Add github action workflows

.github/workflows/ci.yml

@@ -0,0 +1,15 @@
+name: CI
+
+on: [push, pull_request]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    container:
+      image: mcr.microsoft.com/cbl-mariner/base/core:2.0
+    steps:
+      - name: Install dependencies
+        run: unset HOME; tdnf install -y build-essential git tar rpm-build ca-certificates
+      - uses: actions/checkout@v2
+      - name: build
+        run: make rpm

.github/workflows/release.yml

@@ -0,0 +1,23 @@
+name: release
+
+on: push
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    container:
+      image: mcr.microsoft.com/cbl-mariner/base/core:2.0
+    permissions:
+      contents: write
+    steps:
+      - name: Install dependencies
+        run: unset HOME; tdnf install -y build-essential git tar rpm-build ca-certificates
+      - uses: actions/checkout@v2
+      - name: build
+        run: make rpm
+      - name: Release
+        uses: softprops/action-gh-release@v1
+        if: startsWith(github.ref, 'refs/tags/')
+        with:
+          files: |
+            rpmbuild/RPMS/x86_64/*.rpm

.gitignore

@@ -159,3 +159,4 @@ cython_debug/
 #  and can be added to the global gitignore or merged into this file.  For a more nuclear
 #  option (not recommended) you can uncomment the following to ignore the entire idea folder.
 #.idea/
+rpmbuild/

azure_auth.py

@@ -85,7 +85,8 @@ def get_token():
             stdout=subprocess.PIPE,
         )
     except subprocess.CalledProcessError as e:
-        # Try again if we are running as sudo in case our user has permission but the sudo user doesn't.
+        # Upon an error if running as sudo try again without runuser in case our user
+        # has permission on the storage account but the sudo user doesn't.
         if "SUDO_USER" in os.environ:
             output = subprocess.run(
                 AZ_COMMAND,