From e794310a76c7369015ea26b5b37aba71321ef808 Mon Sep 17 00:00:00 2001
From: xavierk <xavierk@bongbetic.com>
Date: Thu, 3 Sep 2026 16:49:54 +0530
Subject: [PATCH] ci: make Gitea release runner workflow executable

---
 .gitea/workflows/release.yml | 19 ++++++++++++++++++-
 packaging/nfpm.yaml          |  2 +-
 2 files changed, 19 insertions(+), 2 deletions(-)

diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml
index c7a4bf9..ee6c301 100644
--- a/.gitea/workflows/release.yml
+++ b/.gitea/workflows/release.yml
@@ -8,6 +8,12 @@ on:
     tags:
       - 'v*'
 
+# Built-in Gitea token needs write access for release assets and package registry.
+permissions:
+  contents: read
+  releases: write
+  packages: write
+
 jobs:
   release:
     runs-on: [self-hosted]
@@ -20,7 +26,18 @@ jobs:
           python-version: '3.12'
 
       - name: Install build dependencies
-        run: pip install build nfpm
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y rpm python3-venv
+          python3 -m venv /tmp/fenris-ci
+          /tmp/fenris-ci/bin/pip install --quiet build
+          echo "/tmp/fenris-ci/bin" >> "$GITHUB_PATH"
+          NFPM_VERSION=2.47.0
+          curl --fail --silent --show-error --location \
+            "https://github.com/goreleaser/nfpm/releases/download/v${NFPM_VERSION}/nfpm_${NFPM_VERSION}_Linux_x86_64.tar.gz" \
+            -o /tmp/nfpm.tar.gz
+          sudo tar -xzf /tmp/nfpm.tar.gz -C /usr/local/bin nfpm
+          nfpm --version
 
       - name: Build packages
         run: make package
diff --git a/packaging/nfpm.yaml b/packaging/nfpm.yaml
index 8f9ce5e..2d5ef14 100644
--- a/packaging/nfpm.yaml
+++ b/packaging/nfpm.yaml
@@ -29,7 +29,7 @@ contents:
   # Default placeholder-commented config (deb conffile / rpm %config(noreplace))
   - src: packaging/fenris.conf
     dst: /etc/fenris/fenris.conf
-    type: config_noreplace
+    type: config|noreplace
     file_info:
       mode: 0644