV
           fi
         env:
@@ -66,6 +67,11 @@ jobs:
           SERVER_LINUX_ARM_URL="https://github.com/lablup/bssh/releases/download/v${VERSION}/bssh-server-linux-aarch64.tar.gz"
           SERVER_LINUX_X86_URL="https://github.com/lablup/bssh/releases/download/v${VERSION}/bssh-server-linux-x86_64.tar.gz"
 
+          # bssh-keygen URLs
+          KEYGEN_MAC_URL="https://github.com/lablup/bssh/releases/download/v${VERSION}/bssh-keygen-macos-aarch64.zip"
+          KEYGEN_LINUX_ARM_URL="https://github.com/lablup/bssh/releases/download/v${VERSION}/bssh-keygen-linux-aarch64.tar.gz"
+          KEYGEN_LINUX_X86_URL="https://github.com/lablup/bssh/releases/download/v${VERSION}/bssh-keygen-linux-x86_64.tar.gz"
+
           mkdir -p tmp
 
           # Download bssh artifacts
@@ -78,6 +84,11 @@ jobs:
           curl -Ls "$SERVER_LINUX_ARM_URL" -o tmp/server-linux-arm.tar.gz
           curl -Ls "$SERVER_LINUX_X86_URL" -o tmp/server-linux-x86.tar.gz
 
+          # Download bssh-keygen artifacts
+          curl -Ls "$KEYGEN_MAC_URL" -o tmp/keygen-mac.zip
+          curl -Ls "$KEYGEN_LINUX_ARM_URL" -o tmp/keygen-linux-arm.tar.gz
+          curl -Ls "$KEYGEN_LINUX_X86_URL" -o tmp/keygen-linux-x86.tar.gz
+
           # Export bssh URLs and checksums
           echo "mac_url=$MAC_URL" >> $GITHUB_ENV
           echo "linux_arm_url=$LINUX_ARM_URL" >> $GITHUB_ENV
@@ -94,6 +105,14 @@ jobs:
           echo "server_linux_arm_sha=$(shasum -a 256 tmp/server-linux-arm.tar.gz | awk '{print $1}')" >> $GITHUB_ENV
           echo "server_linux_x86_sha=$(shasum -a 256 tmp/server-linux-x86.tar.gz | awk '{print $1}')" >> $GITHUB_ENV
 
+          # Export bssh-keygen URLs and checksums
+          echo "keygen_mac_url=$KEYGEN_MAC_URL" >> $GITHUB_ENV
+          echo "keygen_linux_arm_url=$KEYGEN_LINUX_ARM_URL" >> $GITHUB_ENV
+          echo "keygen_linux_x86_url=$KEYGEN_LINUX_X86_URL" >> $GITHUB_ENV
+          echo "keygen_mac_sha=$(shasum -a 256 tmp/keygen-mac.zip | awk '{print $1}')" >> $GITHUB_ENV
+          echo "keygen_linux_arm_sha=$(shasum -a 256 tmp/keygen-linux-arm.tar.gz | awk '{print $1}')" >> $GITHUB_ENV
+          echo "keygen_linux_x86_sha=$(shasum -a 256 tmp/keygen-linux-x86.tar.gz | awk '{print $1}')" >> $GITHUB_ENV
+
       - name: Update bssh formula
         run: |
           cd homebrew-tap
@@ -131,12 +150,36 @@ jobs:
             echo "Warning: Formula/bssh-server.rb not found, skipping server formula update"
           fi
 
+      - name: Update bssh-keygen formula
+        run: |
+          cd homebrew-tap
+          VERSION="${{ env.VERSION_NO_V }}"
+
+          # Check if bssh-keygen formula exists
+          if [ -f "Formula/bssh-keygen.rb" ]; then
+            gsed -i "s/^  version .*/  version \"${VERSION}\"/" Formula/bssh-keygen.rb
+
+            gsed -i "s|https://github.com/.*/bssh-keygen-macos-aarch64.zip|${keygen_mac_url}|" Formula/bssh-keygen.rb
+            gsed -i "/bssh-keygen-macos-aarch64.zip\"/!b;n;c\      sha256 \"${keygen_mac_sha}\"" Formula/bssh-keygen.rb
+
+            gsed -i "s|https://github.com/.*/bssh-keygen-linux-aarch64.tar.gz|${keygen_linux_arm_url}|" Formula/bssh-keygen.rb
+            gsed -i "/bssh-keygen-linux-aarch64.tar.gz\"/!b;n;c\      sha256 \"${keygen_linux_arm_sha}\"" Formula/bssh-keygen.rb
+
+            gsed -i "s|https://github.com/.*/bssh-keygen-linux-x86_64.tar.gz|${keygen_linux_x86_url}|" Formula/bssh-keygen.rb
+            gsed -i "/bssh-keygen-linux-x86_64.tar.gz\"/!b;n;c\      sha256 \"${keygen_linux_x86_sha}\"" Formula/bssh-keygen.rb
+          else
+            echo "Warning: Formula/bssh-keygen.rb not found, skipping keygen formula update"
+          fi
+
       - name: Commit and push changes to tap
         run: |
           cd homebrew-tap
           git add Formula/bssh.rb
           if [ -f "Formula/bssh-server.rb" ]; then
             git add Formula/bssh-server.rb
           fi
-          git commit -m "bump: bssh and bssh-server to v${{ env.VERSION_NO_V }}"
+          if [ -f "Formula/bssh-keygen.rb" ]; then
+            git add Formula/bssh-keygen.rb
+          fi
+          git commit -m "bump: bssh, bssh-server, and bssh-keygen to v${{ env.VERSION_NO_V }}"
           git push origin main
