kami
118ac9fbcb
Not my work. These nine files sat uncommitted in the shared checkout while another session worked on them, and the UI redesign that follows rewrites web/src/main.tsx and web/src/style.css. Committing first means that work is recoverable rather than overwritten. Contents, by inspection rather than by authorship: whitespace normalisation and edits across main.tsx, 568 added lines of style.css, client and client test changes, the orchestra-user line in build.sh, and docs updates to AGENTS.md, AUDIT.md, DEPLOYMENT.md and the env example. Committed at the operator's explicit instruction.
29 lines
1.4 KiB
Bash
Executable File
29 lines
1.4 KiB
Bash
Executable File
#!/bin/sh
|
|
# Build the coordinator, worker, and operator-account helper from one commit,
|
|
# with one stamp, so a
|
|
# burn-in run can never pair a new coordinator with an old worker. Both
|
|
# binaries then report the same revision at /v1/admin/diagnostics and in the
|
|
# worker's registration, which is what makes deployed identity evidence rather
|
|
# than assumption.
|
|
#
|
|
# The build runs in a throwaway git worktree of HEAD, not in the checkout. This
|
|
# repository is shared: another session may have uncommitted Go changes in it,
|
|
# and those must neither be compiled into a stamped binary nor block a deploy.
|
|
#
|
|
# Usage: deploy/build.sh [outdir] [revision]
|
|
set -eu
|
|
repo=$(cd "$(dirname "$0")/.." && pwd)
|
|
out=${1:-$repo/build}
|
|
rev=$(git -C "$repo" rev-parse "${2:-HEAD}")
|
|
built=$(git -C "$repo" show -s --format=%cI "$rev")
|
|
tree=$(mktemp -d)
|
|
cleanup() { git -C "$repo" worktree remove --force "$tree" >/dev/null 2>&1 || rm -rf "$tree"; }
|
|
trap cleanup EXIT
|
|
git -C "$repo" worktree add --detach --quiet "$tree" "$rev"
|
|
flags="-s -w -X orchestra/internal/buildinfo.Revision=$rev -X orchestra/internal/buildinfo.Time=$built -X orchestra/internal/buildinfo.Dirty=false"
|
|
mkdir -p "$out"
|
|
(cd "$tree" && go build -trimpath -ldflags="$flags" -o "$out/orchestra" ./cmd/orchestra)
|
|
(cd "$tree" && go build -trimpath -ldflags="$flags" -o "$out/orchestra-worker" ./cmd/orchestra-worker)
|
|
(cd "$tree" && go build -trimpath -ldflags="-s -w" -o "$out/orchestra-user" ./cmd/orchestra-user)
|
|
echo "$rev"
|