From 87e52ddd06c2dd405878866238f4b604f75f25e9 Mon Sep 17 00:00:00 2001
From: Daniel Hougaard <62331820+DanielHougaard@users.noreply.github.com>
Date: Wed, 3 Jul 2024 22:40:38 +0200
Subject: [PATCH] Attempt .deb package

---
 .github/workflows/build-binaries.yml | 33 +++++++----
 .github/workflows/build-deb.yml      | 85 ++++++++++++++++++++++++++++
 2 files changed, 107 insertions(+), 11 deletions(-)
 create mode 100644 .github/workflows/build-deb.yml

diff --git a/.github/workflows/build-binaries.yml b/.github/workflows/build-binaries.yml
index 5dc2cab72..6958076d2 100644
--- a/.github/workflows/build-binaries.yml
+++ b/.github/workflows/build-binaries.yml
@@ -22,8 +22,10 @@ jobs:
         runs-on: ubuntu-20.04
         strategy:
             matrix:
-                arch: [x64, arm64]
-                os: [linux, alphine, win]
+                # arch: [x64, arm64]
+                # os: [linux, alphine, win]
+                arch: [x64]
+                os: [linux]
                 include:
                     - os: linux
                       target: node18-linux
@@ -76,20 +78,29 @@ jobs:
             - name: List files
               run: ls -la ./binary
 
+            - name: Create .deb package
+              id: build-deb
+              if: matrix.os == 'linux'
+              uses: ./.github/workflows/build-deb.yml
+              with:
+                  executable_path: ./binary/infisical-${{ matrix.os }}-${{ matrix.arch }}
+                  arch: ${{ matrix.arch }}
+                  version: "3.0.0"
+
             - uses: actions/setup-python@v4
             - run: pip install --upgrade cloudsmith-cli
 
             - name: Publish to Cloudsmith (Linux)
               working-directory: ./backend
               if: matrix.os == 'linux'
-              run: cloudsmith push deb infisical/infisical-standalone ./binary/infisical-${{ matrix.os }}-${{ matrix.arch }}  --republish --no-wait-for-sync --version 3.0.0 --api-key ${{ secrets.CLOUDSMITH_API_KEY }}
+              run: cloudsmith push deb infisical/infisical-standalone/any-distro/any-version ${{ steps.build-deb.outputs.deb_path }}  --republish --no-wait-for-sync --version 3.0.0 --api-key ${{ secrets.CLOUDSMITH_API_KEY }}
 
-            - name: Publish to Cloudsmith (Windows)
-              working-directory: ./backend
-              if: matrix.os == 'win'
-              run: cloudsmith push raw infisical/infisical-standalone ./binary/infisical-${{ matrix.os }}-${{ matrix.arch }}.exe --republish --no-wait-for-sync --version 3.0.0 --api-key ${{ secrets.CLOUDSMITH_API_KEY }}
+            # - name: Publish to Cloudsmith (Windows)
+            #   working-directory: ./backend
+            #   if: matrix.os == 'win'
+            #   run: cloudsmith push raw infisical/infisical-standalone ./binary/infisical-${{ matrix.os }}-${{ matrix.arch }}.exe --republish --no-wait-for-sync --version 3.0.0 --api-key ${{ secrets.CLOUDSMITH_API_KEY }}
 
-            - name: Publish to Cloudsmith (Alphine)
-              working-directory: ./backend
-              if: matrix.os == 'alphine'
-              run: cloudsmith push alpine infisical/infisical-standalone ./binary/infisical-${{ matrix.os }}-${{ matrix.arch }} --republish --no-wait-for-sync --version 3.0.0 --api-key ${{ secrets.CLOUDSMITH_API_KEY }}
+            # - name: Publish to Cloudsmith (Alphine)
+            #   working-directory: ./backend
+            #   if: matrix.os == 'alphine'
+            #   run: cloudsmith push alpine infisical/infisical-standalone ./binary/infisical-${{ matrix.os }}-${{ matrix.arch }} --republish --no-wait-for-sync --version 3.0.0 --api-key ${{ secrets.CLOUDSMITH_API_KEY }}
diff --git a/.github/workflows/build-deb.yml b/.github/workflows/build-deb.yml
new file mode 100644
index 000000000..6597a28a4
--- /dev/null
+++ b/.github/workflows/build-deb.yml
@@ -0,0 +1,85 @@
+name: Build Debian Package
+
+on:
+    workflow_call:
+        inputs:
+            os:
+                required: true
+                type: string
+            arch:
+                required: true
+                type: string
+            version:
+                required: true
+                type: string
+            executable_path:
+                required: true
+                type: string
+        outputs:
+            deb_path:
+                description: "Path to the generated .deb file"
+                value: ${{ jobs.build.outputs.deb_path }}
+
+defaults:
+    run:
+        working-directory: ./backend
+
+jobs:
+    build:
+        runs-on: ubuntu-latest
+        outputs:
+            deb_path: ${{ steps.set_deb_path.outputs.deb_path }}
+
+        steps:
+            - uses: actions/checkout@v2
+
+            - name: Set up package structure
+              run: |
+                  mkdir -p infisical-standalone/DEBIAN
+                  mkdir -p infisical-standalone/usr/local/bin
+
+            - name: Copy executable
+              run: |
+                  cp ${{inputs.executable_path}} infisical-standalone/usr/local/bin/
+                  chmod +x infisical-standalone/usr/local/bin/infisical-${{ inputs.os }}-${{ inputs.arch }}
+
+            - name: Create control file (x64)
+              if: inputs.arch == 'x64'
+              run: |
+                  cat <<EOF > infisical-standalone/DEBIAN/control
+                  Package: infisical-standalone
+                  Version: ${{ inputs.version }}
+                  Section: base
+                  Priority: optional
+                  Architecture: amd64
+                  Maintainer: Infisical <daniel@infisical.com>
+                  Description: Infisical standalone executable (app.infisical.com)
+                  EOF
+
+            - name: Create control file (other architectures)
+              if: inputs.arch != 'x64'
+              run: |
+                  cat <<EOF > infisical-standalone/DEBIAN/control
+                  Package: infisical-standalone-${{ inputs.arch }}
+                  Version: ${{ inputs.version }}
+                  Section: base
+                  Priority: optional
+                  Architecture: ${{ inputs.arch }}
+                  Maintainer: Infisical <daniel@infisical.com>
+                  Description: Infisical standalone executable (app.infisical.com)
+                  EOF
+
+            - name: Set permissions
+              run: |
+                  chmod 755 infisical-standalone/DEBIAN
+                  chmod 644 infisical-standalone/DEBIAN/control
+
+            - name: Build .deb package
+              run: dpkg-deb --build infisical-standalone
+
+            - name: Rename package
+              run: mv infisical-standalone.deb infisical-linux-${{ inputs.arch }}.deb
+
+            - name: Set deb path output
+              id: set_deb_path
+              run: echo "deb_path=$(pwd)/infisical-linux-${{ inputs.arch }}.deb" >> $GITHUB_OUTPUT