main 5041353

#1 Updater: fetch releases from ermite first, GitHub as fallback

state
open
opened
bnema ·
updated

Context

dumber releases move to ermite (git.bnema.dev). The self-updater in internal/infrastructure/updater/github.go only reads GitHub:

  • https://api.github.com/repos/bnema/dumber/releases/latest
  • https://github.com/bnema/dumber/releases/latest/download/dumber_%s_%s.tar.gz
  • https://github.com/bnema/dumber/releases/latest/download/checksums.txt
  • validateDownloadURL only allows the host github.com

Until this ships, the release workflow also publishes each release on the GitHub mirror, so installed builds keep updating.

Change

  • Check ermite first: https://git.bnema.dev/-/github/api/repos/bnema/dumber/releases/latest (GitHub-compatible JSON, on one line). Fall back to GitHub on a network error, a non-2xx status, bad JSON or an empty tag_name.
  • Download from the source that answered, pinned to the tag: https://git.bnema.dev/dumber/releases/download/<tag>/dumber_linux_x86_64.tar.gz.
  • Fetch checksums.txt from the same source and tag as the archive.
  • Allow only https with the hosts git.bnema.dev and github.com, and no userinfo.
  • Report a transient failure only when every source failed transiently.

Done when

  • A build with the new updater moves from one release to the next through ermite.
  • With ermite down, it still updates from GitHub.
  • Once most installs run that build, the GitHub copy of releases can stop: remove the GitHub run of .github/workflows/release.yml (add if: github.server_url != 'https://github.com').

Comments1

bnema

Reference patch from a first attempt (ermite first, GitHub fallback, tests): kept locally at dumber/.worktrees/updater-ermite-first.patch.

Keyboard shortcuts

Single-key shortcuts are on. ctrl k and esc work whatever this says.

ctrl k :
go to a section, branch, tag, file or repository
?
this list
j k
move the row cursor down / up
enter
open the row under the cursor; on Files, a directory opens or closes in place
↑ ↓ ← → home end
in the file tree (focus on a row): previous / next row, close / open a directory or go to its parent / first entry, first / last row. They never open a file
l h
on Files: open a directory or a file / close a directory or go up to its parent, then to the parent page. Elsewhere: into the side panel (on a merge request, its files) / back to the content; there j k move between its controls
g g G
first / last row
/
filter the list; on Files, find a file anywhere in the repository (esc clears, enter opens the best match)
b
switch branch or tag
g s g f g c g b g m g i g r g a
tabs: summary, files, commits, branches & tags, merge requests, issues, releases, actions (when available)
g h
home
w
wide mode: use the whole width of the screen, or not (remembered)
y
copy a permalink pinned to the commit
d u x
diff: split / unified / collapse or expand all
e E
diff: the whole file in view / every file, with the lines the hunks hide
n
merge request: next note in the diff
esc
close a dialog, leave a field

Branches 8

Tags 42

↑↓ moveenter openesc close