fix(rpm): explicitly Provides user(cortex)/group(cortex)

dnf5 was silently rejecting neuron-0.1.3 with "Nothing to do" because
it had an unresolvable Requires. Inspection showed:

  Requires: user(cortex)               ← unversioned
  Provides: user(cortex) = <base64>    ← versioned only, no unversioned

rpm's sysusers provides-generator only emits the unversioned user()
provide when the u-line is minimal. Our sysusers.conf specifies GECOS,
home dir, and shell, which pushes the generator to versioned-only.
The matching Requires (auto-generated from %attr(,,cortex) on config
files) is unversioned, so resolution failed silently.

Explicitly declare Provides: user(cortex) and Provides: group(cortex)
to guarantee the unversioned forms exist. group(cortex) was already
emitted unversioned but adding it for symmetry and to protect against
future generator changes.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.gitea/scripts/copr-build.sh

@@ -0,0 +1,61 @@
+#!/bin/bash
+# Submit an SRPM to COPR, watch the build, and dump per-chroot build logs
+# to stdout so they are captured in CI output.
+#
+# Usage: copr-build.sh <project> <srpm> [srpm...]
+# Example: copr-build.sh helexa/cortex ./cortex-0.1.2-1.fc43.src.rpm
+
+set -o pipefail
+
+PROJECT="$1"
+shift
+
+if [ -z "$PROJECT" ] || [ "$#" -eq 0 ]; then
+  echo "usage: $0 <project> <srpm> [srpm...]" >&2
+  exit 2
+fi
+
+# Submit without waiting; capture the build ID from stdout.
+SUBMIT_OUT=$(copr-cli build --nowait "$PROJECT" "$@")
+echo "$SUBMIT_OUT"
+BUILD_ID=$(echo "$SUBMIT_OUT" | grep -oP 'Created builds: \K[0-9]+' | head -n1)
+
+if [ -z "$BUILD_ID" ]; then
+  echo "error: could not parse build ID from copr-cli output" >&2
+  exit 1
+fi
+
+echo
+echo "Build $BUILD_ID submitted to $PROJECT"
+echo "Follow live: https://copr.fedorainfracloud.org/coprs/build/$BUILD_ID"
+echo
+
+# Watch the build; captures status transitions to stdout. Exit non-zero
+# on build failure, but defer propagating that until after we've fetched
+# logs so the CI output contains diagnostics either way.
+if copr-cli watch-build "$BUILD_ID"; then
+  STATUS=0
+else
+  STATUS=$?
+fi
+
+# Fetch per-chroot results (logs + rpms). Anonymous download — no auth needed.
+mkdir -p copr-logs
+copr-cli download-build --dest copr-logs "$BUILD_ID" || {
+  echo "warning: failed to download build artifacts" >&2
+}
+
+# Dump each chroot's builder-live.log as a collapsible group.
+for chroot_dir in copr-logs/*/; do
+  [ -d "$chroot_dir" ] || continue
+  chroot=$(basename "$chroot_dir")
+  log="${chroot_dir}builder-live.log"
+  if [ -f "$log" ]; then
+    echo
+    echo "::group::${chroot} builder-live.log"
+    cat "$log"
+    echo "::endgroup::"
+  fi
+done
+
+exit "$STATUS"

.gitea/workflows/ci.yml

@@ -168,34 +168,40 @@ jobs:
     runs-on: fedora
     needs: srpm-cortex
     steps:
+      - uses: actions/checkout@v4
+
       - name: Download SRPM
         uses: actions/download-artifact@v3
         with:
           name: srpm-cortex
 
-      - name: Publish to COPR
-        uses: https://git.lair.cafe/actions/copr-publish@v1
-        with:
-          project: helexa/cortex
-          srpm: "*.src.rpm"
-          copr-config: ${{ secrets.COPR_CONFIG }}
+      - name: Configure copr-cli
+        run: |
+          mkdir -p ~/.config
+          echo "${{ secrets.COPR_CONFIG }}" > ~/.config/copr
+
+      - name: Submit build to COPR
+        run: bash .gitea/scripts/copr-build.sh helexa/cortex *.src.rpm
 
   copr-neuron:
     name: Publish neuron to COPR
     runs-on: fedora
     needs: srpm-neuron
     steps:
+      - uses: actions/checkout@v4
+
       - name: Download SRPM
         uses: actions/download-artifact@v3
         with:
           name: srpm-neuron
 
-      - name: Publish to COPR
-        uses: https://git.lair.cafe/actions/copr-publish@v1
-        with:
-          project: helexa/neuron
-          srpm: "*.src.rpm"
-          copr-config: ${{ secrets.COPR_CONFIG }}
+      - name: Configure copr-cli
+        run: |
+          mkdir -p ~/.config
+          echo "${{ secrets.COPR_CONFIG }}" > ~/.config/copr
+
+      - name: Submit build to COPR
+        run: bash .gitea/scripts/copr-build.sh helexa/neuron *.src.rpm
 
   bump-version:
     name: Bump version in source

Cargo.lock

@@ -351,7 +351,7 @@ checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
 
 [[package]]
 name = "cortex-cli"
-version = "0.1.3"
+version = "0.1.2"
 dependencies = [
  "anyhow",
  "clap",
@@ -366,7 +366,7 @@ dependencies = [
 
 [[package]]
 name = "cortex-core"
-version = "0.1.3"
+version = "0.1.2"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -381,7 +381,7 @@ dependencies = [
 
 [[package]]
 name = "cortex-gateway"
-version = "0.1.3"
+version = "0.1.2"
 dependencies = [
  "anyhow",
  "axum",
@@ -1184,7 +1184,7 @@ dependencies = [
 
 [[package]]
 name = "neuron"
-version = "0.1.3"
+version = "0.1.2"
 dependencies = [
  "anyhow",
  "async-trait",

Cargo.toml

@@ -8,7 +8,7 @@ members = [
 ]
 
 [workspace.package]
-version = "0.1.3"
+version = "0.1.2"
 edition = "2024"
 license = "GPL-3.0-or-later"
 repository = "https://git.lair.cafe/helexa/cortex"

cortex.spec

@@ -1,5 +1,5 @@
 Name:           cortex
-Version:        0.1.3
+Version:        0.1.2
 Release:        1%{?dist}
 Summary:        Inference gateway for multi-node GPU clusters
 

neuron.spec

@@ -1,5 +1,5 @@
 Name:           neuron
-Version:        0.1.3
+Version:        0.1.2
 Release:        1%{?dist}
 Summary:        Per-node GPU discovery and harness management daemon for cortex