0d3941eb91
All checks were successful
Build Talos CM5 Image / build (push) Successful in 3m6s
- Rewrite check-upstream.sh to parse RPi kernel version from patch file
- Add auto-update.sh for automated version bumps with patch smoke test
- Rewrite check-updates.yaml as daily auto-build with issue fallback
- Update build.yaml release body to show Talos + kernel versions from tag
- Fix overlay dirty tag: remove --dirty from SBCOVERLAY_TAG git describe
(the sed rewrite of pkg.yaml is intentional, not an accidental change)
Tag strategy: v{TALOS}-k{KERNEL}-{BUILD} (e.g. v1.12.3-k6.12.47-1)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
108 lines
4.3 KiB
Bash
Executable File
108 lines
4.3 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Auto-update upstream versions, verify patches, and generate a release tag
|
|
#
|
|
# Expects environment variables from check-upstream.sh:
|
|
# TALOS_UPDATE, RPI_UPDATE, LATEST_TALOS, LATEST_RPI_TAG
|
|
#
|
|
# Outputs (for GitHub Actions):
|
|
# patch_failed=true — if patches fail to apply (caller should create issue)
|
|
# new_tag=<tag> — the computed release tag (e.g. v1.12.3-k6.12.47-1)
|
|
#
|
|
# Usage:
|
|
# TALOS_UPDATE=true LATEST_TALOS=v1.13.0 ./scripts/auto-update.sh >> "$GITHUB_OUTPUT"
|
|
|
|
set -euo pipefail
|
|
|
|
TALOS_UPDATE=${TALOS_UPDATE:-false}
|
|
RPI_UPDATE=${RPI_UPDATE:-false}
|
|
LATEST_TALOS=${LATEST_TALOS:-}
|
|
LATEST_RPI_TAG=${LATEST_RPI_TAG:-}
|
|
|
|
MAKEFILE="Makefile"
|
|
PATCH_FILE="patches/siderolabs/pkgs/0001-Patched-for-Raspberry-Pi-5.patch"
|
|
|
|
# Helper: extract kernel semver (e.g. 6.12.47) from the RPi repo Makefile
|
|
get_kernel_version() {
|
|
local tag="$1"
|
|
curl -sf "https://raw.githubusercontent.com/raspberrypi/linux/${tag}/Makefile" \
|
|
| awk '
|
|
/^VERSION/ { version=$3 }
|
|
/^PATCHLEVEL/ { patchlevel=$3 }
|
|
/^SUBLEVEL/ { sublevel=$3 }
|
|
END { print version "." patchlevel "." sublevel }
|
|
'
|
|
}
|
|
|
|
# ── RPi kernel update ───────────────────────────────────────────────
|
|
if [ "$RPI_UPDATE" = "true" ] && [ -n "$LATEST_RPI_TAG" ]; then
|
|
echo "Updating RPi kernel to $LATEST_RPI_TAG ..." >&2
|
|
|
|
# Download tarball and compute checksums
|
|
TARBALL_URL="https://github.com/raspberrypi/linux/archive/refs/tags/${LATEST_RPI_TAG}.tar.gz"
|
|
TMP=$(mktemp)
|
|
curl -sL "$TARBALL_URL" -o "$TMP"
|
|
NEW_SHA256=$(shasum -a 256 "$TMP" | awk '{print $1}')
|
|
NEW_SHA512=$(shasum -a 512 "$TMP" | awk '{print $1}')
|
|
rm -f "$TMP"
|
|
|
|
echo " SHA256: $NEW_SHA256" >&2
|
|
echo " SHA512: $NEW_SHA512" >&2
|
|
|
|
# Get actual kernel version for the config header
|
|
KERNEL_VERSION=$(get_kernel_version "$LATEST_RPI_TAG")
|
|
echo " Kernel version: $KERNEL_VERSION" >&2
|
|
|
|
# Update patch file
|
|
sed -i "s/+ linux_version: .*/+ linux_version: ${LATEST_RPI_TAG}/" "$PATCH_FILE"
|
|
sed -i "s/+ linux_sha256: .*/+ linux_sha256: ${NEW_SHA256}/" "$PATCH_FILE"
|
|
sed -i "s/+ linux_sha512: .*/+ linux_sha512: ${NEW_SHA512}/" "$PATCH_FILE"
|
|
sed -i "s|+# Linux/arm64 .* Kernel Configuration|+# Linux/arm64 ${KERNEL_VERSION} Kernel Configuration|" "$PATCH_FILE"
|
|
fi
|
|
|
|
# ── Talos update ────────────────────────────────────────────────────
|
|
if [ "$TALOS_UPDATE" = "true" ] && [ -n "$LATEST_TALOS" ]; then
|
|
echo "Updating Talos to $LATEST_TALOS ..." >&2
|
|
|
|
# Update TALOS_VERSION in Makefile
|
|
sed -i "s/^TALOS_VERSION = .*/TALOS_VERSION = ${LATEST_TALOS}/" "$MAKEFILE"
|
|
|
|
# Derive matching PKG_VERSION (same major.minor as Talos)
|
|
PKG_MINOR=$(echo "$LATEST_TALOS" | sed -E 's/^(v[0-9]+\.[0-9]+)\..*/\1/')
|
|
LATEST_PKG=$(curl -sf "https://api.github.com/repos/siderolabs/pkgs/tags?per_page=20" \
|
|
| jq -r "[.[] | select(.name | startswith(\"${PKG_MINOR}\"))][0].name")
|
|
|
|
if [ -n "$LATEST_PKG" ] && [ "$LATEST_PKG" != "null" ]; then
|
|
echo " Updating PKG_VERSION to $LATEST_PKG" >&2
|
|
sed -i "s/^PKG_VERSION = .*/PKG_VERSION = ${LATEST_PKG}/" "$MAKEFILE"
|
|
else
|
|
echo " WARNING: No matching pkgs tag for $PKG_MINOR — keeping current PKG_VERSION" >&2
|
|
fi
|
|
fi
|
|
|
|
# ── Smoke test — verify patches apply ───────────────────────────────
|
|
echo "Running patch smoke test ..." >&2
|
|
if ! gmake checkouts patches; then
|
|
echo "Patches failed to apply!" >&2
|
|
gmake checkouts-clean 2>/dev/null || true
|
|
echo "patch_failed=true"
|
|
exit 0
|
|
fi
|
|
gmake checkouts-clean
|
|
|
|
# ── Generate tag ────────────────────────────────────────────────────
|
|
TALOS_VER=$(grep '^TALOS_VERSION' "$MAKEFILE" | awk '{print $NF}')
|
|
RPI_TAG=$(grep '+ linux_version:' "$PATCH_FILE" | awk '{print $NF}')
|
|
KERNEL_VER=$(get_kernel_version "$RPI_TAG")
|
|
|
|
# Find next build number for this component combination
|
|
TAG_PREFIX="${TALOS_VER}-k${KERNEL_VER}"
|
|
LAST_BUILD=$(git tag -l "${TAG_PREFIX}-*" \
|
|
| sed "s|${TAG_PREFIX}-||" \
|
|
| sort -n \
|
|
| tail -1)
|
|
NEXT_BUILD=$(( ${LAST_BUILD:-0} + 1 ))
|
|
NEW_TAG="${TAG_PREFIX}-${NEXT_BUILD}"
|
|
|
|
echo "Generated tag: $NEW_TAG" >&2
|
|
echo "new_tag=$NEW_TAG"
|