Skip to content

ci: upload signed artifacts tarball to S3 alongside .pkg#1769

Open
ayush-panta wants to merge 1 commit into
mainfrom
tarball-upload
Open

ci: upload signed artifacts tarball to S3 alongside .pkg#1769
ayush-panta wants to merge 1 commit into
mainfrom
tarball-upload

Conversation

@ayush-panta

@ayush-panta ayush-panta commented Jun 25, 2026

Copy link
Copy Markdown
Contributor

Description of changes:

After step [6/12] (merge-back-signed-executables), this commit:

  1. Tars the signed _output/ directory and uploads it to the same S3 bucket as the .pkg installer. This makes pre-extracted artifacts available for toolbox bundling without needing to extract from .pkg on the ToD worker.

  2. Adds tarball entries to the release definition JSON that gets uploaded to the trigger bucket. This ensures the tarballs flow through the ReleaseTriggerLambda into FinchReleaseAutomationConfig/latest.json, making them visible to bundle-tool.

The .pkg build and upload (steps 7-12) is unchanged. Both artifacts coexist in S3.

Naming: finch-${VERSION}-${ARCH}.tar.gz (e.g., finch-v1.17.1-aarch64.tar.gz)

Testing done:

  • Ran the exact tar and aws s3 cp commands locally against finch-installer-private
  • Downloaded the uploaded tarball, extracted, ran finch vm init + finch run from the extracted artifacts
  • Confirmed tarball size is ~490MB (consistent with .pkg)
  • Uploaded a test release definition with tarball entries to the trigger bucket; Lambda parsed it successfully (no-op'd due to existing version)
  • shellcheck passes
  • I've reviewed the guidance in CONTRIBUTING.md

License Acceptance

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

After code signing, tar the _output directory and upload to the same
S3 bucket used for .pkg installers. Also add tarball entries to the
release definition trigger file so they flow through the Lambda into
FinchReleaseAutomationConfig/latest.json for bundle-tool consumption.

Signed-off-by: ayush-panta <[email protected]>
@ayush-panta ayush-panta requested a review from a team as a code owner June 26, 2026 00:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant