chage: revorked README

.gitea/workflows/build.yaml

@@ -0,0 +1,203 @@
+name: Zabbix APK Builder
+
+on:
+  # Trigger on pushes to main/test branch into the zabbix-apk-builder directory
+  push:
+    branches: [ main, test ]
+    paths: [ 'zabbix-apk-builder/**' ]
+
+  # Scheduled runs at 06:00 UTC daily
+  schedule:
+    - cron: '0 6 * * *'
+
+jobs:
+  check-version:
+    runs-on: ubuntu-latest
+    # Skip the execution if the commit author is the bot itself to prevent loops
+    if: ${{ gitea.event.head_commit.author.name != 'Gitea Action' }}
+    outputs:
+      should_build: ${{ steps.version-check.outputs.should_build }}
+      latest_version: ${{ steps.version-check.outputs.latest_version }}
+      current_version: ${{ steps.version-check.outputs.current_version }}
+      is_push_trigger: ${{ steps.version-check.outputs.is_push_trigger }}
+    
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+    - name: Check for new Zabbix version
+      id: version-check
+      run: |
+        set -euo pipefail
+        
+        # Remove jq installation
+        # apt-get update && apt-get install -y jq
+        
+        # Detect trigger type
+        IS_PUSH="${{ gitea.event_name == 'push' }}"
+        echo "is_push_trigger=${IS_PUSH}" >> "${GITHUB_OUTPUT}"
+        
+        # Get versions
+        CURRENT_VERSION=$(grep '^pkgver=' zabbix-apk-builder/APKBUILD | cut -d'=' -f2)
+        LATEST_VERSION=$(curl -s "https://git.zabbix.com/rest/api/1.0/projects/ZBX/repos/zabbix/tags?limit=100" | \
+          grep -o '"displayId":"[^"]*"' | cut -d'"' -f4 | \
+          grep -E '^[0-9]+\.[0-9]+\.[0-9]+$' | grep -v 'rc\|beta\|alpha' | \
+          sort -V | tail -1)
+        
+        echo "current_version=${CURRENT_VERSION}" >> "${GITHUB_OUTPUT}"
+        echo "latest_version=${LATEST_VERSION}" >> "${GITHUB_OUTPUT}"
+        
+        # Always build on push, build on schedule if versions differ
+        if [[ "${IS_PUSH}" == "true" || "${CURRENT_VERSION}" != "${LATEST_VERSION}" ]]; then
+          echo "should_build=true" >> "${GITHUB_OUTPUT}"
+        else
+          echo "should_build=false" >> "${GITHUB_OUTPUT}"
+        fi
+
+  update-version:
+    needs: check-version
+    # Only update version during scheduled runs when new version is available
+    if: ${{ needs.check-version.outputs.should_build == 'true' && needs.check-version.outputs.is_push_trigger == 'false' && needs.check-version.outputs.current_version != needs.check-version.outputs.latest_version }}
+    runs-on: ubuntu-latest
+    
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+      with:
+        token: ${{ secrets.ACCESS_TOKEN }}
+
+    - name: Update APKBUILD version
+      run: |
+        set -euo pipefail
+        
+        LATEST_VERSION="${{ needs.check-version.outputs.latest_version }}"
+        CURRENT_VERSION="${{ needs.check-version.outputs.current_version }}"
+        
+        echo "Updating APKBUILD from ${CURRENT_VERSION} to ${LATEST_VERSION}"
+        
+        # Update pkgver
+        sed -i "s/^pkgver=.*/pkgver=${LATEST_VERSION}/" zabbix-apk-builder/APKBUILD
+        
+        # Reset pkgrel to 0 for new version
+        sed -i "s/^pkgrel=.*/pkgrel=0/" zabbix-apk-builder/APKBUILD
+        
+        # Clear checksums (will be regenerated during build)
+        sed -i 's/^sha512sums=.*/sha512sums="SKIP"/' zabbix-apk-builder/APKBUILD
+        
+        # Commit changes with [ci skip] to prevent recursive triggers
+        git config --local user.email "action@gitea.com"
+        git config --local user.name "Gitea Action"
+        git add zabbix-apk-builder/APKBUILD
+        git commit -m "AUTO: Update Zabbix to version ${LATEST_VERSION} [ci skip]" || exit 0
+        git push
+
+  build-packages:
+    # Build packages after version update (for scheduled runs) or immediately (for push runs)
+    needs: [check-version, update-version]
+    # Run if should_build=true AND either update-version ran successfully OR it was skipped due to push trigger
+    if: ${{ needs.check-version.outputs.should_build == 'true' && (success() || needs.check-version.outputs.is_push_trigger == 'true') }}
+    runs-on: ubuntu-latest
+    
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+      with:
+        # Use token to ensure we get the latest version if it was updated
+        token: ${{ secrets.ACCESS_TOKEN }}
+        ref: ${{ gitea.ref }}
+
+    - name: Verify build environment
+      run: |
+        set -euo pipefail
+        
+        echo "=== Build Environment ==="
+        echo "Trigger type: ${{ gitea.event_name }}"
+        echo "Current branch: $(git branch --show-current)"
+        echo "APKBUILD version: $(grep '^pkgver=' zabbix-apk-builder/APKBUILD | cut -d'=' -f2)"
+        echo "Target version: ${{ needs.check-version.outputs.latest_version }}"
+
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v3
+
+    - name: Build Zabbix packages
+      env:
+        CI_RUN_ID: ${{ gitea.run_id }}
+      run: |
+        set -euo pipefail
+        
+        cd zabbix-apk-builder
+        chmod +x build.sh
+        ./build.sh
+
+    - name: Verify and list built packages
+      run: |
+        set -euo pipefail
+    
+        cd zabbix-apk-builder
+        
+        # Verify packages exist somewhere
+        PACKAGE_COUNT=$(find packages -name "*.apk" | wc -l)
+        
+        if [[ $PACKAGE_COUNT -eq 0 ]]; then
+          echo "ERROR: No packages found"
+          find packages -type f 2>/dev/null || echo "packages directory is empty"
+          exit 1
+        fi
+        
+        echo "Found $PACKAGE_COUNT packages:"
+        find packages -name "*.apk" -exec ls -lh {} \;
+
+    - name: Upload packages as artifacts
+      uses: actions/upload-artifact@v3
+      with:
+        name: zabbix-apk-packages-${{ gitea.run_number }}
+        path: zabbix-apk-builder/packages/**/*.apk
+        retention-days: 30
+        if-no-files-found: error
+
+  deploy-test:
+    needs: [check-version, build-packages]
+    if: ${{ needs.check-version.outputs.should_build == 'true' && contains(gitea.ref, 'test') }}
+    runs-on: ubuntu-latest
+    
+    steps:
+    - name: Download packages
+      uses: actions/download-artifact@v3
+      with:
+        name: zabbix-apk-packages-${{ gitea.run_number }}
+        path: packages/
+
+    - name: Test deployment in Alpine container
+      run: |
+        set -euo pipefail
+        
+        # Find packages
+        AGENT_PKG=$(find packages -name "zabbix-agent-*.apk" | head -1)
+        PROXY_PKG=$(find packages -name "zabbix-proxy-*.apk" | head -1)
+        
+        # Test function
+        test_package() {
+          local pkg="$1"
+          local binary="$2"
+          
+          if [[ -f "$pkg" ]]; then
+            echo "Testing $(basename "$pkg")..."
+            CONTAINER_ID=$(docker run -d alpine:latest sleep 30)
+            docker cp "$pkg" "$CONTAINER_ID:/$(basename "$pkg")"
+            if docker exec "$CONTAINER_ID" sh -c "
+              apk add --allow-untrusted /$(basename "$pkg") >/dev/null 2>&1
+              which $binary >/dev/null 2>&1
+              $binary --version >/dev/null 2>&1
+            "; then
+              echo "SUCCESS: $(basename "$pkg") test passed"
+            else
+              echo "FAIL: $(basename "$pkg") test failed"
+            fi
+            docker rm -f "$CONTAINER_ID" >/dev/null
+          else
+            echo "ERROR: Package not found: $pkg"
+          fi
+        }
+        
+        test_package "$AGENT_PKG" "zabbix_agentd"
+        test_package "$PROXY_PKG" "zabbix_proxy"

zabbix-apk-builder/.gitignore

@@ -9,6 +9,7 @@ src/
 
 # Backup files
 *.backup
+*.bak
 *~
 
 # OS files

zabbix-apk-builder/APKBUILD

@@ -1,12 +1,12 @@
-# Contributor: Maks <maks@onet.com>
-# Maintainer: Maks <maks@onet.com>
+# Contributor: Maksym Buz <maksym.buz@zabbix.com>
+# Maintainer: Maksym Buz <maksym.buz@zabbix.com>
 pkgname=zabbix
 pkgver=7.4.2
 pkgrel=0
 pkgdesc="Enterprise-class open source distributed monitoring solution"
 url="https://www.zabbix.com/"
 arch="all"
-license="AGPL-3.0-or-later"
+license="AGPL-3.0-only"
 options="!check"  # No test suite available
 makedepends="
 	autoconf
@@ -138,11 +138,11 @@ proxy() {
 	install -dm755 "$subpkgdir"/var/log/zabbix
 	install -dm755 "$subpkgdir"/var/run/zabbix
 }
-
+# --- TEST --- 
 sha512sums="
-3bf1f915c2cd5a59f1dd3afc10dd1a6e596840e576013839d6eae057cd327893f87cc5cec1d32b6a8ca8bd00735c0070327084aae01dc8d3399202f5a3e365c1  zabbix-7.4.2.tar.gz
 SKIP
 SKIP
 SKIP
 SKIP
-"
+SKIP
+"

zabbix-apk-builder/Dockerfile

@@ -36,5 +36,32 @@ COPY --chown=builder:builder . /home/builder/zabbix/
 
 WORKDIR /home/builder/zabbix
 
+# Create build script that just builds packages
+USER root
+RUN cat > /usr/local/bin/build-packages.sh << 'EOF'
+#!/bin/sh
+set -e
+
+echo "Building packages as builder user..."
+sudo -u builder sh -c "
+    cd /home/builder/zabbix
+    echo 'Generating checksums...'
+    abuild checksum
+    echo 'Building packages...'
+    abuild -r
+"
+
+echo "Build complete! Packages built in /home/builder/packages:"
+find /home/builder/packages -name "*.apk" -exec ls -la {} \;
+
+echo "Setting proper permissions on packages..."
+chmod 644 /home/builder/packages/*.apk 2>/dev/null || true
+
+echo "Final package list (excluding APKINDEX):"
+find /home/builder/packages -name "*.apk" -exec ls -la {} \;
+EOF
+
+RUN chmod +x /usr/local/bin/build-packages.sh
+
 # Set build command
-CMD ["abuild", "-r"]
+CMD ["/usr/local/bin/build-packages.sh"]

zabbix-apk-builder/README.md

@@ -1,76 +1,139 @@
 # Zabbix APK Builder
 
-Automated build system for creating Zabbix monitoring packages for Alpine Linux using Docker.
+Automated Alpine Linux package builder for Zabbix Agent and Proxy with CI/CD pipeline integration.
 
-## What it does
+## Features
 
-This project builds separate Alpine Linux packages for:
-- **zabbix-agent** - Monitoring agent for data collection
-- **zabbix-proxy** - Network monitoring proxy daemon
-- **zabbix** - Meta-package that installs both components
-
-Each package includes proper OpenRC init scripts and user management for production deployment.
+- 🔄 **Automatic Version Detection**: Monitors Zabbix releases using Bitbucket API
+- 🚀 **CI/CD Pipeline**: Full automation from version detection to package deployment
+- 📦 **Multi-package Support**: Builds agent and proxy packages
+- 🧪 **Automated Testing**: Tests package installation in Alpine containers
+- 📊 **Gitea Integration**: Publishes packages to Gitea repository
 
 ## Quick Start
 
+### Prerequisites
+
+- Docker installed
+- Gitea repository with Actions enabled
+
+### Manual Build
+
 ```bash
-# Build packages
+# Clone the repository
+git clone <your-gitea-repo>
+cd zabbix-apk-builder
+
+# Build packages locally
+chmod +x build.sh
 ./build.sh
 
-# Install on Alpine Linux
-apk add --allow-untrusted packages/zabbix-agent-*.apk
-apk add --allow-untrusted packages/zabbix-proxy-*.apk
-
-# Enable and start services
-rc-update add zabbix-agent default
-rc-service zabbix-agent start
+# Check built packages
+ls -la packages/builder/x86_64/
 ```
 
+## Package Information
+
+### Built Packages
+
+1. **zabbix-agent** - Zabbix Agent only
+2. **zabbix-proxy** - Zabbix Proxy
+3. **zabbix** - Meta package
+
+## CI/CD Pipeline
+
+### Automatic Triggers
+
+- **Daily**: Checks for new Zabbix versions at 6 AM UTC
+- **Push**: Builds when code changes in main/test branches
+
+### Version Detection
+
+Uses Zabbix Bitbucket API:
+```bash
+https://git.zabbix.com/rest/api/1.0/projects/ZBX/repos/zabbix/tags
+```
+
+### Pipeline Jobs
+
+1. **check-version**: Detects new Zabbix releases
+2. **update-version**: Updates APKBUILD automatically  
+3. **build-packages**: Builds APK packages
+4. **publish-to-gitea**: Deploys to your repository
+5. **deploy-test**: Tests installation (test branch)
+
 ## Configuration
 
-### Change Zabbix Version
-Edit `APKBUILD`:
+### GitHub Secrets Required
+
 ```bash
-pkgver=7.4.2  # Change to desired version
+GITEA_SSH_KEY  # SSH private key for Gitea access
 ```
 
-### Change Architecture
-Edit `APKBUILD`:
-```bash
-arch="all"           # All architectures
-arch="x86_64"        # 64-bit Intel/AMD only
-arch="x86_64 aarch64"  # 64-bit Intel/AMD and ARM64
+### File Structure
+
+```
+zabbix-git/
+└── zabbix-apk-builder/
+    ├── .gitea/
+    │   └── workflows/
+    │       └── build.yaml         # Main CI/CD pipeline
+    ├── APKBUILD                   # Alpine package definition
+    ├── Dockerfile                 # Build environment container
+    ├── README.md                  # This file
+    ├── build.sh                   # Local build script
+    ├── packages/                  # Generated packages (gitignored)
+    ├── zabbix-agent.confd         # Agent configuration
+    ├── zabbix-agent.initd         # Agent init script
+    ├── zabbix-agent.pre-install   # Agent pre-install script
+    ├── zabbix-proxy.confd         # Proxy configuration  
+    ├── zabbix-proxy.initd         # Proxy init script
+    └── zabbix-proxy.pre-install   # Proxy pre-install script
 ```
 
-### Update Checksums
-After changing the version:
+## Development
+
+### Local Testing
+
 ```bash
-# Manual approach
-wget https://cdn.zabbix.com/zabbix/sources/stable/X.Y/zabbix-X.Y.Z.tar.gz
-sha512sum zabbix-X.Y.Z.tar.gz  # Update sha512sums in APKBUILD
-# Or let the build system handle it
-./build.sh  # Will download and verify against official SHA256
+# Test build locally
+./build.sh
+
+# Test in Docker
+docker run --rm -it \
+  -v $(pwd)/packages:/packages \
+  alpine:3.18 sh -c "
+    apk add --allow-untrusted /packages/zabbix-agent-*.apk
+    zabbix_agentd --version
+  "
 ```
-sha512 is used per Alpine recommendation:
-https://wiki.alpinelinux.org/wiki/APKBUILD_Reference
-`New packages should use only sha512sums. Support for md5sums and sha1sums was dropped.`
 
-## Build Process
+### Branch Strategy
 
-1. **Docker Build**: Creates Alpine Linux build environment 
-2. **Download Sources**: `abuild checksum` downloads tarball and generates SHA512
-2. **Package Build**: Compiles and packages using Alpine's `abuild` system
-3. **Output**: Generated APK files in `packages/` directory
+- **main**: Production releases, merge only
+- **test**: Testing and validation
 
-## Requirements
+### Making Changes
 
-- Docker
-- Internet connection (for source download and verification)
+1. Create feature branch from `main`
+2. Test changes thoroughly
+3. Validate CI
+4. Merge to `main`
 
-## Files
 
-- `APKBUILD` - Alpine package definition
-- `build.sh` - Build automation script
-- `Dockerfile` - Build environment container
-- `zabbix-agent.*` - Agent service configuration files
-- `zabbix-proxy.*` - Proxy service configuration files
+### Version Detection
+
+```bash
+# Test API manually
+curl -s "https://git.zabbix.com/rest/api/1.0/projects/ZBX/repos/zabbix/tags?limit=100" | \
+  jq -r '.values[].displayId' | \
+  grep -E '^[0-9]+\.[0-9]+\.[0-9]+
+ | \
+  sort -V | tail -1
+```
+
+## License
+
+This project follows the same license as Zabbix (AGPLv3).
+
+---

zabbix-apk-builder/build.sh

@@ -3,52 +3,57 @@
 set -e
 
 # Configuration
-PROJECT_DIR="$(pwd)"
+PROJECT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 IMAGE_NAME="zabbix-apk-builder"
-CONTAINER_NAME="zabbix-build-$$"
+# Use a unique ID from the CI environment if available, otherwise fall back to PID
+UNIQUE_ID="${CI_RUN_ID:-$$}"
+CONTAINER_NAME="zabbix-build-${UNIQUE_ID}"
 OUTPUT_DIR="$PROJECT_DIR/packages"
 
 echo "=== Zabbix APK Builder ==="
 echo "Project directory: $PROJECT_DIR"
 echo "Output directory: $OUTPUT_DIR"
 
-# Clean up any existing containers
+# Clean up function
 cleanup() {
-    echo "Cleaning up..."
-    docker rm -f "$CONTAINER_NAME" 2>/dev/null || true
+    echo "Cleaning up container..."
+    docker rm -f "$CONTAINER_NAME" >/dev/null 2>&1 || true
 }
 
 trap cleanup EXIT
 
-# Create output directory
+# Clean and create output directory
+rm -rf "$OUTPUT_DIR"
 mkdir -p "$OUTPUT_DIR"
 
 # Build Docker image
 echo "Building Docker image..."
 docker build -t "$IMAGE_NAME" "$PROJECT_DIR"
 
-# Run the build in container
-echo "Running package build..."
-docker run --rm \
-    --name "$CONTAINER_NAME" \
-    -v "$OUTPUT_DIR:/output" \
-    "$IMAGE_NAME" \
-    sh -c "
-        set -e
-        echo 'Starting package build...'
-        
-        # Generate checksums for APKBUILD
-        echo 'Generating checksums for APKBUILD...'
-        abuild checksum
-        
-        # Build packages
-        abuild -r
-        
-        # Copy packages to output
-        echo 'Copying packages to output directory...'
-        find /home/builder/packages -name '*.apk' -exec cp {} /output/ \;
-    "
-echo "Build completed successfully!"
-echo "To install packages:"
-echo "  apk add --allow-untrusted $OUTPUT_DIR/zabbix-agent-*.apk"
-echo "  apk add --allow-untrusted $OUTPUT_DIR/zabbix-proxy-*.apk"
+# Run the build in the container
+echo "Running package build in container..."
+docker run --name "$CONTAINER_NAME" "$IMAGE_NAME"
+
+# Copy packages from container to host
+echo "Copying packages from container..."
+if docker cp "$CONTAINER_NAME:/home/builder/packages/." "$OUTPUT_DIR/"; then
+    echo "✅ Packages copied successfully"
+    
+    # Remove APKINDEX files (we only want the .apk packages)
+    echo "Removing repository index files..."
+    find "$OUTPUT_DIR" -name "APKINDEX.tar.gz" -delete 2>/dev/null || true
+    
+    # Fix permissions on copied files
+    echo "Fixing file permissions..."
+    find "$OUTPUT_DIR" -name "*.apk" -exec chmod 644 {} \; 2>/dev/null || true
+    
+    echo "Build completed successfully!"
+    echo "Packages are in $OUTPUT_DIR:"
+    find "$OUTPUT_DIR" -name "*.apk" -exec ls -la {} \;
+else
+    echo "❌ Failed to copy packages"
+    echo "Checking what's in the container..."
+    docker exec "$CONTAINER_NAME" find /home/builder -name "*.apk" -exec ls -la {} \; 2>/dev/null || true
+    docker exec "$CONTAINER_NAME" ls -la /home/builder/packages/ 2>/dev/null || true
+    exit 1
+fi