Feat/improve bootstraping

.gitignore

@@ -19,7 +19,18 @@ profile.cov
 
 # Build artifacts
 /bin/
+lab
+
+# GoReleaser / local release output
 /dist/
+*.deb
+*.rpm
+homelab-cli_*.tar.gz
+checksums.txt
+homelab-cli_*_checksums.txt
+
+# Local dev toolchain (e.g. Go SDK for CI without system install)
+.tools/
 
 # Dependency directories (remove the comment below to include it)
 # vendor/
@@ -30,6 +41,11 @@ go.work.sum
 
 # env file
 .env
+.env.*
+
+# OS
+.DS_Store
+Thumbs.db
 
 # Editor/IDE
 # .idea/

.golangci.yml

@@ -21,9 +21,19 @@ linters:
     - gosec
 
   settings:
+    errcheck:
+      exclude-functions:
+        - fmt.Fprintf
+        - fmt.Fprint
+        - fmt.Fprintln
     gosec:
       excludes:
         - G204
+        - G301
+        - G304
+        - G306
+        - G302
+        - G110
 
 issues:
   max-same-issues: 50

.goreleaser.yaml

@@ -32,16 +32,41 @@ archives:
     name_template: "{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}"
 
 checksum:
-  name_template: "{{ .ProjectName }}_{{ .Version }}_checksums.txt"
+  name_template: "checksums.txt"
   algorithm: sha256
 
+nfpms:
+  - id: lab
+    builds:
+      - lab
+    maintainer: "Your Name <you@example.com>"
+    description: "Homelab automation CLI from bare metal to GPU-served LLMs"
+    license: Apache-2.0
+    bindir: /usr/bin
+    section: utils
+    homepage: "https://github.com/bartrosa/homelab-cli"
+    recommends:
+      - mise
+      - podman
+      - distrobox
+    formats:
+      - deb
+      - rpm
+
 changelog:
+  sort: asc
   use: github
   filters:
     exclude:
       - "^docs:"
       - "^chore:"
       - "^test:"
+      - "^ci:"
+
+release:
+  draft: false
+  prerelease: auto
+  mode: replace
 
 # brews:
 #   - # TODO: add Homebrew tap after repository is public and naming is final

CHANGELOG.md

@@ -5,6 +5,23 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.2.0] - YYYY-MM-DD
+
+### Added
+
+- Release plumbing: GoReleaser `.deb`, `.rpm`, `.tar.gz`, and `checksums.txt` for linux/darwin amd64/arm64.
+- `scripts/install.sh` and `scripts/uninstall.sh` for curl-based installs with SHA256 verification.
+- `lab self-update` with `--check`, `--version`, `--pre-release`, and `--yes`.
+- `lab iso list|download|disks|write` — ISO catalog, verified downloads, USB disk listing, and safe `dd` writes (Linux).
+- `lab bootstrap essentials` for Ubuntu and Fedora Silverblue with idempotent sections.
+- Package manager adapters: `internal/pkgmgr` (`apt`, `rpm-ostree`, detect).
+- Testable exec runner: `internal/exec`.
+
+### Changed
+
+- GoReleaser config: nfpms, changelog filters, release mode.
+- GitHub release workflow unchanged in trigger but documents full artifact set.
+
 ## [Unreleased]
 
 ### Added

README.md

@@ -18,27 +18,50 @@ Module: `github.com/bartrosa/homelab-cli`
 
 | Area | Commands | Notes |
 |------|----------|--------|
-| **Bootstrap** | `bootstrap laptop\|server\|profile\|list` | Embedded YAML profiles (macOS, Linux, Silverblue, Ubuntu server) |
+| **Bootstrap** | `bootstrap laptop\|server\|profile\|list\|essentials` | Profiles + `essentials` for Ubuntu/Silverblue |
 | **Packages** | `pkg install\|ensure\|list` | brew, apt, dnf, rpm-ostree |
 | **Toolchains** | `toolchain install\|list\|use` | via [mise](https://mise.jdx.dev/) |
 | **Services** | `services up\|down\|list\|logs\|ensure` | homelab `ml-stack` compose |
 | **Server** | `server run`, `server deploy` | SSH + rsync; deploy can provision PG and start compose |
 | **PostgreSQL** | `postgres apply` | Idempotent apply from `instances.yaml` (pgx) |
 | **Bare metal** | `baremetal install` | Qdrant, Milvus, ClickHouse on Linux |
 | **System** | `system usb list`, `system usb` | Bootable USB; ISOs discovered from Ubuntu/Fedora mirrors |
+| **ISO** | `iso list`, `iso download`, `iso disks`, `iso write` | Cache ISOs, list disks, burn USB (Linux) |
 | **SSH** | `ssh connect`, `ssh sync` | Host inventory from config |
 | **Repos** | `repos backup` | GitLab account mirror (homelab Python script today) |
 | **Templates** | `templates list\|new` | Copy `project-initiators/` from homelab |
 | **Media** | `media heic` | HEIC→JPEG via `heif-convert` |
-| **Meta** | `version` | Build metadata |
+| **Meta** | `version`, `self-update` | Build metadata and in-place upgrades |
 
 **Planned (stubs):** `cluster`, `gpu`, `models`, `mlops`, `vector`, `pipelines`, `agents`, `obs`, `logs`, `mcp`, most of `repos` beyond backup.
 
 Full command tables: [`docs/commands.md`](docs/commands.md).
 
 ## Installation
 
-### Build from source
+### One-liner install
+
+```bash
+curl -sSL https://raw.githubusercontent.com/bartrosa/homelab-cli/main/scripts/install.sh | bash
+```
+
+Pin a version or install to `$HOME/.local`:
+
+```bash
+curl -sSL https://raw.githubusercontent.com/bartrosa/homelab-cli/main/scripts/install.sh | bash -s -- --version v0.2.0
+curl -sSL https://raw.githubusercontent.com/bartrosa/homelab-cli/main/scripts/install.sh | bash -s -- --prefix "$HOME/.local"
+```
+
+### Upgrading
+
+```bash
+lab self-update
+lab self-update --check   # exit 0 if current, 3 if update available
+```
+
+### Alternatives
+
+**Build from source**
 
 ```bash
 git clone https://github.com/bartrosa/homelab-cli.git
@@ -48,15 +71,28 @@ make install    # or: make build && ./bin/lab
 
 Requires **Go 1.25+**.
 
-### `go install`
+**go install**
 
 ```bash
 go install github.com/bartrosa/homelab-cli/cmd/lab@latest
 ```
 
-### Releases
+**Release packages**
 
-Tagged releases publish binaries via GoReleaser. You can also use `scripts/install.sh` when release artifacts are available.
+Tagged releases publish `.tar.gz`, `.deb`, and `.rpm` via GoReleaser on the [Releases](https://github.com/bartrosa/homelab-cli/releases) page.
+
+## Provisioning a new machine
+
+```bash
+# On an existing Linux host:
+lab iso list
+lab iso download ubuntu-desktop
+lab iso disks
+lab iso write ~/.cache/homelab-cli/iso/ubuntu-24.04.3-desktop-amd64.iso --to /dev/sdb
+
+# After booting the fresh OS and installing lab:
+lab bootstrap essentials
+```
 
 ## Quick start
 

cmd/lab/main.go

@@ -2,11 +2,15 @@
 package main
 
 import (
-	"github.com/bartrosa/homelab-cli/internal/cli"
 	"context"
+	"errors"
 	"os"
 	"os/signal"
 	"syscall"
+
+	"github.com/bartrosa/homelab-cli/internal/cli"
+
+	"github.com/bartrosa/homelab-cli/internal/clierrors"
 )
 
 func main() {
@@ -16,6 +20,13 @@ func main() {
 	stop()
 
 	if err != nil {
+		var exitErr *clierrors.ExitError
+		if errors.As(err, &exitErr) {
+			if exitErr.Msg != "" {
+				cli.PrintCommandError(err)
+			}
+			os.Exit(exitErr.ExitCode())
+		}
 		cli.PrintCommandError(err)
 		os.Exit(1)
 	}

docs/commands.md

@@ -16,14 +16,32 @@ Run `lab <command> --help` for flags. Global flags apply to all commands: `--con
 | `lab bootstrap server` | Ubuntu server profile + optional homelab `install-server-deps.sh` step. | ✅ |
 | `lab bootstrap profile <name>` | Run built-in or config-defined profile. | ✅ |
 | `lab bootstrap list` | List embedded profiles. | ✅ |
+| `lab bootstrap essentials` | Baseline packages for Ubuntu or Silverblue (sections: system-update, cli-basics, …). | ✅ |
 
 Built-in profiles: `laptop-macos`, `laptop-linux`, `silverblue-laptop`, `server-ubuntu`.
 
 ```bash
 lab bootstrap laptop --dry-run
+lab bootstrap essentials --dry-run --target silverblue
 lab bootstrap profile dgx-spark   # from config bootstrap.profiles
 ```
 
+### `lab iso`
+
+| Command | Description | Status |
+|---------|-------------|--------|
+| `lab iso list` | Supported distros and resolved versions. | ✅ |
+| `lab iso download <distro>` | Download and verify ISO to cache. | ✅ |
+| `lab iso disks` | List block devices; USB vs SYSTEM (Linux). | ✅ |
+| `lab iso write <iso> --to <device>` | Burn ISO with safety checks (Linux). | ✅ |
+
+Flow: `list` → `download` → `disks` → `write`.
+
+```bash
+lab iso download ubuntu-desktop
+lab iso write ~/.cache/homelab-cli/iso/ubuntu-24.04.3-desktop-amd64.iso --to /dev/sdb
+```
+
 ### `lab pkg`
 
 | Command | Description | Status |
@@ -187,8 +205,10 @@ lab media heic ~/Pictures/import --quality 95 --force
 | Command | Description | Status |
 |---------|-------------|--------|
 | `lab version` | Build version, commit, date (`--output text\|json`). | ✅ |
+| `lab self-update` | Install latest release from GitHub (`--check`, `--version`, `--pre-release`). | ✅ |
 
 ```bash
 lab version --output json
+lab self-update --check
 lab --log-level debug services list
 ```

internal/baremetal/clickhouse.go

@@ -1,3 +1,4 @@
+// Package baremetal installs data-plane services directly on Linux hosts.
 package baremetal
 
 import (

internal/bootstrap/distrobox.go

@@ -0,0 +1,61 @@
+package bootstrap
+
+import (
+	"bufio"
+	"context"
+	"fmt"
+	"os"
+	"strings"
+
+	"github.com/bartrosa/homelab-cli/internal/exec"
+)
+
+// SetupDistrobox installs distrobox and optionally creates homelab-dev container.
+func SetupDistrobox(ctx context.Context, opts EssentialsOptions) (bool, error) {
+	pkg, _ := PackageFor("distrobox", "rpm-ostree")
+	installed, err := opts.Runner.RunWithOutput(ctx, "which", "distrobox")
+	reboot := false
+	if err != nil || strings.TrimSpace(installed) == "" {
+		if err := opts.Runner.Run(ctx, "rpm-ostree", "install", "--idempotent", "-y", pkg); err != nil {
+			return false, err
+		}
+		reboot = true
+	}
+
+	create := opts.Yes
+	if !create && !opts.Yes {
+		fmt.Fprint(opts.Stdout, "Create distrobox homelab-dev container? [y/N]: ")
+		var ans string
+		_, _ = fmt.Scanln(&ans)
+		create = strings.EqualFold(strings.TrimSpace(ans), "y") || strings.EqualFold(strings.TrimSpace(ans), "yes")
+	}
+	if !create {
+		return reboot, nil
+	}
+
+	if err := opts.Runner.Run(ctx, "distrobox", "create", "--name", "homelab-dev", "--image", "quay.io/fedora/fedora:41"); err != nil {
+		return reboot, fmt.Errorf("distrobox create: %w", err)
+	}
+	_ = opts.Runner.Run(ctx, "distrobox", "enter", "homelab-dev", "--", "sudo", "dnf", "install", "-y", "@development-tools", "git", "curl")
+	_ = opts.Runner.Run(ctx, "distrobox", "enter", "homelab-dev", "--", "sh", "-c", "curl https://mise.run | sh")
+	home, _ := os.UserHomeDir()
+	misePath := home + "/.local/share/mise/bin/mise"
+	exportPath := home + "/.local/bin"
+	_ = opts.Runner.Run(ctx, "distrobox-export", "--bin", misePath, "--export-path", exportPath)
+	return reboot, nil
+}
+
+// EnsureFlathub adds Flathub remote if missing.
+func EnsureFlathub(ctx context.Context, runner exec.Runner) error {
+	out, err := runner.RunWithOutput(ctx, "flatpak", "remote-list")
+	if err != nil {
+		return err
+	}
+	sc := bufio.NewScanner(strings.NewReader(out))
+	for sc.Scan() {
+		if strings.Contains(sc.Text(), "flathub") {
+			return nil
+		}
+	}
+	return runner.Run(ctx, "flatpak", "remote-add", "--if-not-exists", "flathub", "https://flathub.org/repo/flathub.flatpakrepo")
+}

internal/bootstrap/docker.go

@@ -0,0 +1,43 @@
+package bootstrap
+
+import (
+	"context"
+	"fmt"
+	"io"
+	"os/user"
+
+	"github.com/bartrosa/homelab-cli/internal/exec"
+)
+
+// InstallDocker sets up Docker CE on Ubuntu via official apt repository.
+func InstallDocker(ctx context.Context, runner exec.Runner, stdout, _ io.Writer) error {
+	if _, err := runner.RunWithOutput(ctx, "docker", "--version"); err == nil {
+		fmt.Fprintln(stdout, "docker already installed")
+		return addUserToDockerGroup(ctx, runner, stdout)
+	}
+
+	script := `set -e
+install -m 0755 -d /etc/apt/keyrings
+curl -fsSL https://download.docker.com/linux/ubuntu/gpg -o /etc/apt/keyrings/docker.gpg
+chmod a+r /etc/apt/keyrings/docker.gpg
+echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu $(. /etc/os-release && echo ${VERSION_CODENAME}) stable" > /etc/apt/sources.list.d/docker.list
+apt-get update
+apt-get install -y --no-install-recommends docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
+`
+	if err := runner.Run(ctx, "sudo", "bash", "-c", script); err != nil {
+		return fmt.Errorf("docker install: %w", err)
+	}
+	return addUserToDockerGroup(ctx, runner, stdout)
+}
+
+func addUserToDockerGroup(ctx context.Context, runner exec.Runner, stdout io.Writer) error {
+	u, err := user.Current()
+	if err != nil {
+		return err
+	}
+	if err := runner.Run(ctx, "sudo", "usermod", "-aG", "docker", u.Username); err != nil {
+		return err
+	}
+	fmt.Fprintln(stdout, "Added user to docker group — re-login or run: newgrp docker")
+	return nil
+}