Enhance installation instructions and script for gapura-sentinel. Added GitHub Release installation method in README and install.md, and improved install.sh to download and verify the latest release automatically.

Author: HasanH47

README.md

@@ -54,7 +54,15 @@ Contoh pakai:
 
 ### Sentinel (host) — `gapura-sentinel`
 
-Build:
+Install (recommended, from GitHub Release):
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/sangkan-dev/gapura/main/scripts/install.sh -o install.sh
+chmod +x install.sh
+./install.sh
+```
+
+Build from source (alternative):
 
 ```bash
 cd sentinel

docs/install.md

@@ -6,17 +6,16 @@ This guide installs **`gapura-sentinel`** on a Linux SSH host and configures Ope
 
 - Linux host running OpenSSH (`sshd`)
 - Outbound HTTPS to your EVM RPC endpoint
-- `gapura-sentinel` binary built on the host or copied over
+- `curl`, `jq`, `sha256sum` (untuk install dari GitHub Release)
 
 ## Quick install (script)
 
-From the repo root on the target host:
+### Install dari GitHub Release (default)
 
 ```bash
-cd gapura
-cd sentinel && cargo build --release
-
-./scripts/install.sh
+curl -fsSL https://raw.githubusercontent.com/sangkan-dev/gapura/main/scripts/install.sh -o install.sh
+chmod +x install.sh
+./install.sh
 ```
 
 The script:
@@ -27,6 +26,18 @@ The script:
 - writes `/etc/ssh/sshd_config.d/99-gapura.conf`
 - runs `sshd -t`
 
+### Install dari source (alternatif)
+
+Jika kamu tidak ingin download artifact, kamu bisa build dari source:
+
+```bash
+git clone https://github.com/sangkan-dev/gapura.git
+cd gapura
+cd sentinel && cargo build --release
+cd ..
+SENTINEL_BIN=./sentinel/target/release/gapura-sentinel ./scripts/install.sh
+```
+
 ## Configure
 
 1. Edit `/etc/gapura/sentinel.toml`:

scripts/install.sh

@@ -7,23 +7,71 @@
 # - Optional disk cache dir /var/lib/gapura/cache
 # - Writes sshd config fragment /etc/ssh/sshd_config.d/99-gapura.conf
 #
-# Requires: sudo/root, OpenSSH, and a built binary at:
-#   sentinel/target/release/gapura-sentinel
+# Default behavior: download `gapura-sentinel` from GitHub Releases and install it.
+# Fallback: set `SENTINEL_BIN=/path/to/gapura-sentinel` to install a local binary.
 set -euo pipefail
 
 ROOT="$(cd "$(dirname "$0")/.." && pwd)"
 
 SENTINEL_BIN="${SENTINEL_BIN:-$ROOT/sentinel/target/release/gapura-sentinel}"
+REPO="${REPO:-sangkan-dev/gapura}"
+TMP_DIR="${TMP_DIR:-/tmp/gapura-install.$$}"
 INSTALL_BIN_DIR="${INSTALL_BIN_DIR:-/usr/local/bin}"
 CONFIG_DIR="${CONFIG_DIR:-/etc/gapura}"
 CACHE_DIR="${CACHE_DIR:-/var/lib/gapura/cache}"
 SSHD_FRAGMENT="${SSHD_FRAGMENT:-/etc/ssh/sshd_config.d/99-gapura.conf}"
 SENTINEL_USER="${SENTINEL_USER:-gapura-sentinel}"
 
-if [[ ! -x "$SENTINEL_BIN" ]]; then
-  echo "missing executable: $SENTINEL_BIN" >&2
-  echo "build it with: (cd sentinel && cargo build --release)" >&2
-  exit 1
+need() {
+  command -v "$1" >/dev/null 2>&1 || { echo "missing dependency: $1" >&2; exit 1; }
+}
+
+download_latest_release() {
+  need curl
+  need jq
+  need sha256sum
+
+  mkdir -p "$TMP_DIR"
+  local api="https://api.github.com/repos/$REPO/releases/latest"
+  echo "==> fetching latest release: $REPO"
+  local json
+  json="$(curl -fsSL "$api")"
+
+  local url_bin url_sums
+  url_bin="$(echo "$json" | jq -r '.assets[] | select(.name=="gapura-sentinel-linux-x86_64") | .browser_download_url' | head -n1)"
+  url_sums="$(echo "$json" | jq -r '.assets[] | select(.name=="SHA256SUMS") | .browser_download_url' | head -n1)"
+
+  if [[ -z "$url_bin" || "$url_bin" == "null" ]]; then
+    echo "release asset not found: gapura-sentinel-linux-x86_64" >&2
+    exit 1
+  fi
+  if [[ -z "$url_sums" || "$url_sums" == "null" ]]; then
+    echo "release asset not found: SHA256SUMS" >&2
+    exit 1
+  fi
+
+  echo "==> downloading artifacts"
+  curl -fL "$url_bin" -o "$TMP_DIR/gapura-sentinel-linux-x86_64"
+  curl -fL "$url_sums" -o "$TMP_DIR/SHA256SUMS"
+
+  echo "==> verifying checksum"
+  (cd "$TMP_DIR" && sha256sum -c SHA256SUMS --ignore-missing)
+
+  chmod +x "$TMP_DIR/gapura-sentinel-linux-x86_64"
+  SENTINEL_BIN="$TMP_DIR/gapura-sentinel-linux-x86_64"
+}
+
+cleanup() {
+  if [[ "${TMP_DIR:-}" == /tmp/gapura-install.* && -d "${TMP_DIR:-}" ]]; then
+    rm -rf "$TMP_DIR" || true
+  fi
+}
+trap cleanup EXIT
+
+if [[ -x "$SENTINEL_BIN" ]]; then
+  echo "==> installing from local binary: $SENTINEL_BIN"
+else
+  download_latest_release
 fi
 
 sudo mkdir -p "$INSTALL_BIN_DIR"