Create & release standalone binaries

Fixes #701

Author: spoorcc

.github/workflows/build.yml

@@ -0,0 +1,82 @@
+name: Build
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: read
+
+jobs:
+
+  build:
+    strategy:
+      matrix:
+        platform: [ubuntu-latest] #, macos-latest, windows-latest]
+    runs-on: ${{ matrix.platform }}
+    permissions:
+      contents: read
+      security-events: write
+
+    steps:
+      - name: Harden the runner (Audit all outbound calls)
+        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
+        with:
+          egress-policy: audit
+
+      - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493 # v5.0.0
+
+      - name: Setup Python
+        uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
+        with:
+          python-version: '3.14'
+
+      - name: Install patchelf (patchelf)
+        if: matrix.platform == 'ubuntu-latest'
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y patchelf=0.12-1 ccache=4.2-1
+
+      # - name: Install Subversion (SVN)
+      #   if: matrix.platform == 'macos-latest'
+      #   run: |
+      #     brew install svn
+      #     svn --version  # Verify installation
+
+      # - name: Install Subversion (SVN)
+      #   if: matrix.platform == 'windows-latest'
+      #   run: |
+      #     choco install svn -y
+      #     $env:PATH = "C:\Program Files (x86)\Subversion\bin;$env:PATH"
+      #     echo "C:\Program Files (x86)\Subversion\bin" >> $env:GITHUB_PATH
+      #     svn --version  # Verify installation
+
+      - name: Create binary
+        run: |
+          pip install .[build]
+          python script/build.py
+
+      - name: Store the distribution packages
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        with:
+          name: binary-distribution
+          path: build/dfetch
+
+      - run: build/dfetch environment
+      - run: build/dfetch validate
+      - run: build/dfetch check
+      - run: build/dfetch update
+      - run: build/dfetch update
+      - run: build/dfetch report -t sbom
+
+      - name: Run example
+        working-directory: ./example
+        env:
+          CI: 'false'
+        run: |
+            build/dfetch update
+            build/dfetch update
+            build/dfetch report

pyproject.toml

@@ -170,3 +170,20 @@ standard = ["dfetch", "features"]
 reportMissingImports = false
 reportMissingModuleSource = false
 pythonVersion = "3.9"
+
+[tool.nuitka]
+mode = "standalone" # Switch this between standalone and onefile as needed
+jobs = "4"
+assume-yes-for-downloads = true
+
+# Include data files (local path = target path in standalone)
+include-data-dir = [{ source = "dfetch/resources", destination = "resources" }]
+
+output-dir = "build"
+output-filename-win = "dfetch.exe"
+output-filename-linux = "dfetch"
+output-filename-macos = "dfetch"
+
+# windows-icon-from-ico = "static/favicon.ico"
+# windows-company-name = "dfetch-org"
+show-progress = true

script/build.py

@@ -0,0 +1,61 @@
+#!/usr/bin/env python3
+"""This script builds the dfetch executable using Nuitka."""
+import os
+import subprocess
+import sys
+import tomllib as toml
+from typing import Union
+
+
+def parse_option(
+    option_name: str, option_value: Union[bool, str, list, dict]
+) -> list[str]:
+    """
+    Convert a config value to CLI args for Nuitka.
+    Handles booleans, strings, lists, and nested dicts.
+    """
+    args = []
+    cli_key = f"--{option_name.replace('_','-')}"
+
+    if isinstance(option_value, bool):
+        if option_value:
+            args.append(cli_key)
+    elif isinstance(option_value, str):
+        args.append(f"{cli_key}={option_value}")
+    elif isinstance(option_value, list):
+        for v in option_value:
+            if isinstance(v, dict):
+                parts = [f"{v[k]}" for k in v]
+                args.append(f"{cli_key}={'='.join(parts)}")
+            else:
+                args.append(f"{cli_key}={v}")
+    else:
+        args.append(f"{cli_key}={option_value}")
+
+    return args
+
+
+# Load pyproject.toml
+with open("pyproject.toml", "r", encoding="UTF-8") as pyproject_file:
+    pyproject = toml.loads(pyproject_file.read())
+nuitka_opts = pyproject.get("tool", {}).get("nuitka", {})
+
+
+if sys.platform.startswith("win"):
+    nuitka_opts["output-filename"] = nuitka_opts["output-filename-win"]
+elif sys.platform.startswith("linux"):
+    nuitka_opts["output-filename"] = nuitka_opts["output-filename-linux"]
+elif sys.platform.startswith("darwin"):
+    nuitka_opts["output-filename"] = nuitka_opts["output-filename-macos"]
+
+for key in ["output-filename-win", "output-filename-linux", "output-filename-macos"]:
+    nuitka_opts.pop(key, None)
+
+command = [sys.executable, "-m", "nuitka"]
+for key, value in nuitka_opts.items():
+    command.extend(parse_option(key, value))
+
+command.append(os.path.join("dfetch", "__main__.py"))
+
+print(command)
+subprocess.check_call(command)