Debian ARM packaging

[jinnatar]

I did this

• Bought a shiny arm64 computer running Debian bookworm (pi5)

I expected the following

• Install kanidm-unixd on it

This happened instead

• Alas we do not package debs for arm64.
• While a cargo install might succeed, even the pi5 is still memory constrained in lower end models, and then one misses out on systemd units, pam automation etc.

Kanidm version details

1.3.3 & HEAD

Any other comments

• Logging this for posterity and discoverability, I'm already in the codebase with a machete trying to make this happen.
• It'll likely include as much refactoring of the crossbuild & deb toolchain as I can stomach.
• Draft PRs incoming once I get to a point where I think it works.

[yaleman]

I'd be very excited for this, I could never get it reliably working in GHA due to ... cross-compile nightmares 😢

[jinnatar]

Actually keeping this open for a bit longer since this became a multi-PR, multi-repo kind of affair. While first blocks are in, it'll be a bit longer before the repo is up.

[jinnatar]

The launch is out, yay!

There are however remaining issues, not yay:

• The pipeline correctly creates the GPG public key as an .asc file with ASCII armoring, BUT kanidm_ppa.list refers to .gpg. That's just an omission on my part: Even if gpg public key is published as .asc, the list file refers to it with .gpg jinnatar/actions-aptly-repo#1
• The book chapter on kanidm_ppa is outdated and it's steps will no longer work, it requires a bit of a rewrite: docs: Update kanidm_ppa instructions for new repo logic #3117
• An unexpected logic issue with enabling nightly builds: Allow debglob to not match any targets when extending from an import #1  jinnatar/actions-aptly-repo#2

Then there's the bits that were already known to be needed as post-care:

• Enabling import & extend so that old stable packages stay in the repo, should work fine now.
• Enabling nightly cron rebuilds so that nightly is actually nightly, but not needlessly rebuilding stable every time.
• Those are both covered by feat: Enable import & extend, nightly schedule kanidm_ppa_automation#5 once it's done.

These should all be fixable fairly quickly.