vn971 / rua

Build tool for Arch Linux providing control, review and jailed build options
GNU General Public License v3.0
427 stars 41 forks source link

Binary release? #105

Open KSXGitHub opened 4 years ago

KSXGitHub commented 4 years ago

Instaling rua from AUR requires compiling, which costs time, CPU, and memory. It would be cool if you release pre-built binary to GitHub Release. I can create .travis-ci.yml for you if you are lazy.

vn971 commented 4 years ago

Hi! Thanks for raising the issue, I think it's something that indeed should be done.

I'm on a vacation at the moment, I'll get back to it a bit later.

vn971 commented 4 years ago

@KSXGitHub I notice that some packages somehow use github itself to host the built artifacts. E.g. here: https://github.com/Jguer/yay/releases https://github.com/Superjo149/auryo/releases https://github.com/scalameta/scalafmt/releases/tag/v2.4.2

Do you know how it's done? Is it travis underneath, or what is?

KSXGitHub commented 4 years ago

They probably:

I am quite surprised that you didn't know GitHub Release host build artifacts.

KSXGitHub commented 4 years ago

I find using Travis for deployment more reliable. You can read more about it here: https://docs.travis-ci.com/user/deployment/releases/

thezealousfool commented 4 years ago

@vn971 This might be helpful https://github.com/japaric/trust

micwoj92 commented 3 years ago

@vn971 is anyone working on this? I could quickly try to do something like this. (with GitHub actions)

vn971 commented 3 years ago

@micwoj92 hey, sorry for the late reply... I'd love to use an automated system like Travis or GH Actions, however only if the builds are reproducible, e.g. if I make a local build/release as well, I get all the same hashsums. Last time I checked RUA, I think it gave the same binary on the same OS (with only the build re-started).

If the PR produces binaries that have the same hashes that I can obtain by a local compilation, then I'll definitely happy accept such an MR

micwoj92 commented 3 years ago

@micwoj92 hey, sorry for the late reply... I'd love to use an automated system like Travis or GH Actions, however only if the builds are reproducible, e.g. if I make a local build/release as well, I get all the same hashsums.

I tried and I couldn't figure it out, build from GH Actions had different sums than one built locally, I even tried building in docker.

Last time I checked RUA, I think it gave the same binary on the same OS (with only the build re-started).

I did the same, compiled rua, removed build directory and compiled again, same hashes on same machine, but GH actions had different. I will try building on my laptops later today and see if it has same hashes as the one built on my main pc.

Sorry for ping @Morganamilo, do you know if your paru binaries are reproducible?