Skip to content

Use linuxdeploy's built-in AppImage plugin from a fixed release - #175

Merged
rndaom merged 1 commit into
mainfrom
rndaom/appimage-plugin
Oct 19, 2026
Merged

rndaom merged 1 commit into
mainfrom
rndaom/appimage-plugin

Conversation

@rndaom

@rndaom rndaom commented Oct 18, 2026

Copy link
Copy Markdown
Owner

What broke

The Linux build downloads linuxdeploy-plugin-appimage from upstream's continuous release and checks it against a pinned SHA-256. Upstream's scheduled CI rebuilds that asset on the 1st of every month, so every Linux package build fails from then until the pin is updated by hand. The next break is November 1.

What changed

scripts/appimage-host-libraries.mjs now downloads the fixed linuxdeploy copy that Tauri's bundler pins, verifies it, unpacks it, and runs the AppImage output plugin built into it. Removing the bundled Wayland libraries before packing works the same as before.

Source of the pinned file:

  • URL: tauri-apps/binary-releases, release linuxdeploy-07333c6, asset linuxdeploy-x86_64.AppImage
  • Built by linuxdeploy's CI, run 30674699502 (push to master, commit 07333c6e942c7d71782b66be924c5d867f9dfdfc, success), which builds the AppImage plugin from source and bundles it
  • Uploaded by a Tauri maintainer. Tauri's dev branch pins the same release (LINUXDEPLOY_COMMIT_HASH = "07333c6")
  • GitHub's asset digest and a fresh download both give 36a2d7e274d12e1050d0e9ecfe11d339ed54720b2bec464c286d53f8b07f5c62

We don't host the plugin ourselves because it bundles GPL tools (mksquashfs and desktop-file-validate, via appimagetool).

Checks

  • pnpm check and pnpm test pass
  • The Linux package build in CI is what proves the unpacked plugin runs

The standalone linuxdeploy-plugin-appimage is only published as
`continuous`, which upstream rebuilds on the 1st of every month, so the
pinned hash broke every Linux build each month until it was re-pinned.

Download the linuxdeploy copy Tauri pins (tauri-apps/binary-releases
`linuxdeploy-07333c6`, built by linuxdeploy's CI from commit 07333c6),
verify its SHA-256, unpack it and run the AppImage output plugin built
into it. The release asset never changes, so the pin stays valid.
@rndaom
rndaom merged commit 306467f into main Oct 19, 2026
10 checks passed
@rndaom
rndaom deleted the rndaom/appimage-plugin branch October 19, 2026 00:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant