UltradesuandClaude Opus 4.8
d1ab993dd2
Release / tsunagi-linux-aarch64 (push) Failing after 3m12s
Release / tsunagi-linux-x86_64 (push) Failing after 2m21s
Release / tsunagi-macos-aarch64 (push) Canceled after 0s
Release / tsunagi-windows-x86_64 (push) Canceled after 0s
Release / Publish release (push) Canceled after 0s
Pushing a `v*` tag now builds the agent for every supported target and attaches the archives to a GitHub release. Modelled on the furumi release workflow (a build matrix, then a publish job that runs `gh release create`), adapted to this project's two differences: it needs system integration (capabilities/polkit on Linux, elevation+wintun on Windows, a root daemon on macOS), and its users run varied distros, not just Ubuntu. Linux is built as a fully **static musl** binary with cargo-zigbuild, so one artifact runs on Arch, Alpine, NixOS and old-glibc systems alike, and can be repackaged into whatever a distro prefers later. musl has no prebuilt aws-lc-sys bindings, so the Linux jobs install cmake + libclang (bindgen) and zig (the cross C compiler zigbuild drives). macOS (aarch64) and Windows (x86_64) build natively; Linux covers x86_64 and aarch64. Targets: x86_64/aarch64 linux-musl, aarch64 macOS, x86_64 Windows. Each archive carries the binary, the top-level README, and the platform's install notes plus integration files: - dist/linux/: a static-friendly README, a systemd unit (runs as root, so no capability grant or polkit rule is needed; a commented non-root variant is included), and an install.sh that drops the binary and the unit or prints the setcap/polkit alternative. - dist/windows/: install notes covering wintun.dll and Run-as-administrator. - dist/macos/: the existing LaunchDaemon plist and notes, now also shipped in the archive. Not exercised yet: the workflow only runs on a real tag push, and the aws-lc-sys-under-musl build has not been run locally in this session (no zig toolchain here). YAML and install.sh syntax are validated. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
58 lines
1.6 KiB
Bash
Executable File
58 lines
1.6 KiB
Bash
Executable File
#!/usr/bin/env sh
|
|
# Installs the tsunagi binary and, where systemd is present, a root service.
|
|
# Run it as root (it writes under /usr/local and /etc):
|
|
#
|
|
# sudo ./install.sh
|
|
#
|
|
# PREFIX overrides the install prefix (default /usr/local).
|
|
set -eu
|
|
|
|
PREFIX="${PREFIX:-/usr/local}"
|
|
here="$(cd "$(dirname "$0")" && pwd)"
|
|
|
|
if [ "$(id -u)" -ne 0 ]; then
|
|
echo "This installer writes to ${PREFIX}/bin and /etc; re-run it as root (sudo)." >&2
|
|
exit 1
|
|
fi
|
|
|
|
echo "Installing tsunagi to ${PREFIX}/bin"
|
|
install -d "${PREFIX}/bin"
|
|
install -m 0755 "${here}/tsunagi" "${PREFIX}/bin/tsunagi"
|
|
|
|
if command -v systemctl >/dev/null 2>&1; then
|
|
echo "Installing the systemd service (runs the agent as root)"
|
|
install -m 0644 "${here}/tsunagi.service" /etc/systemd/system/tsunagi.service
|
|
systemctl daemon-reload
|
|
cat <<EOF
|
|
|
|
Done. Start the agent with:
|
|
|
|
sudo systemctl enable --now tsunagi
|
|
|
|
Control it as root, so the client shares the agent's state directory:
|
|
|
|
sudo tsunagi status
|
|
sudo tsunagi join <network-name> <tsn1…secret>
|
|
EOF
|
|
else
|
|
cat <<EOF
|
|
|
|
Installed the binary; no systemd found, so no service was set up. Either:
|
|
|
|
* run it directly as root:
|
|
|
|
sudo tsunagi up
|
|
|
|
* or grant the capability and run it as your own user (no root at runtime):
|
|
|
|
sudo setcap cap_net_admin,cap_net_bind_service+p ${PREFIX}/bin/tsunagi
|
|
tsunagi up
|
|
|
|
For the local DNS resolver as a non-root user, run \`tsunagi dns\` once; it
|
|
prints the polkit rule that lets your user configure systemd-resolved.
|
|
|
|
* or skip the interface entirely with \`tsunagi up --no-tun\`: tunnels still
|
|
form, they just do not reach the operating system.
|
|
EOF
|
|
fi
|