release workflow: publish deb packages to SOS (#544)

# Description

We publish Debian packages to SOS for users to install through the `apt`
package manager.

.github/workflows/release.yml

@@ -35,6 +35,8 @@ jobs:
           release_github_token: ${{ secrets.RELEASE_GITHUB_TOKEN }}
           registry_username: ${{ secrets.DOCKERHUB_USERNAME }}
           registry_password: ${{ secrets.DOCKERHUB_TOKEN }}
+          exoscale_api_key: ${{ secrets.SOS_PKG_BUCKET_KEY }}
+          exoscale_api_secret: ${{ secrets.SOS_PKG_BUCKET_SECRET }}
 
       - run: echo "version_tag=$(make get-version-tag)" >> $GITHUB_OUTPUT
         id: get-version-tag

.gitignore

@@ -8,3 +8,4 @@ contrib
 *.snap
 *.xdelta3
 go.work
+.aptlydata

.goreleaser.yml

@@ -57,6 +57,7 @@ nfpms:
     maintainer: Exoscale Support <[email protected]>
     description: Manage easily your Exoscale infrastructure from the command-line.
     license: Apache 2.0
+    id: nfpms
     formats:
       - deb
       - rpm
@@ -125,3 +126,12 @@ scoops:
       owner: exoscale
       name: cli
       branch: master
+
+publishers:
+  - name: aptly
+    env:
+      - AWS_ACCESS_KEY_ID={{ .Env.EXOSCALE_API_KEY }}
+      - AWS_SECRET_ACCESS_KEY={{ .Env.EXOSCALE_API_SECRET }}
+    ids:
+      - nfpms
+    cmd: ./go.mk/scripts/publish-deb-artifact-to-sos.sh {{ .ArtifactPath }} exoscale-packages deb/cli 10

CHANGELOG.md

@@ -2,6 +2,7 @@
 
 ## UNRELEASED
 
+- release workflow: publish deb packages to SOS #544
 - aur releases: skip pgp check #547
 
 ## 1.74.0