jcoffey-dev
0543931616
Pushing a v* tag runs .github/workflows/release.yml: vet, test, govulncheck, then scripts/build-release.sh builds reproducible archives for linux/amd64 and linux/arm64 with a SHA256SUMS file, and attaches them to the release. workflow_dispatch takes a tag for a run that never started. Same shape as ihasmail-oneshot's releases. Adds a version subcommand, set at build time. go.mod moves to 1.26.8: the workflow builds with the go.mod version, and govulncheck finds four standard-library vulnerabilities the tool reaches in 1.26.5 (GO-2026-6218, GO-2026-6090, GO-2026-5972, GO-2026-5026), all fixed in 1.26.6. README installs from the latest release, with building from source as the alternative; CONTRIBUTING describes how releases are cut.
71 lines
2.7 KiB
Markdown
71 lines
2.7 KiB
Markdown
# Contributing to stalwart-migrator
|
|
|
|
How to build and test the tool, and where its design is written down. For what
|
|
the tool does and how to use it, see the [README](README.md).
|
|
|
|
## Build and test
|
|
|
|
```sh
|
|
go build ./...
|
|
go test ./...
|
|
```
|
|
|
|
Requires Go 1.26.8 or newer. The tool is Go standard library only — no external
|
|
dependencies — and nothing third-party is vendored.
|
|
|
|
To try a command from a checkout without installing it:
|
|
|
|
```sh
|
|
sudo go run ./cmd/stalwart-migrate preflight
|
|
```
|
|
|
|
[docs/rehearsal.md](docs/rehearsal.md) explains why even read-only commands need
|
|
write access to the checkpoint directory.
|
|
|
|
## Releases
|
|
|
|
Releases are tagged by date, like ihasmail's: `v2026.9.15`, with `.1`, `.2`
|
|
added for another release the same day. Binaries for `linux/amd64` and
|
|
`linux/arm64` and a `SHA256SUMS` file are attached to every
|
|
[release](https://github.com/Coffey-Labs/stalwart-migrator/releases).
|
|
|
|
Every release is built by the [release workflow](.github/workflows/release.yml)
|
|
from a tagged commit on `main`, after the tests and a known-vulnerabilities
|
|
check pass. The archives are reproducible: `scripts/build-release.sh` builds the
|
|
same bytes from the same commit, so a release can be checked before tagging:
|
|
|
|
```sh
|
|
scripts/build-release.sh v2026.9.15 dist
|
|
```
|
|
|
|
If a pushed tag's run never starts, run the workflow by hand from the Actions
|
|
tab and give it the tag.
|
|
|
|
## Why not a shell script
|
|
|
|
Stalwart's 0.15 → 0.16 boundary is not a drop-in binary swap: settings move,
|
|
and the data directory has to be migrated rather than merely copied. The
|
|
failure mode that matters is a half-migrated mail store with no way back —
|
|
which is why backup verification and checkpointing are the design center
|
|
rather than conveniences bolted on afterwards — and why the tool refuses to
|
|
cut over until you confirm you have a way back.
|
|
|
|
## Where the design is written down
|
|
|
|
[`ARCHITECTURE.md`](ARCHITECTURE.md) covers the design in full: §1 on why a
|
|
thin wrapper is insufficient, §4 on the migration phases, §5 on the checkpoint
|
|
state machine, §6 on the CLI surface, and §8 on what is still open. It was
|
|
written before the implementation and records the reasoning; where it and the
|
|
code disagree about current behavior — the flags shown in §6, for example —
|
|
the code and `stalwart-migrate <command> -h` are right.
|
|
|
|
[docs/status.md](docs/status.md) has the state of each command and package, and
|
|
what has been tested against real servers.
|
|
|
|
## Testing against something real
|
|
|
|
Where a phase runs an external program, its tests drive a fake one. That is
|
|
sound for logic and ordering, and it is not evidence about production. Before
|
|
trusting a change to a migration path, run it on a clone of a real server — see
|
|
[Rehearse on a clone first](docs/rehearsal.md#rehearse-on-a-clone-first).
|