mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-08 03:38:23 +00:00
kevinveenbirkenbachandClaude Opus 4.7
9a578952c3
Replace 8 bash env modules with a single Python generator
(cli.meta.env) that materialises env/static.env + runtime context
into a gitignored .env. Each variable lives in its own handler
under utils/env/handlers/; defaults carry inline one-line `# ...`
comments.
Rename to the INFINITO_* schema:
- workflow inputs: APPS, SERVICES_DISABLED, CMD, DEBUG, WHITELIST,
BUNDLES, FULL_CYCLE, VARIANT, RUN_FLAGS, LIMIT_HOST, PARALLEL
- inventory: INVENTORY_DIR / INVENTORY_FILE / HOST_VARS_FILE,
PW_FILE -> INVENTORY_PASSWORD_FILE
- venv: VENV_BASE / VENV_FALLBACK / VENV_NAME
- new SPOT defaults: COMPILE_SILENCE, CONTAINER_NO_CA,
WAIT_HEALTH_TIMEOUT_S, PACKAGE_CACHE_FRONTEND_INIT_IMAGE,
promoted IMAGE_TAG from GHA-only to general passthrough
compose.yml hardening:
- inline \${VAR:-default} removed; strict \${VAR:?...} everywhere
- new integration lint blocks regressions
Tooling:
- scripts/install/all.sh owns the stamp-file install logic
(Makefile target delegates)
- scripts/meta/env/load.sh is the single shell entry point;
8 bash modules deleted
- new shell lint: no INFINITO_* defaults outside env/static.env
Tests:
- 93 new unit tests for utils/env/{builder,parser,runtime,writer}
- restructure tests/lint into repository/ (file-content rules) vs
filesystem/{shell,python,env}/ (filesystem-shape rules)
- drift + smoke integration tests against the generator
Docs:
- variables.md is now a pointer; per-variable docs live next to
the key in env/static.env / env/ci.env
- compose.yml.md drops the Default column
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
80 lines
2.2 KiB
YAML
80 lines
2.2 KiB
YAML
name: "🚀 Release: Highest Missing Version"
|
|
|
|
on:
|
|
schedule:
|
|
- cron: "0 0 * * *"
|
|
workflow_dispatch:
|
|
|
|
concurrency:
|
|
group: infinito-release
|
|
cancel-in-progress: false
|
|
|
|
permissions:
|
|
contents: read
|
|
packages: read
|
|
actions: write
|
|
|
|
env:
|
|
REGISTRY: ghcr.io
|
|
|
|
jobs:
|
|
check-and-trigger:
|
|
name: 🔎 Backfill highest missing release tag
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Checkout repository (with tags)
|
|
uses: actions/checkout@v6
|
|
with:
|
|
fetch-depth: 0
|
|
fetch-tags: true
|
|
|
|
- name: Resolve image metadata
|
|
id: vars
|
|
shell: bash
|
|
run: |
|
|
set -euo pipefail
|
|
owner="$(scripts/meta/resolve/repository/owner.sh)"
|
|
repo_prefix="$(scripts/meta/resolve/repository/name.sh)"
|
|
distros="$(scripts/meta/resolve/distros.sh)"
|
|
{
|
|
echo "owner=${owner}"
|
|
echo "repo_prefix=${repo_prefix}"
|
|
echo "distros=${distros}"
|
|
} >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Login to GHCR (for manifest checks)
|
|
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
|
|
with:
|
|
registry: ${{ env.REGISTRY }}
|
|
username: ${{ github.actor }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: Determine highest version tag with missing release image
|
|
id: pick
|
|
shell: bash
|
|
env:
|
|
OWNER: ${{ steps.vars.outputs.owner }}
|
|
REPO_PREFIX: ${{ steps.vars.outputs.repo_prefix }}
|
|
INFINITO_DISTROS: ${{ steps.vars.outputs.distros }}
|
|
run: |
|
|
set -euo pipefail
|
|
tag="$(scripts/meta/resolve/missing/highest_release_tag.sh)"
|
|
echo "tag=${tag}" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Ensure GitHub CLI is available
|
|
shell: bash
|
|
run: |
|
|
set -euo pipefail
|
|
if command -v gh >/dev/null 2>&1; then
|
|
exit 0
|
|
fi
|
|
./scripts/install/apt.sh gh
|
|
|
|
- name: Trigger release workflow for missing tag
|
|
if: ${{ steps.pick.outputs.tag != '' }}
|
|
env:
|
|
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
TAG: ${{ steps.pick.outputs.tag }}
|
|
run: gh workflow run release-version.yml -f tag="${TAG}"
|