ilkermanap
5865198240
Proxmox VE 9.2 made arm64 official — same code base, repositories and release
lifecycle as x86-64 — and the pve-no-subscription repository carries proxmox-ve,
pve-manager, proxmox-default-kernel and pve-qemu-kvm for it. The build was still
hard-wired to amd64 in four places, which is now fixed:
* firmware is chosen from the target architecture (AAVMF for arm64, OVMF for
amd64) and padded to 64 MiB as QEMU's arm64 virt machine requires. Upstream
packer-maas keys this on the host architecture, which only works when host
and target match.
* host_is_arm is derived from uname rather than hard-coded false, so KVM is
used exactly when host and target architectures agree
* the release body builds its MAAS upload command from MAAS_ARCH, PVE_VERSION
and IMAGE_NAME instead of repeating amd64
* install-deps.sh installs qemu-system-arm and AAVMF under WITH_ARM64=1,
off by default since they are useless on an amd64-only builder
verify-image.sh asserted no kernel matching *-amd64, which would have passed
silently on an arm64 image carrying a Debian arm64 kernel. It now rejects any
/boot/vmlinuz-* not ending in -pve, which holds for both architectures. Checking
that with synthetic file lists caught a first attempt that returned "pass" for an
image containing both a PVE and a Debian kernel, so the expression is now a single
pipeline verified against GNU grep on the build host — the macOS grep this was
first tried on disagrees, and only the Linux behaviour matters here.
No arm64 image has been built and none deployed. The README gains an arm64
section saying so plainly, listing the two real obstacles — TCG emulation on an
x86_64 builder, and having no arm64 hardware to deploy to — and the entry stays
under "Not verified".
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
79 lines
2.5 KiB
Bash
Executable File
79 lines
2.5 KiB
Bash
Executable File
#!/bin/bash
|
|
# Copyright (C) 2026 Ilker Manap
|
|
# SPDX-License-Identifier: AGPL-3.0-or-later
|
|
#
|
|
# Creates a Gitea release and uploads the image, its checksum and the
|
|
# corresponding-source offer.
|
|
#
|
|
# publish-release.sh <tag> <version> <dist-dir>
|
|
#
|
|
# Requires GITEA_API and GITEA_TOKEN in the environment.
|
|
set -euo pipefail
|
|
|
|
TAG="${1:?tag required}"
|
|
VERSION="${2:?version required}"
|
|
DIST="${3:?dist directory required}"
|
|
: "${GITEA_API:?GITEA_API required}"
|
|
: "${GITEA_TOKEN:?GITEA_TOKEN required}"
|
|
|
|
REPO_URL="${GITHUB_SERVER_URL:-}/${GITHUB_REPOSITORY:-}"
|
|
RUN="${GITHUB_RUN_NUMBER:-manual}"
|
|
SHA="${GITHUB_SHA:-}"
|
|
IMAGE=$(basename "$(ls "$DIST"/maas-image-*.tar.gz)")
|
|
MAAS_ARCH=$(make -s print-var VAR=MAAS_ARCH)
|
|
PVE_MAJOR=$(make -s print-var VAR=PVE_VERSION)
|
|
IMAGE_NAME=$(make -s print-var VAR=IMAGE_NAME)
|
|
|
|
BODY=$(cat <<BODYEOF
|
|
Unofficial build of a MAAS-deployable Proxmox VE image.
|
|
**Not affiliated with or endorsed by Proxmox Server Solutions GmbH.**
|
|
|
|
- pve-manager: \`${VERSION}\`
|
|
- Built: $(date -u +%Y-%m-%dT%H:%M:%SZ), run ${RUN}
|
|
- Verify: \`sha256sum -c ${IMAGE}.sha256\`
|
|
|
|
Upload to MAAS:
|
|
|
|
\`\`\`bash
|
|
maas \$PROFILE boot-resources create name='custom/${IMAGE_NAME}' \\
|
|
title='Proxmox VE ${PVE_MAJOR}' architecture='${MAAS_ARCH}' \\
|
|
filetype='tgz' content@=${IMAGE}
|
|
\`\`\`
|
|
|
|
The curtin preseed from this repository must also be installed on the MAAS region
|
|
controller, otherwise deployment fails — see the README.
|
|
|
|
\`SOURCES.md\` in this release carries the corresponding-source offer required by
|
|
the GPL/AGPL licences of the packages inside the image.
|
|
BODYEOF
|
|
)
|
|
|
|
PAYLOAD=$(TAG="$TAG" VERSION="$VERSION" BODY="$BODY" SHA="$SHA" python3 -c '
|
|
import json, os
|
|
print(json.dumps({
|
|
"tag_name": os.environ["TAG"],
|
|
"name": "Proxmox VE %s image" % os.environ["VERSION"],
|
|
"body": os.environ["BODY"],
|
|
"draft": False,
|
|
"prerelease": False,
|
|
"target_commitish": os.environ["SHA"],
|
|
}))')
|
|
|
|
ID=$(curl -fsS -X POST \
|
|
-H "Authorization: token ${GITEA_TOKEN}" \
|
|
-H 'Content-Type: application/json' \
|
|
-d "$PAYLOAD" "${GITEA_API}/releases" \
|
|
| python3 -c 'import json,sys; print(json.load(sys.stdin)["id"])')
|
|
echo "release id: ${ID}"
|
|
|
|
for f in "$DIST"/*; do
|
|
[ -f "$f" ] || continue
|
|
echo "uploading $(basename "$f") ($(du -h "$f" | cut -f1))"
|
|
curl -fsS -X POST \
|
|
-H "Authorization: token ${GITEA_TOKEN}" \
|
|
-F "attachment=@${f}" \
|
|
"${GITEA_API}/releases/${ID}/assets?name=$(basename "$f")" >/dev/null
|
|
done
|
|
|
|
echo "published: ${REPO_URL}/releases/tag/${TAG}"
|