Files
Vitor PamplonaandClaude Opus 5.5 94c7d3b745 feat(release): publish the Flatpak to Orchard from Docker, macOS included
RELEASE_OPS.md's Orchard loop needs ostree and flatpak to unpack the
release bundles, and neither exists on macOS, where releases are cut.
v1.19.0 went out from a Debian container instead; this keeps that setup.

desktopApp/packaging/orchard/docker/:
- Dockerfile builds orchard-publish from Orchard's v0.1.2 tag, checked
  against its commit, next to ostree and flatpak.
- publish-orchard.sh (host, bash 3.2 is enough) reads the version from
  libs.versions.toml, downloads both linux .flatpak assets into
  build/orchard/, and runs `dry` (throwaway key, nothing leaves) or
  `live`. The nsec comes from ORCHARD_NSEC or ~/.orchard-nsec and the
  ghcr login from gh; both reach the container as environment
  variables, never as arguments.
- publish-in-container.sh unpacks each bundle and publishes both arches.
  `live` first checks the key's npub against orchard.txt and refuses to
  push or send anything otherwise.

Also gitignores desktopApp/packaging/orchard/tree/, which the listing
config called gitignored but wasn't, so the manual Linux loop left a
~340 MB untracked tree in the repo.

Checked on macOS: a dry run from a fresh image build gives byte-identical
artifacts to the published 1.19.0 ones (693bb6f7..., 7a7ad479...), and
`live` with a throwaway key refuses with exit 3 before building.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-14 11:02:25 -04:00

3 lines
93 B
Plaintext

# Extracted from the release bundle by the publish steps (RELEASE_OPS.md § Orchard).
/tree/