feat(desktop): build a Linux .deb package on release#3634
Merged
Conversation
The desktop release dropped Debian/Ubuntu packaging in the v2 rewrite — Linux only shipped a bare-binary tar.gz (discussion #3627). Add a .deb built with goreleaser/nfpm in desktop-build.sh's linux branch. - desktop/build/linux/nfpm.yaml + reasonix.desktop describe the package: binary to /usr/bin, .desktop entry, icon to /usr/share/pixmaps, and libgtk-3-0 + libwebkit2gtk-4.1-0 runtime deps apt resolves on install. - The .deb is a human-download artifact only (like the macOS .dmg); the Linux updater channel stays the tar.gz, so cmd/sign's manifest skips .deb files. A test locks the linux-amd64 key to the tarball. - release-desktop.yml installs nfpm (pinned v2.46.3) on the Linux runner. The existing sign / upload / release / R2-mirror steps already glob dist/*, so the .deb is signed, attached to the GitHub release, and mirrored with no further workflow changes.
# Conflicts: # desktop/.gitignore
SuMuxi66
pushed a commit
to SuMuxi66/DeepSeek-Reasonix
that referenced
this pull request
Jun 10, 2026
The desktop release dropped Debian/Ubuntu packaging in the v2 rewrite — Linux only shipped a bare-binary tar.gz (discussion esengine#3627). Add a .deb built with goreleaser/nfpm in desktop-build.sh's linux branch. - desktop/build/linux/nfpm.yaml + reasonix.desktop describe the package: binary to /usr/bin, .desktop entry, icon to /usr/share/pixmaps, and libgtk-3-0 + libwebkit2gtk-4.1-0 runtime deps apt resolves on install. - The .deb is a human-download artifact only (like the macOS .dmg); the Linux updater channel stays the tar.gz, so cmd/sign's manifest skips .deb files. A test locks the linux-amd64 key to the tarball. - release-desktop.yml installs nfpm (pinned v2.46.3) on the Linux runner. The existing sign / upload / release / R2-mirror steps already glob dist/*, so the .deb is signed, attached to the GitHub release, and mirrored with no further workflow changes. Co-authored-by: reasonix <reasonix@deepseek.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
The desktop release dropped Debian/Ubuntu packaging in the v2 rewrite — Linux only ships a bare-binary
tar.gz(discussion #3627). This adds a.debbuilt with goreleaser/nfpm indesktop-build.sh's linux branch.How
desktop/build/linux/nfpm.yaml+reasonix.desktopdescribe the package: binary →/usr/bin/reasonix-desktop, a.desktoplauncher entry, icon →/usr/share/pixmaps, andlibgtk-3-0+libwebkit2gtk-4.1-0runtime deps thataptresolves on install (the real value-add over the bare tarball)..debis treated like the macOS.dmg: the Linux updater channel stays thetar.gz, socmd/sign's manifest explicitly skips.debfiles (it would otherwise shadow thelinux-amd64key). A test lockslinux-amd64to the tarball.release-desktop.ymlinstallsnfpm(pinnedv2.46.3) on the Linux runner.dist/*, so the.debis minisign-signed, attached to the release, and mirrored to R2 with no further workflow changes.Verification
go test ./cmd/sign/✅ (incl. the new deb-skip assertion)gofmt -l/bash -n scripts/desktop-build.sh✅nfpm packagelocally against a stub binary and unpacked the.deb: files land at/usr/bin,/usr/share/applications,/usr/share/pixmaps; control metadata (archamd64,Depends,Homepage, version) all correct ✅Closes the request in #3627.