leviathan
9593d90385
Breaking change. Tool name, binary name, function/type names,
constant names, env vars, header guards, file paths, and GitHub
repo URL all rebrand IAMROOT → SKELETONKEY.
Changes:
- All "IAMROOT" → "SKELETONKEY" (constants, env vars, enum
values, docs, comments)
- All "iamroot" → "skeletonkey" (functions, types, paths, CLI)
- iamroot.c → skeletonkey.c
- modules/*/iamroot_modules.{c,h} → modules/*/skeletonkey_modules.{c,h}
- tools/iamroot-fleet-scan.sh → tools/skeletonkey-fleet-scan.sh
- Binary "iamroot" → "skeletonkey"
- GitHub URL KaraZajac/IAMROOT → KaraZajac/SKELETONKEY
- .gitignore now expects build output named "skeletonkey"
- /tmp/iamroot-* tmpfiles → /tmp/skeletonkey-*
- Env vars IAMROOT_MODPROBE_PATH etc. → SKELETONKEY_*
New ASCII skeleton-key banner (horizontal key icon + ANSI Shadow
SKELETONKEY block letters) replaces the IAMROOT banner in
skeletonkey.c and README.md.
VERSION: 0.3.1 → 0.4.0 (breaking).
Build clean on Debian 6.12.86. `skeletonkey --version` → 0.4.0.
All 24 modules still register; no functional code changes — pure
rename + banner refresh.
121 lines
3.8 KiB
YAML
121 lines
3.8 KiB
YAML
name: release
|
|
|
|
# Triggers on semver tag push (v0.1.0, v0.1.1, etc.). Builds release
|
|
# artifacts for x86_64 and arm64, then publishes them on a GitHub
|
|
# Release matching the tag.
|
|
#
|
|
# Maintainer flow:
|
|
# git tag v0.1.0
|
|
# git push origin v0.1.0
|
|
# → CI builds + publishes release with skeletonkey-x86_64 + skeletonkey-arm64
|
|
|
|
on:
|
|
push:
|
|
tags: ['v*.*.*']
|
|
workflow_dispatch: # allow manual re-runs
|
|
|
|
permissions:
|
|
contents: write # needed by softprops/action-gh-release
|
|
|
|
jobs:
|
|
build:
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
include:
|
|
- target: x86_64
|
|
cc: gcc
|
|
apt: build-essential
|
|
- target: arm64
|
|
cc: aarch64-linux-gnu-gcc
|
|
apt: build-essential gcc-aarch64-linux-gnu libc6-dev-arm64-cross linux-libc-dev-arm64-cross
|
|
name: build (${{ matrix.target }})
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: install build deps
|
|
run: |
|
|
sudo apt-get update -qq
|
|
sudo apt-get install -y --no-install-recommends ${{ matrix.apt }} linux-libc-dev
|
|
|
|
- name: build
|
|
env:
|
|
CC: ${{ matrix.cc }}
|
|
run: |
|
|
make
|
|
file skeletonkey
|
|
ls -la skeletonkey
|
|
|
|
- name: rename + checksum
|
|
run: |
|
|
mv skeletonkey skeletonkey-${{ matrix.target }}
|
|
sha256sum skeletonkey-${{ matrix.target }} > skeletonkey-${{ matrix.target }}.sha256
|
|
|
|
- uses: actions/upload-artifact@v4
|
|
with:
|
|
name: skeletonkey-${{ matrix.target }}
|
|
path: |
|
|
skeletonkey-${{ matrix.target }}
|
|
skeletonkey-${{ matrix.target }}.sha256
|
|
|
|
release:
|
|
needs: build
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- uses: actions/download-artifact@v4
|
|
with:
|
|
path: dist
|
|
|
|
- name: flatten artifacts
|
|
run: |
|
|
find dist -type f -exec mv {} . \;
|
|
ls -la skeletonkey-*
|
|
|
|
- name: collect release notes
|
|
id: notes
|
|
run: |
|
|
tag="${GITHUB_REF#refs/tags/}"
|
|
echo "tag=$tag" >> "$GITHUB_OUTPUT"
|
|
# Pull the latest entry from CVES.md / ROADMAP.md for the body
|
|
{
|
|
echo "## SKELETONKEY $tag"
|
|
echo
|
|
echo "Pre-built binaries for x86_64 and arm64. Checksums alongside."
|
|
echo
|
|
echo "### Install"
|
|
echo
|
|
echo '```bash'
|
|
echo "curl -sSLfo /tmp/skeletonkey https://github.com/${GITHUB_REPOSITORY}/releases/download/${tag}/skeletonkey-\$(uname -m | sed s/aarch64/arm64/)"
|
|
echo "chmod +x /tmp/skeletonkey && sudo mv /tmp/skeletonkey /usr/local/bin/skeletonkey"
|
|
echo "skeletonkey --version"
|
|
echo '```'
|
|
echo
|
|
echo "Or one-shot via the install script:"
|
|
echo
|
|
echo '```bash'
|
|
echo "curl -sSL https://github.com/${GITHUB_REPOSITORY}/releases/download/${tag}/install.sh | sh"
|
|
echo '```'
|
|
echo
|
|
echo "### What's in this release"
|
|
echo
|
|
echo "See [\`CVES.md\`](https://github.com/${GITHUB_REPOSITORY}/blob/${tag}/CVES.md) for the curated CVE inventory."
|
|
echo "See [\`ROADMAP.md\`](https://github.com/${GITHUB_REPOSITORY}/blob/${tag}/ROADMAP.md) for phase progress."
|
|
} > release-notes.md
|
|
|
|
- name: publish release
|
|
uses: softprops/action-gh-release@v2
|
|
with:
|
|
tag_name: ${{ steps.notes.outputs.tag }}
|
|
name: SKELETONKEY ${{ steps.notes.outputs.tag }}
|
|
body_path: release-notes.md
|
|
files: |
|
|
skeletonkey-x86_64
|
|
skeletonkey-x86_64.sha256
|
|
skeletonkey-arm64
|
|
skeletonkey-arm64.sha256
|
|
install.sh
|
|
fail_on_unmatched_files: false # install.sh may not exist at first tag
|