various: Add release workflow components

Author: the-maldridge

.github/workflows/release.yml

@@ -0,0 +1,47 @@
+name: release
+
+on:
+  push:
+    tags:
+      - v*
+
+jobs:
+  goreleaser:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
+      - name: Set up Go
+        uses: actions/setup-go@v2
+        with:
+          go-version: 1.19
+      - name: Run GoReleaser
+        uses: goreleaser/goreleaser-action@v2
+        with:
+          version: latest
+          args: release --rm-dist
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+  docker:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v1
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v1
+      - name: Login to GCHR
+        uses: docker/login-action@v1
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Set version
+        run: echo "RELEASE_VERSION=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV
+      - name: Build and push
+        id: docker_build
+        uses: docker/build-push-action@v2
+        with:
+          push: true
+          tags: "ghcr.io/${{ github.repository }}:${{ env.RELEASE_VERSION }}"

.gitignore

@@ -0,0 +1,3 @@
+NOTICE
+dist/
+vendor/

.goreleaser.yml

@@ -0,0 +1,35 @@
+before:
+  hooks:
+    - go mod vendor
+    - scripts/prepare.sh
+builds:
+  - goos:
+      - darwin
+      - freebsd
+      - linux
+      - windows
+archives:
+- replacements:
+    darwin: Darwin
+    linux: Linux
+    windows: Windows
+    386: i386
+    amd64: x86_64
+  files:
+    - LICENSE
+    - NOTICE
+    - README.md
+checksum:
+  name_template: 'checksums.txt'
+snapshot:
+  name_template: "{{ .Tag }}-next"
+changelog:
+  sort: asc
+  filters:
+    exclude:
+    - '^docs:'
+    - '^test:'
+release:
+  github:
+    owner: netauth
+    name: netradius

LICENSE

@@ -0,0 +1,20 @@
+Copyright 2023 Michael Aldridge
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

README.md

@@ -0,0 +1,18 @@
+# NetAuth RADIUS Server
+
+The NetAuth RADIUS server acts as a RADIUS protocol bridge to allow
+basic authentication against the NetAuth entity authentication flow
+for services that understand the RADIUS protocol, sometimes referred
+to as 802.1X.
+
+The RADIUS server is extremely simplistic and only supports the PAP
+profile, so use with care.  For this reason you should try to install
+the server as close to your RADIUS clients as possible to avoid
+information being transmitted insecurely.  There is no need to run a
+single netradius server for an entire site, an arbitrarily many
+servers may be deployed.
+
+The NAS Secret implementation is very simplistic, expecting a single
+shared key for all clients.  You may set this key via the
+`NETAUTH_RADIUS_SECRET` environment variable.
+

scripts/prepare.sh

@@ -0,0 +1,3 @@
+#!/bin/sh
+
+./scripts/vendor-licenses > NOTICE

scripts/vendor-licenses

@@ -0,0 +1,64 @@
+#!/bin/bash
+
+list_vendor_files() {
+    find vendor -type f -a \( -iname 'COPYING*' -o -iname 'LICENSE*' \) | sort
+}
+
+list_files() {
+    goroot="$(go env GOROOT)"
+    goid='Go programming language'
+    if [ -r "$goroot/LICENSE" ]; then
+        echo "${goid}::$goroot/LICENSE"
+    elif [ -r /usr/share/licenses/go/LICENSE ]; then
+        echo "${goid}::/usr/share/licenses/go/LICENSE"
+    else # last restort: HTTP
+        echo "${goid}::https://golang.org/LICENSE?m=text"
+    fi
+    list_vendor_files
+}
+
+generate_notice() {
+    last=
+    $0 -all | while IFS=$'\n' read -r license; do
+        pkg="${license%%::*}"
+        if [ "$pkg" != "$license" ]; then
+            license="${license#${pkg}::}"
+        else
+            pkg="${pkg#vendor/}"
+            pkg="${pkg%/*}"
+        fi
+
+        printf "%s" "${last:+'\n\n\n'}"
+        last=x
+
+        echo "$pkg" | sed 'p;s/./-/g'
+        fetch "${license}"
+    done
+}
+
+fetch() {
+    case "$1" in
+        *://*) wget -q -O- "${1#*::}";;
+        *) cat "${1#*::}";;
+    esac
+}
+
+case "${1--gen}" in
+    -gen)
+        if [ -t 1 ]; then
+            generate_notice | ${PAGER:-more}
+        else
+            generate_notice
+        fi
+        ;;
+    -src) list_vendor_files;;
+    -all) list_files;;
+    -h)
+        echo 'Usage: vendor-licenses [-h|-gen|-src|-all]' >&2
+        exit 2
+        ;;
+    *)
+        echo "Unrecognized argument: '$1'" >&2
+        exit 1
+        ;;
+esac