Add monthly iso build workflow that can be triggered manually

.gitea/workflows/build-iso.yaml

@@ -0,0 +1,74 @@
+name: Scheduled ArchISO Build
+
+on:
+  schedule:
+    - cron: "0 0 1 * *" # Runs monthly on the 1st day of the month
+  workflow_dispatch: # Allows manual triggers (multiple times a month)
+
+jobs:
+  build:
+    runs-on: ubuntu-latest # Ensure this runner has archiso capabilities
+    permissions:
+      contents: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Install archiso and dependencies
+        run: |
+          sudo pacman -Syu --noconfirm archiso
+
+      - name: Build Arch ISO
+        run: |
+          # Replace 'releng' with your custom profile directory if needed
+          sudo mkarchiso -v -w work -o out/ releng
+
+      - name: Generate Unique Dynamic Tag
+        id: tag
+        env:
+          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
+          SERVER_URL: ${{ github.server_url }}
+          REPOSITORY: ${{ github.repository }}
+        run: |
+          BASE_DATE=$(date -u +'%Y.%m.%d')
+          REVISION=1
+          TAG_NAME="iso-${BASE_DATE}-r${REVISION}"
+
+          # Check if the tag already exists via Gitea API, increment revision loop if it does
+          while curl -s -o /dev/null -w "%{http_code}" -H "Authorization: token $GITEA_TOKEN" \
+            "$SERVER_URL/api/v1/repos/$REPOSITORY/releases/tags/$TAG_NAME" | grep -q "200"; do
+              REVISION=$((REVISION + 1))
+              TAG_NAME="iso-${BASE_DATE}-r${REVISION}"
+          done
+
+          echo "tag_name=${TAG_NAME}" >> $GITHUB_OUTPUT
+          echo "release_name=Arch Linux ISO (${BASE_DATE} Rev ${REVISION})" >> $GITHUB_OUTPUT
+
+      - name: Create Release and Upload ISO
+        uses: softprops/action-gh-release@v1
+        with:
+          tag_name: ${{ steps.tag.outputs.tag_name }}
+          name: ${{ steps.tag.outputs.release_name }}
+          files: out/*.iso
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITEA_TOKEN }}
+
+      - name: Keep only latest 3 releases
+        env:
+          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
+          SERVER_URL: ${{ github.server_url }}
+          REPOSITORY: ${{ github.repository }}
+        run: |
+          # Fetch all releases
+          releases=$(curl -s -H "Authorization: token $GITEA_TOKEN" \
+            "$SERVER_URL/api/v1/repos/$REPOSITORY/releases")
+
+          # Sort by creation date and delete old ones, keeping only the 3 newest releases
+          echo "$releases" | jq -r 'sort_by(.created_at) | .[].id' | head -n -3 | while read -r id; do
+            if [ -n "$id" ]; then
+              echo "Deleting old release ID: $id"
+              curl -s -X DELETE -H "Authorization: token $GITEA_TOKEN" \
+                "$SERVER_URL/api/v1/repos/$REPOSITORY/releases/$id"
+            fi
+          done

.gitea/workflows/check-packages.yml

@@ -0,0 +1,143 @@
+name: Check Packages
+
+on:
+  push:
+    paths:
+      - "packages.x86_64"
+  pull_request:
+    paths:
+      - "packages.x86_64"
+  workflow_dispatch:
+
+jobs:
+  check-packages:
+    runs-on: ubuntu-latest
+    container:
+      image: archlinux:latest
+    steps:
+      - name: Install prerequisites
+        run: |
+          pacman -Syu --noconfirm --needed pacman pacman-contrib curl gnupg
+
+      - name: Set up official repos (extra, multilib)
+        run: |
+          cat > /etc/pacman.conf <<'EOF'
+          [options]
+          Architecture = auto
+          SigLevel    = Required DatabaseOptional
+          LocalFileSigLevel = Optional
+
+          [core]
+          Include = /etc/pacman.d/mirrorlist
+
+          [extra]
+          Include = /etc/pacman.d/mirrorlist
+
+          [multilib]
+          Include = /etc/pacman.d/mirrorlist
+          EOF
+
+          # Generate a basic mirrorlist
+          curl -fsSL "https://archlinux.org/mirrorlist/all/status/" \
+            | sed 's/^#Server/Server/' | head -20 > /etc/pacman.d/mirrorlist
+
+          pacman -Syu --noconfirm
+
+      - name: Set up CachyOS repo
+        run: |
+          # Import CachyOS keyring
+          curl -fsSL https://mirror.cachyos.org/cachyos-keyring.pkg.tar.zst \
+            -o /tmp/cachyos-keyring.pkg.tar.zst
+          pacman -U --noconfirm /tmp/cachyos-keyring.pkg.tar.zst || true
+
+          # Add CachyOS mirrorlist
+          cat > /etc/pacman.d/cachyos-mirrorlist <<'MIRROR'
+          Server = https://mirror.cachyos.org/$repo/$arch
+          MIRROR
+
+          # Add CachyOS repo to pacman.conf
+          cat >> /etc/pacman.conf <<'EOF'
+
+          [cachyos]
+          SigLevel = Optional TrustAll
+          Include = /etc/pacman.d/cachyos-mirrorlist
+          EOF
+
+          pacman -Syu --noconfirm
+
+      - name: Set up chaotic-aur repo
+        run: |
+          # Import chaotic-aur keyring
+          pacman-key --recv-key FBA220DFC880C036 --keyserver keyserver.ubuntu.com
+          pacman-key --lsign-key FBA220DFC880C036 || true
+
+          # Add chaotic-aur mirrorlist
+          cat > /etc/pacman.d/chaotic-mirrorlist <<'MIRROR'
+          Server = https://chaotic.archlinux.org/$repo/$arch
+          MIRROR
+
+          # Add chaotic-aur repo to pacman.conf
+          cat >> /etc/pacman.conf <<'EOF'
+
+          [chaotic-aur]
+          SigLevel = Optional TrustAll
+          Include = /etc/pacman.d/chaotic-mirrorlist
+          EOF
+
+          pacman -Syu --noconfirm
+
+      - name: Checkout repo
+        uses: actions/checkout@v4
+
+      - name: Check all packages
+        run: |
+          echo "═══════════════════════════════════════════════════════════════"
+          echo "  Checking packages.x86_64 against repos"
+          echo "  Allowed repos: cachyos, extra, multilib, chaotic-aur"
+          echo "═══════════════════════════════════════════════════════════════"
+
+          ALLOWED_REPOS="^(cachyos|extra|multilib|chaotic-aur)$"
+          MISSING=()
+          FOUND=0
+          TOTAL=0
+
+          while IFS= read -r pkg; do
+            # Skip empty lines and comments
+            [[ -z "$pkg" || "$pkg" =~ ^# ]] && continue
+            TOTAL=$((TOTAL + 1))
+
+            # Query pacman for the package's repository
+            repo=$(pacman -Si "$pkg" 2>/dev/null | grep "^Repository" | awk '{print $3}')
+
+            if [[ -z "$repo" ]]; then
+              echo "❌ MISSING: $pkg"
+              MISSING+=("$pkg")
+            elif [[ "$repo" =~ $ALLOWED_REPOS ]]; then
+              FOUND=$((FOUND + 1))
+            else
+              echo "⚠️  WRONG REPO: $pkg (found in: $repo)"
+              MISSING+=("$pkg")
+            fi
+          done < packages.x86_64
+
+          echo ""
+          echo "═══════════════════════════════════════════════════════════════"
+          echo "  Results: $FOUND / $TOTAL packages found in allowed repos"
+          echo "═══════════════════════════════════════════════════════════════"
+
+          if [[ ${#MISSING[@]} -gt 0 ]]; then
+            echo ""
+            echo "⚠️  ${#MISSING[@]} package(s) NOT in allowed repos:"
+            for p in "${MISSING[@]}"; do
+              echo "  • $p"
+            done
+            echo ""
+            echo "These packages must be in:"
+            echo "  • cachyos, extra, multilib, or chaotic-aur"
+            echo "  • OR pre-built in localrepo/"
+            echo "  • OR added to build-end4-deps.sh"
+            exit 1
+          else
+            echo ""
+            echo "✅ All packages verified successfully!"
+          fi