fix usage of new repo utils, refs #13

Signed-off-by: morph027 <stefan.heitmueller@gmx.com>

.gitlab-ci.yml

@@ -1,88 +1,191 @@
+---
 stages:
   - package
+  - test
   - repo
   - pages
 
-package:
+.vars: &vars
+  NAME: gitea
+  URL: "https://gitea.io"
+  DESCRIPTION: "A painless self-hosted Git service."
+  ARTIFACTS: "usr"
+
+.package: &package
   stage: package
   image: golang:latest
-  variables:
-    NAME: drone-server
-    URL: "https://gitea.io"
-    DESCRIPTION: "A painless self-hosted Git service."
-    ARTIFACTS: "usr"
   script:
-    - export VERSION=$(echo ${CI_COMMIT_TAG} | cut -d'-' -f1)
-    - export PATCHLEVEL=$(echo ${CI_COMMIT_TAG} | cut -d'-' -f2)
+    - export VERSION=$(echo ${CI_COMMIT_TAG#*v} | cut -d'+' -f1)
+    - export PATCHLEVEL=$(echo ${CI_COMMIT_TAG} | cut -d'+' -f2)
     - apt-get -qq update
-    - apt-get -qqy install ruby-dev ruby-ffi curl
-    - gem install specific_install
-    - gem specific_install https://github.com/root360/fpm.git all_fixes
+    - apt-get -qqy install ruby-dev ruby-ffi curl file
+    - gem install fpm
     - mkdir -p "${CI_PROJECT_DIR}/package_root/usr/bin"
-    - curl -sL -o "${CI_PROJECT_DIR}/package_root/usr/bin/gitea" "https://dl.gitea.io/gitea/${VERSION}/gitea-${VERSION}-linux-amd64"
+    - echo "https://dl.gitea.com/gitea/${VERSION}/gitea-${VERSION}-linux-${ARCH}"
+    - curl -sL -o
+        "${CI_PROJECT_DIR}/package_root/usr/bin/gitea"
+        "https://dl.gitea.com/gitea/${VERSION}/gitea-${VERSION}-linux-${ARCH}"
+    - file
+        --mime-type
+        --brief
+        "${CI_PROJECT_DIR}/package_root/usr/bin/gitea"
+        | grep -q 'application/x-executable'
     - chmod +x "${CI_PROJECT_DIR}/package_root/usr/bin/gitea"
+    - gem install fpm
     - fpm
+        --architecture "${ARCH}"
         --input-type dir
         --output-type deb
-        --package "${CI_PROJECT_DIR}/gitea_${VERSION}-p${PATCHLEVEL}_amd64.deb"
+        --package "${CI_PROJECT_DIR}/gitea_${VERSION}+${PATCHLEVEL}_${ARCH}.deb"
         --name "${NAME}"
-        --version "${VERSION}-p${PATCHLEVEL}"
+        --version "${VERSION}+${PATCHLEVEL}"
         --description "${DESCRIPTION}"
         --maintainer "Stefan Heitmüller <stefan.heitmueller@gmx.com>"
         --url "${URL}"
         --depends git
-        --deb-systemd "${CI_PROJECT_DIR}/package_root/usr/lib/systemd/system/${NAME}.service"
-        --deb-systemd-enable
-        --deb-systemd-auto-start
+        --deb-recommends morph027-keyring
+        --deb-systemd "${CI_PROJECT_DIR}/.packaging/${NAME}.service"
         --deb-activate-noawait /etc/init.d
         --prefix=/
-        --after-install "${CI_PROJECT_DIR}/package_scripts/after-install.sh"
+        --before-install "${CI_PROJECT_DIR}/.packaging/before-install.sh"
         --chdir "${CI_PROJECT_DIR}/package_root"
         $ARTIFACTS
   artifacts:
     paths:
       - $CI_PROJECT_DIR/*.deb
+    expire_in: 7 days
+
+.manual: &manual
+  when: manual
   only:
     - tags
 
-reprepro:
+.trigger: &trigger
+  when: delayed
+  start_in: 2 hours
+  only:
+    - triggers
+
+gitea-amd64-tag:
+  <<: [*package, *manual]
+  variables:
+    <<: *vars
+    ARCH: amd64
+
+gitea-amd64-trigger:
+  <<: [*package, *trigger]
+  variables:
+    <<: *vars
+    ARCH: amd64
+
+gitea-arm64-tag:
+  <<: [*package, *manual]
+  variables:
+    <<: *vars
+    ARCH: arm64
+
+gitea-arm64-trigger:
+  <<: [*package, *trigger]
+  variables:
+    <<: *vars
+    ARCH: arm64
+
+.test-install: &test-install
+  stage: test
+  image: ubuntu:noble
+  script:
+    - ./.gitlab-ci/test-install.sh
+
+.test-update: &test-update
+  stage: test
+  image: ubuntu:noble
+  script:
+    - ./.gitlab-ci/test-update.sh
+
+test-install-trigger:
+  <<: *test-install
+  needs:
+    - gitea-amd64-trigger
+  only:
+    - trigger
+
+test-install-tag:
+  <<: *test-install
+  needs:
+    - gitea-amd64-tag
+  only:
+    - tags
+
+test-update-trigger:
+  <<: *test-update
+  needs:
+    - gitea-amd64-trigger
+  only:
+    - trigger
+
+test-update-tag:
+  <<: *test-update
+  needs:
+    - gitea-amd64-tag
+  only:
+    - tags
+
+.repro: &repo
   cache:
     untracked: true
     paths:
-      - $CI_PROJECT_DIR/repo
-    key: reprepro
+      - $CI_PROJECT_DIR/.repo
+    key: repo
   stage: repo
-  image: registry.gitlab.com/packaging/reprepro-multiple-versions:latest
+  image: registry.gitlab.com/packaging/utils:latest
   script:
-    - echo "$SIGNING_KEY" > /tmp/key
-    - gpg --import /tmp/key
-    - rm -f /tmp/key
-    - test -f $CI_PROJECT_DIR/repo/gpg.key || gpg --export --armor "$SIGNING_KEY_ID" > $CI_PROJECT_DIR/repo/gpg.key
-    - sed -i 's,##SIGNING_KEY_ID##,'$SIGNING_KEY_ID',' repo/conf/distributions
-    - find $CI_PROJECT_DIR -type f -name "*.deb" -exec
-        reprepro
-        -b $CI_PROJECT_DIR/repo
-        includedeb
-        gitea
-        {} \+;
-  only:
-    - tags
+    - /deb.sh gitea
+
+repo-apt-tag:
+  <<: [*repo]
+  needs:
+    - gitea-amd64-tag
+    - gitea-arm64-tag
+    - test-install-tag
+    - test-update-tag
+  rules:
+    - if: $CI_COMMIT_TAG && $CI_PIPELINE_SOURCE != "trigger"
+
+
+repo-apt-trigger:
+  <<: [*repo]
+  needs:
+    - gitea-amd64-trigger
+    - gitea-arm64-trigger
+    - test-install-trigger
+    - test-update-trigger
+  rules:
+    - if: $CI_COMMIT_TAG && $CI_PIPELINE_SOURCE == "trigger"
 
 pages:
   cache:
     untracked: true
     paths:
-      - $CI_PROJECT_DIR/repo
-    key: reprepro
+      - $CI_PROJECT_DIR/.repo
+    key: repo
     policy: pull
   stage: pages
   image: ubuntu:focal
+  needs:
+    - job: repo-apt-tag
+      optional: true
+    - job: repo-apt-trigger
+      optional: true
   script:
     - mkdir $CI_PROJECT_DIR/public
-    - cp -r $CI_PROJECT_DIR/repo/gpg.key $CI_PROJECT_DIR/repo/dists $CI_PROJECT_DIR/repo/pool $CI_PROJECT_DIR/public/
+    - cp -rv
+        $CI_PROJECT_DIR/.repo/deb/gpg.key
+        $CI_PROJECT_DIR/.repo/deb/gitea/gitea/{dists,pool}
+        $CI_PROJECT_DIR/public/
   artifacts:
     paths:
       - $CI_PROJECT_DIR/public
     expire_in: 1 day
   only:
     - tags
+    - triggers

.gitlab-ci/app.ini

@@ -0,0 +1,68 @@
+APP_NAME = Gitea: Git with a cup of tea
+RUN_USER = gitea
+RUN_MODE = prod
+
+[oauth2]
+JWT_SECRET = ZNx_gU2J4h3LaVbsKnH8uF2w7N6zpz3OY9hutxY1KUM
+
+[security]
+INTERNAL_TOKEN = eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYmYiOjE1OTI2NTUwNjJ9.cd4bdwfg3nK0cDb_1abVCp54skt40CgSh5gN4ltgGBE
+INSTALL_LOCK   = true
+SECRET_KEY     = 8Az2FqMaPXLFaUUT6isOZpiXATm60Wv2SLjxPBtObOnHYfCsPDmIXLugLEEpM5Wl
+
+[database]
+DB_TYPE  = sqlite3
+HOST     = 127.0.0.1:5432
+NAME     = gitea
+USER     = gitea
+PASSWD   = 
+SSL_MODE = disable
+CHARSET  = utf8
+PATH     = /var/lib/gitea/data/gitea.db
+
+[repository]
+ROOT = /var/lib/gitea/gitea-repositories
+
+[server]
+SSH_DOMAIN       = localhost
+DOMAIN           = localhost
+HTTP_PORT        = 3000
+ROOT_URL         = http://localhost:3000/
+DISABLE_SSH      = false
+SSH_PORT         = 22
+LFS_START_SERVER = true
+LFS_CONTENT_PATH = /var/lib/gitea/data/lfs
+LFS_JWT_SECRET   = TYm7pYjpik1bAJeZUMCsJGedKDQHvOi3cZdu36xMotk
+OFFLINE_MODE     = false
+
+[mailer]
+ENABLED = false
+
+[service]
+REGISTER_EMAIL_CONFIRM            = false
+ENABLE_NOTIFY_MAIL                = false
+DISABLE_REGISTRATION              = false
+ALLOW_ONLY_EXTERNAL_REGISTRATION  = false
+ENABLE_CAPTCHA                    = false
+REQUIRE_SIGNIN_VIEW               = false
+DEFAULT_KEEP_EMAIL_PRIVATE        = false
+DEFAULT_ALLOW_CREATE_ORGANIZATION = true
+DEFAULT_ENABLE_TIMETRACKING       = true
+NO_REPLY_ADDRESS                  = noreply.localhost
+
+[picture]
+DISABLE_GRAVATAR        = false
+ENABLE_FEDERATED_AVATAR = true
+
+[openid]
+ENABLE_OPENID_SIGNIN = true
+ENABLE_OPENID_SIGNUP = true
+
+[session]
+PROVIDER = file
+
+[log]
+MODE      = file
+LEVEL     = info
+ROOT_PATH = /var/lib/gitea/log
+

.gitlab-ci/init

@@ -0,0 +1,84 @@
+#!/bin/sh
+### BEGIN INIT INFO
+# Provides:          gitea
+# Required-Start:    $syslog $network
+# Required-Stop:     $syslog
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: A self-hosted Git service written in Go.
+# Description:       A self-hosted Git service written in Go.
+### END INIT INFO
+
+# Do NOT "set -e"
+
+# PATH should only include /usr/* if it runs after the mountnfs.sh script
+PATH=/sbin:/usr/sbin:/bin:/usr/bin:/usr/local/bin
+DESC="Gitea - Git with a cup of tea"
+NAME=gitea
+SERVICEVERBOSE=yes
+PIDFILE=/run/$NAME.pid
+SCRIPTNAME=/etc/init.d/$NAME
+WORKINGDIR=/var/lib/$NAME
+DAEMON=/usr/bin/$NAME
+DAEMON_ARGS="web -c /etc/$NAME/app.ini"
+USER=gitea
+STOP_SCHEDULE="${STOP_SCHEDULE:-QUIT/5/TERM/1/KILL/5}"
+
+# Read configuration variable file if it is present
+[ -r /etc/default/$NAME ] && . /etc/default/$NAME
+
+# Exit if the package is not installed
+[ -x "$DAEMON" ] || exit 0
+
+do_start()
+{
+    GITEA_ENVS="USER=$USER GITEA_WORK_DIR=$WORKINGDIR HOME=/var/lib/$USER"
+    GITEA_EXEC="$DAEMON -- $DAEMON_ARGS"
+    sh -c "start-stop-daemon --start --quiet --pidfile $PIDFILE --make-pidfile \\
+        --background --chdir $WORKINGDIR --chuid $USER \\
+        --exec /bin/bash -- -c '/usr/bin/env $GITEA_ENVS $GITEA_EXEC'"
+}
+
+do_stop()
+{
+    start-stop-daemon --stop --quiet --retry=$STOP_SCHEDULE --pidfile $PIDFILE --name $NAME --oknodo
+    rm -f $PIDFILE
+}
+
+do_status()
+{
+    if [ -f $PIDFILE ]; then
+        if kill -0 $(cat "$PIDFILE") >/dev/null 2>&1; then
+            echo "$NAME is running, PID is $(cat $PIDFILE)"
+        else
+            echo "$NAME process is dead, but pidfile exists"
+        fi
+    else
+        echo "$NAME is not running"
+    fi
+}
+
+case "$1" in
+    start)
+        echo "Starting $DESC" "$NAME"
+        do_start
+        ;;
+    stop)
+        echo "Stopping $DESC" "$NAME"
+        do_stop
+        ;;
+    status)
+        do_status
+        ;;
+    restart)
+        echo "Restarting $DESC" "$NAME"
+        do_stop
+        do_start
+        ;;
+    *)
+        echo "Usage: $SCRIPTNAME {start|stop|status|restart}" >&2
+        exit 2
+        ;;
+esac
+
+exit 0

.gitlab-ci/test-install.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+
+. "${CI_PROJECT_DIR}/.gitlab-ci/test.sh"
+
+apt-get -y install "${CI_PROJECT_DIR}/gitea_${VERSION}+${PATCHLEVEL}_amd64.deb"
+start_gitea

.gitlab-ci/test-update.sh

@@ -0,0 +1,14 @@
+#!/bin/bash
+
+. "${CI_PROJECT_DIR}/.gitlab-ci/test.sh"
+
+curl -sL -o /etc/apt/trusted.gpg.d/morph027-gitea.asc https://packaging.gitlab.io/gitea/gpg.key
+echo "deb [arch=amd64] https://packaging.gitlab.io/gitea gitea main" > /etc/apt/sources.list.d/morph027-gitea.list
+apt-get update
+apt-get -y install gitea
+install -o gitea -g gitea -m 644 "/${CI_PROJECT_DIR}/.gitlab-ci/app.ini" /etc/gitea/app.ini
+start_gitea
+curl -s localhost:3000/api/v1/version | jq -e '.version'
+apt-get -y --allow-downgrades install "${CI_PROJECT_DIR}/gitea_${VERSION}+${PATCHLEVEL}_amd64.deb"
+restart_gitea
+curl -s localhost:3000/api/v1/version | jq -e '.version'

.gitlab-ci/test.sh

@@ -0,0 +1,29 @@
+#!/bin/bash
+
+set -e
+
+VERSION=$(echo "${CI_COMMIT_TAG#*v}" | cut -d'+' -f1)
+PATCHLEVEL=$(echo "${CI_COMMIT_TAG}" | cut -d'+' -f2)
+export VERSION PATCHLEVEL
+
+if [ ! -f /etc/init.d/gitea ]; then
+    cp -v "${CI_PROJECT_DIR}"/.gitlab-ci/init /etc/init.d/gitea
+fi
+
+start_gitea() {
+  /etc/init.d/gitea start
+  sleep 10
+  if ! /etc/init.d/gitea status | grep 'gitea is running'; then
+    cat /var/lib/gitea/log/gitea.log
+  fi
+}
+
+restart_gitea() {
+  /etc/init.d/gitea stop
+  start_gitea
+}
+
+sleep 5
+
+apt-get update
+apt-get -y install curl jq

.packaging/before-install.sh

@@ -6,5 +6,9 @@ getent passwd gitea >/dev/null 2>&1 || adduser \
   --gecos 'Gitea' \
   --group \
   --disabled-password \
-  --home /home/gitea \
+  --home /var/lib/gitea \
   gitea
+
+if [ ! -d /etc/gitea ]; then
+  install -d -o gitea -g gitea -m 770 /etc/gitea
+fi

.packaging/gitea.service

@@ -3,14 +3,15 @@ Description=Gitea (Git with a cup of tea)
 After=network.target
 
 [Service]
-RestartSec=2s
+RestartSec=30s
 Type=simple
 User=gitea
 Group=gitea
 WorkingDirectory=/var/lib/gitea/
 ExecStart=/usr/bin/gitea web -c /etc/gitea/app.ini
-Restart=always
-EnvironmentFile=/etc/default/gitea
+Restart=on-failure
+Environment="GITEA_WORK_DIR=/var/lib/gitea/"
+EnvironmentFile=-/etc/default/gitea
 
 [Install]
-WantedBy=multi-user.targe
+WantedBy=multi-user.target

.repo/gitea/conf/distributions

@@ -0,0 +1,8 @@
+Origin: morph027
+Suite: gitea
+Label: gitea
+Codename: gitea
+Components: main
+Architectures: amd64 arm64
+SignWith: ##SIGNING_KEY_ID##
+Limit: 0

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2022 packaging
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -0,0 +1,44 @@
+# [Gitea](https://gitea.io) Debian/Ubuntu Packages
+
+Packages are built using [fpm](https://github.com/jordansissel/fpm/) by pushing released tags and repo is created using [Gitlabs static pages](https://morph027.gitlab.io/blog/repo-hosting-using-gitlab-pages/).
+
+Minimum install and update tests are in place to prevent upload of broken packages.
+
+### Add repo signing key to apt
+
+```
+sudo curl -sL -o /etc/apt/trusted.gpg.d/morph027-gitea.asc https://packaging.gitlab.io/gitea/gpg.key
+```
+
+### Add repo to apt
+
+```
+echo "deb https://packaging.gitlab.io/gitea gitea main" | sudo tee /etc/apt/sources.list.d/morph027-gitea.list
+```
+
+### Install
+
+```
+sudo apt-get update
+sudo apt-get install gitea morph027-keyring
+```
+
+### Start
+
+```
+systemctl enable --now gitea
+```
+
+## Extras
+
+### unattended-upgrades
+
+To enable automatic upgrades using `unattended-upgrades`, just add the following config file:
+
+```bash
+cat > /etc/apt/apt.conf.d/50gitea <<EOF
+Unattended-Upgrade::Allowed-Origins {
+	"morph027:gitea";
+};
+EOF
+```

repo/conf/distributions

@@ -1,4 +0,0 @@
-Codename: gitea
-Components: main
-Architectures: amd64
-SignWith: ##SIGNING_KEY_ID##