[CI] Automated ISO build and publish workflow

[mikejmorgan-ai]

Summary

Need GitHub Actions workflow to automatically build and publish ISOs on release.

Current State

• Manual ISO build via scripts/build.sh or make iso
• No automated publishing to GitHub Releases
• .github/workflows/ exists but needs ISO release workflow

Required Workflow

Trigger

• On tag push (v*)
• Manual dispatch with version input

Jobs

1. Build ISO

   • Run on Ubuntu runner or self-hosted Debian
   • Install live-build dependencies
   • Build offline ISO variant
   • Generate SHA256 checksum
   • Generate SBOM

2. Publish Release

   • Create GitHub Release with tag
   • Upload ISO, checksum, SBOM
   • Generate release notes from changelog

3. Verify

   • Boot ISO in QEMU (smoke test)
   • Verify checksum matches

Files to Create

• .github/workflows/release-iso.yml

Priority

P0 - Critical

Acceptance Criteria

• Tag push triggers ISO build
• ISO uploaded to GitHub Releases
• Checksum and SBOM included
• Release notes auto-generated

[Darshan3690]

I’m interested in working on this issue.

I can implement the GitHub Actions workflow to build the ISO on tag push, generate the checksum and SBOM, run a QEMU smoke test, and publish the ISO with release notes to GitHub Releases.
@mikejmorgan-ai I’d like to take this up under the bounty program.

[0xBigotry7]

Progress Update:

Workflow exists at .github/workflows/build-iso.yml:

• ✅ Triggers: push to main/tags, PR, workflow_dispatch
• ✅ Debian package builds working
• ⏳ ISO build temporarily disabled (needs live-build configuration)

Next steps for full ISO automation:

1. Configure live-build in the repo
2. Enable ISO build job in workflow
3. Add GitHub Release publishing step

Keeping open until full ISO publishing is implemented.