ci: add S3 upload and changelog to gather-info release

- Upload versioned binary + checksum to DigitalOcean Spaces (public/)
- Maintain a latest pointer for easy customer installs
- Auto-generate changelog from git log between tags
- Release body includes direct download URLs and commit summary

Requires DO_SPACES_ACCESS_KEY_ID and DO_SPACES_SECRET_ACCESS_KEY secrets.

Author: Banshee1221

.github/workflows/release-gather-info.yml

@@ -18,6 +18,12 @@ defaults:
 jobs:
   release:
     runs-on: ubuntu-latest
+    env:
+      DO_SPACES_ENDPOINT: https://sfo3.digitaloceanspaces.com
+      DO_SPACES_BUCKET: hyperstack-support-tools
+      DO_SPACES_CDN: https://hyperstack-support-tools.sfo3.digitaloceanspaces.com
+      AWS_DEFAULT_REGION: us-east-1
+
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -27,10 +33,22 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          # Path relative to repo root (working-directory does not apply to uses steps)
           go-version-file: customers/vm-troubleshooting/go.mod
           cache-dependency-path: customers/vm-troubleshooting/go.sum
 
+      - name: Derive release metadata
+        id: meta
+        run: |
+          VERSION="${GITHUB_REF_NAME#gather-info/}"
+          BASENAME="gather-info-${VERSION}-linux-amd64"
+          CHECKSUM_NAME="${BASENAME}.sha256"
+          LATEST_NAME="gather-info-latest-linux-amd64"
+
+          echo "version=${VERSION}"       >> "$GITHUB_OUTPUT"
+          echo "basename=${BASENAME}"     >> "$GITHUB_OUTPUT"
+          echo "checksum=${CHECKSUM_NAME}" >> "$GITHUB_OUTPUT"
+          echo "latest=${LATEST_NAME}"    >> "$GITHUB_OUTPUT"
+
       - name: Download modules
         run: go mod download
 
@@ -46,61 +64,125 @@ jobs:
           GOOS: linux
           GOARCH: amd64
         run: |
-          # Strip the "gather-info/" prefix to get the clean version string
-          VERSION="${GITHUB_REF_NAME#gather-info/}"
+          VERSION="${{ steps.meta.outputs.version }}"
           COMMIT="${{ github.sha }}"
           DATE="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
+          OUTPUT="${{ steps.meta.outputs.basename }}"
+
           go build -trimpath \
             -ldflags="-s -w \
               -X github.com/NexGenCloud/vm-diagnostics/internal/config.Version=${VERSION} \
               -X github.com/NexGenCloud/vm-diagnostics/internal/config.Commit=${COMMIT:0:7} \
               -X github.com/NexGenCloud/vm-diagnostics/internal/config.BuildDate=${DATE}" \
-            -o gather-info \
+            -o "${OUTPUT}" \
             ./cmd/gather-info
 
       - name: Generate checksum
-        run: sha256sum gather-info > gather-info.sha256
+        run: sha256sum "${{ steps.meta.outputs.basename }}" > "${{ steps.meta.outputs.checksum }}"
 
       - name: Verify binary
         run: |
-          ./gather-info --version
-          file gather-info | grep -q "statically linked"
+          ./"${{ steps.meta.outputs.basename }}" --version
+          file "${{ steps.meta.outputs.basename }}" | grep -q "statically linked"
+
+      - name: Generate changelog
+        id: changelog
+        working-directory: .
+        run: |
+          # Find the previous gather-info tag (excluding the current one)
+          CURRENT_TAG="${GITHUB_REF_NAME}"
+          PREV_TAG=$(git tag --list 'gather-info/v*' --sort=-version:refname \
+            | grep -v "^${CURRENT_TAG}$" | head -1)
+
+          if [ -n "${PREV_TAG}" ]; then
+            echo "Generating changelog: ${PREV_TAG}..${CURRENT_TAG}"
+            CHANGES=$(git log --oneline --no-merges "${PREV_TAG}..${CURRENT_TAG}" \
+              -- customers/vm-troubleshooting/)
+          else
+            echo "No previous tag found — using all commits"
+            CHANGES=$(git log --oneline --no-merges "${CURRENT_TAG}" \
+              -- customers/vm-troubleshooting/)
+          fi
+
+          # Write to file (multi-line output is tricky in GITHUB_OUTPUT)
+          echo "${CHANGES}" > customers/vm-troubleshooting/changelog.txt
+          echo "prev_tag=${PREV_TAG:-none}" >> "$GITHUB_OUTPUT"
 
       - name: Generate release body
-        id: body
         run: |
-          VERSION="${GITHUB_REF_NAME#gather-info/}"
-          cat <<BODY > release-body.md
+          VERSION="${{ steps.meta.outputs.version }}"
+          BINARY="${{ steps.meta.outputs.basename }}"
+          CHECKSUM="${{ steps.meta.outputs.checksum }}"
+          CDN="${DO_SPACES_CDN}"
+          PREV_TAG="${{ steps.changelog.outputs.prev_tag }}"
+
+          # Build changelog section
+          CHANGELOG=""
+          if [ -s changelog.txt ]; then
+            CHANGELOG="### Changes"$'\n\n'
+            if [ "${PREV_TAG}" != "none" ]; then
+              CHANGELOG="${CHANGELOG}Since \`${PREV_TAG}\`:"$'\n\n'
+            fi
+            while IFS= read -r line; do
+              CHANGELOG="${CHANGELOG}- ${line}"$'\n'
+            done < changelog.txt
+            CHANGELOG="${CHANGELOG}"$'\n'
+          fi
+
+          cat > release-body.md <<BODY
           ## gather-info ${VERSION}
 
-          ### Usage
+          ### Quick install
 
           \`\`\`bash
+          curl -fSL "${CDN}/public/${BINARY}" -o gather-info
+          curl -fSL "${CDN}/public/${CHECKSUM}" -o gather-info.sha256
+          sha256sum -c gather-info.sha256
           chmod +x gather-info
           sudo ./gather-info
           \`\`\`
 
-          ### Verify download
+          ### Latest (always points to newest release)
 
           \`\`\`bash
-          sha256sum -c gather-info.sha256
+          curl -fSL "${CDN}/public/gather-info-latest-linux-amd64" -o gather-info
           \`\`\`
 
-          ### What's included
+          ${CHANGELOG}### What's included
 
           Static Linux x86_64 binary. Collects system, network, NVIDIA GPU, DCGM, Docker, services, journal, packages, storage, and InfiniBand diagnostics into a single \`.tar.gz\` archive.
 
           See [CODEMAP.md](https://github.com/${{ github.repository }}/blob/${{ github.sha }}/customers/vm-troubleshooting/CODEMAP.md) for architecture details.
           BODY
-          # Strip leading whitespace from heredoc indentation
           sed -i 's/^          //' release-body.md
 
-      - name: Release
+      - name: Create GitHub release
         uses: softprops/action-gh-release@v2
         with:
-          name: "gather-info ${{ github.ref_name }}"
+          name: "gather-info ${{ steps.meta.outputs.version }}"
           body_path: customers/vm-troubleshooting/release-body.md
-          # Paths relative to repo root (working-directory does not apply to uses steps)
           files: |
-            customers/vm-troubleshooting/gather-info
-            customers/vm-troubleshooting/gather-info.sha256
+            customers/vm-troubleshooting/${{ steps.meta.outputs.basename }}
+            customers/vm-troubleshooting/${{ steps.meta.outputs.checksum }}
+
+      - name: Upload to DigitalOcean Spaces
+        env:
+          AWS_ACCESS_KEY_ID: ${{ secrets.DO_SPACES_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.DO_SPACES_SECRET_ACCESS_KEY }}
+        run: |
+          BINARY="${{ steps.meta.outputs.basename }}"
+          CHECKSUM="${{ steps.meta.outputs.checksum }}"
+          LATEST="${{ steps.meta.outputs.latest }}"
+          S3_BASE="s3://${DO_SPACES_BUCKET}/public"
+          S3_OPTS="--endpoint-url ${DO_SPACES_ENDPOINT} --region ${AWS_DEFAULT_REGION}"
+
+          # Upload versioned binary + checksum
+          aws s3 cp "${BINARY}"   "${S3_BASE}/${BINARY}"   --acl public-read ${S3_OPTS}
+          aws s3 cp "${CHECKSUM}" "${S3_BASE}/${CHECKSUM}" --acl public-read ${S3_OPTS}
+
+          # Update "latest" pointer (copy, not symlink — S3 doesn't support symlinks)
+          aws s3 cp "${BINARY}" "${S3_BASE}/${LATEST}" --acl public-read ${S3_OPTS}
+
+          echo "::notice::Binary:   ${DO_SPACES_CDN}/public/${BINARY}"
+          echo "::notice::Checksum: ${DO_SPACES_CDN}/public/${CHECKSUM}"
+          echo "::notice::Latest:   ${DO_SPACES_CDN}/public/${LATEST}"