## Automated Installation Medium Release
Arch Summit 2023
David Runge
### Overview * Motivation * Releng * Further
## Motivation π¦Ύ
### Current release process * Artifacts are built, signed and uploaded manually using [archiso-manager](https://github.com/pierres/archiso-manager) * Releases are created manually for https://archlinux.org/download using [archweb](https://github.com/archlinux/archweb/) * iPXE artifacts can only be signed by one person * bus factor == 1
### Archiso πΏ * [archiso](https://gitlab.archlinux.org/archlinux/archiso) can build all required artifacts now * the releng profile is used for the monthly installation medium
### Archweb πΈοΈ * iPXE payloads and signatures have to be added as static artifacts to the website's sources * creation of releases is manual
## **Re**lease **Eng**ineering π§
## Automation * [releng](https://gitlab.archlinux.org/archlinux/releng) automatically builds unsigned artifacts on a monthly basis and creates releases for them * iPXE artifacts are signed (currently using a dummy key in CI) * metadata is provided for each release using a JSON payload * the entire process is *documented*
## Promoting releases * [arch-release-promotion](https://gitlab.archlinux.org/archlinux/arch-release-promotion) can be used to promote (i.e. *authenticate*) a release on our GitLab
## Creating releasees * [arch-release-promotion](https://gitlab.archlinux.org/archlinux/arch-release-promotion) can be used to synchronize *promoted* releases from our GitLab to a local directory structure
## Further π
## Actually releasing π¬ * fix CI!
## Actually signing ποΈ * the code signing key used for signing iPXE artifacts needs to be added to releng's CI setup * individual releng releases need to be promoted using `arch-release-promotion`
## Actually syncing π * `arch-release-promotion` needs to be deployed to sync releng releases on repos.archlinux.org
## Actually releasing π * extend archweb to automatically consume metadata payloads of current releases on repos.archlinux.org
## Help π * testing and fixing `releng` * testing and fixing `arch-release-promotion` * extending archweb
## Contact π±
gitlab.archlinux.org/archlinux/releng
dvzrv@archlinux.org
#archlinux-projects
on
Libera Chat
or
arch-projects
mailing list