feat: 对齐 xxxig/proxy 打包规范并迁移配置至 /etc/mond

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.gitea/workflows/ci.yaml

@@ -9,7 +9,7 @@ on:
 env:
   DOCKER_BUILDKIT: "1"
   PRODUCT_NAME: "mond"
-  MONERO_VERSION: "v0.18.4.6"
+  PACKAGE_VERSION: "0.18.5.0"
   BUILDX_NO_DEFAULT_ATTESTATIONS: "1"
 
 jobs:
@@ -35,11 +35,7 @@ jobs:
       - name: Build binaries
         run: |
           PLATFORM="linux/${{ matrix.arch }}"
-
-          echo "🏗️ Building ${PLATFORM} on native ${{ matrix.arch }} runner"
-          echo "📦 Using Ubuntu 20.04 with depends system"
-          echo "📦 Monero Version: ${MONERO_VERSION}"
-          echo "🔗 Static linking enabled"
+          MONERO_VERSION="v${PACKAGE_VERSION}"   # 上游 Monero git tag 带 v 前缀，需补回
 
           # 设置 BuildKit 优化参数
           export BUILDKIT_PROGRESS=plain
@@ -53,7 +49,7 @@ jobs:
       - name: Package and test
         run: |
           DIR="./output/linux_${{ matrix.arch }}"
-          VERSION=${MONERO_VERSION#v}  # 移除前导 v
+          VERSION=${PACKAGE_VERSION}
           TARGZ="${PRODUCT_NAME}-${{ matrix.arch }}-ubuntu-${VERSION}.tar.gz"
 
           tar -czf "${TARGZ}" -C "$DIR" .
@@ -64,6 +60,9 @@ jobs:
           # 快速验证
           mkdir -p test && tar -xzf "${TARGZ}" -C test
           test/mond --version 2>/dev/null || echo "⚠️ 跳过版本检查"
+          # 纯静态校验（depends 系统应产出无动态依赖的二进制）
+          ldd test/mond 2>&1 | grep -q "not a dynamic executable" \
+            && echo "✅ 纯静态链接" || echo "⚠️ 非纯静态二进制"
           rm -rf test
 
       - name: Build Debian package
@@ -71,12 +70,12 @@ jobs:
           # 安装 dpkg-deb（如果需要）
           sudo apt-get update && sudo apt-get install -y dpkg-dev
 
-          DIR="./output/linux_${{ matrix.arch }}"
-          VERSION=${MONERO_VERSION#v}  # 移除前导 v
+          VERSION=${PACKAGE_VERSION}
+          TARGZ="${PRODUCT_NAME}-${{ matrix.arch }}-ubuntu-${VERSION}.tar.gz"
 
           echo "📦 Building Debian package for ${{ matrix.arch }}..."
           chmod +x debian/build-deb.sh
-          ./debian/build-deb.sh ${{ matrix.arch }} ${VERSION} "${DIR}"
+          ./debian/build-deb.sh ${{ matrix.arch }} ${VERSION} "${TARGZ}"
 
           ls -lh *.deb
 
@@ -110,12 +109,13 @@ jobs:
           REGISTRY=$(echo "${{ gitea.server_url }}" | sed 's|https\?://||')
           OWNER="${{ gitea.repository_owner }}"
           REPO_NAME=$(echo "${{ gitea.repository }}" | cut -d'/' -f2)
+          VERSION="${TAG#v}"   # 包版本：去掉 git tag 的 v 前缀（registry 路径/下载名/Release 标题统一用）
 
           echo "📦 上传包到 Generic Package Registry..."
           echo "  Registry: ${REGISTRY}"
           echo "  Owner: ${OWNER}"
           echo "  Package: ${PRODUCT_NAME}"
-          echo "  Version: ${TAG}"
+          echo "  Version: ${VERSION}"
 
           # 上传所有 tar.gz 包到 Generic Package Registry
           for file in *.tar.gz; do
@@ -124,7 +124,7 @@ jobs:
             curl -fsSL -X PUT \
               -H "Authorization: token ${TOKEN}" \
               --upload-file "$file" \
-              "https://${REGISTRY}/api/packages/${OWNER}/generic/${PRODUCT_NAME}/${TAG}/$file" || {
+              "https://${REGISTRY}/api/packages/${OWNER}/generic/${PRODUCT_NAME}/${VERSION}/$file" || {
               echo "❌ 上传失败: $file"
               exit 1
             }
@@ -147,12 +147,35 @@ jobs:
             }
           done
 
-          # 生成 Release JSON payload
+          # 生成 Release 描述
           echo ""
           echo "📝 生成 Release..."
 
-          export REGISTRY OWNER TAG
-          RELEASE_DATA=$(python3 -c 'import json,glob,os;r=os.environ["REGISTRY"];o=os.environ["OWNER"];p=os.environ["PRODUCT_NAME"];t=os.environ["TAG"];b=["## Release "+t,"","Mond 是 Monero 守护进程 (monerod) 的定制版本。","","### ✨ 主要特性","","- 🔗 **纯静态链接** - 无需依赖，可在任意 Linux 系统运行","- 🏗️ **多架构支持** - 原生支持 AMD64 和 ARM64","- 📦 **官方构建系统** - 使用 Monero 官方 depends 系统构建，确保可靠性","","### 📥 下载方式","","#### 方式一：直接下载（推荐）","","点击下方 **Assets** 区域的文件名直接下载。","","**可用安装包：**",""]+[f"- [`{f}`](https://{r}/api/packages/{o}/generic/{p}/{t}/{f})" for f in sorted(glob.glob("*.tar.gz"))]+["","#### 方式二：通用软件包仓库","","通过命令行下载：",""]+[f"```bash\nwget https://{r}/api/packages/{o}/generic/{p}/{t}/{f}\n```" for f in sorted(glob.glob("*.tar.gz"))[:1]]+["","#### 方式三：Debian 软件源","","```bash","# 下载 GPG 密钥",f"sudo curl https://{r}/api/packages/{o}/debian/repository.key -o /etc/apt/keyrings/gitea-{o}.asc","","# 添加软件源",f"echo \"deb [signed-by=/etc/apt/keyrings/gitea-{o}.asc] https://{r}/api/packages/{o}/debian stable main\" | sudo tee -a /etc/apt/sources.list.d/{o}.list","","# 更新并安装","sudo apt-get update","sudo apt-get install mond","```"];print(json.dumps({"tag_name":t,"name":f"Release {t}","body":"\n".join(b),"draft":False,"prerelease":False}))')
+          # 拼接 tar.gz 下载链接
+          ASSETS=$(for f in *.tar.gz; do
+            [ -f "$f" ] || continue
+            echo "- [\`$f\`](https://${REGISTRY}/api/packages/${OWNER}/generic/${PRODUCT_NAME}/${VERSION}/$f)"
+          done)
+
+          BODY=$(cat <<EOF
+          ## Release ${VERSION}
+
+          ### 📥 Debian/Ubuntu 安装
+
+          \`\`\`bash
+          sudo curl https://${REGISTRY}/api/packages/${OWNER}/debian/repository.key -o /etc/apt/keyrings/gitea-${OWNER}.asc
+          echo "deb [signed-by=/etc/apt/keyrings/gitea-${OWNER}.asc] https://${REGISTRY}/api/packages/${OWNER}/debian stable main" | sudo tee /etc/apt/sources.list.d/${OWNER}.list
+          sudo apt-get update && sudo apt-get install ${PRODUCT_NAME}
+          \`\`\`
+
+          ### 📦 tar.gz 下载
+
+          ${ASSETS}
+          EOF
+          )
+
+          RELEASE_DATA=$(jq -n --arg tag "$TAG" --arg ver "$VERSION" --arg body "$BODY" \
+            '{tag_name: $tag, name: "Release \($ver)", body: $body, draft: false, prerelease: false}')
 
           # 创建 Release
           echo ""