fix: update binary migration to ~/.verda/bin (#18)

* fix: update old binary in-place during migration to ~/.verda/bin

When the running binary is outside ~/.verda/bin/ (e.g. /usr/local/bin),
the update command now also replaces the old binary so the user gets
the new version immediately regardless of PATH order. Prints clear
instructions to add ~/.verda/bin to PATH and remove the old binary.

This handles the migration path from pre-migration releases where
verda update installed in-place at the old location.


* fix: detect package-manager installs and skip in-place binary update

When the running binary is managed by Homebrew, apt, rpm, apk, or
Scoop, don't overwrite it — advise the user to use their package
manager instead. Only replace in-place for manual installations
(curl, direct download to /usr/local/bin).


* fix: upgrade verdagostack to v1.1.3 and add package release configs

Upgrade verdagostack to v1.1.3 which fixes wizard back-navigation:
- Esc in Loader-managed steps (SSH keys, storage, startup script) now
  goes back instead of cancelling the wizard
- Back navigates to the immediate prior step instead of skipping all
  completed steps

Add goreleaser configs for Homebrew tap, Scoop bucket, and Linux
packages (deb/rpm/apk).

* docs: add package install methods to README and rename release test

Add Homebrew, Scoop, and Linux package (deb/rpm/apk) install sections
to README. Fix OS image in the non-interactive example. Rename
install-test.sh to test-release-packages.sh for clarity.

* fix: configure HOMEBREW_TAP_TOKEN for brew/scoop release

Add token config to goreleaser brews/scoops sections and pass
HOMEBREW_TAP_TOKEN secret in the release workflow so goreleaser
can push formula/manifest to the homebrew-tap repo.

Author: hi-lei

.github/workflows/release.yml

@@ -74,6 +74,7 @@ jobs:
           args: release --clean --release-notes RELEASE_NOTES.md
         env:
           GITHUB_TOKEN: ${{ secrets.RELEASE_TOKEN }}
+          HOMEBREW_TAP_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }}
 
       - name: Generate binary checksums
         run: |

.goreleaser.yml

@@ -32,5 +32,65 @@ archives:
 checksum:
   name_template: verda_{{ .Version }}_SHA256SUMS
 
+brews:
+  - repository:
+      owner: verda-cloud
+      name: homebrew-tap
+      token: "{{ .Env.HOMEBREW_TAP_TOKEN }}"
+    directory: Formula
+    homepage: https://github.com/verda-cloud/verda-cli
+    description: Verda CLI
+    license: Apache-2.0
+
+scoops:
+  - repository:
+      owner: verda-cloud
+      name: homebrew-tap
+      token: "{{ .Env.HOMEBREW_TAP_TOKEN }}"
+    directory: bucket
+    homepage: https://github.com/verda-cloud/verda-cli
+    description: Verda CLI
+    license: Apache-2.0
+
+nfpms:
+  - id: verda
+    package_name: verda
+    homepage: https://github.com/verda-cloud/verda-cli
+    maintainer: Verda Cloud <support@verda.cloud>
+    description: Verda CLI
+    license: Apache-2.0
+    formats:
+      - deb
+      - rpm
+      - apk
+    bindir: /usr/bin
+
+# aurs:
+#   - name: verda-bin
+#     homepage: https://github.com/verda-cloud/verda-cli
+#     description: Verda CLI
+#     maintainers:
+#       - Verda Cloud <support@verda.cloud>
+#     license: Apache-2.0
+#     private_key: "{{ .Env.AUR_KEY }}"
+#     git_url: ssh://aur@aur.archlinux.org/verda-bin.git
+#     url_template: "https://github.com/verda-cloud/verda-cli/releases/download/{{ .Tag }}/{{ .ArtifactName }}"
+
+# winget:
+#   - name: verda
+#     publisher: verda-cloud
+#     publisher_url: https://verda.cloud
+#     short_description: Verda CLI
+#     license: Apache-2.0
+#     repository:
+#       owner: verda-cloud
+#       name: winget-pkgs
+#       pull_request:
+#         enabled: true
+#         base:
+#           owner: microsoft
+#           name: winget-pkgs
+#           branch: master
+
 # Release notes are provided by git-cliff via --release-notes flag.
 # Do NOT set changelog.disable: true — it also ignores --release-notes.

README.md

@@ -20,6 +20,34 @@ Install to a custom directory:
 VERDA_INSTALL_DIR=~/.local/bin curl -sSL https://raw.githubusercontent.com/verda-cloud/verda-cli/main/scripts/install.sh | sh
 ```
 
+### Homebrew (macOS / Linux)
+
+```bash
+brew install verda-cloud/tap/verda
+```
+
+### Scoop (Windows)
+
+```powershell
+scoop bucket add verda https://github.com/verda-cloud/homebrew-tap
+scoop install verda
+```
+
+### Linux packages (deb / rpm / apk)
+
+Download `.deb`, `.rpm`, or `.apk` packages from [GitHub Releases](https://github.com/verda-cloud/verda-cli/releases):
+
+```bash
+# Debian / Ubuntu
+sudo dpkg -i verda_VERSION_linux_amd64.deb
+
+# RHEL / Fedora
+sudo rpm -i verda_VERSION_linux_amd64.rpm
+
+# Alpine
+sudo apk add --allow-untrusted verda_VERSION_linux_amd64.apk
+```
+
 ### Manual download
 
 Download the binary for your platform from [GitHub Releases](https://github.com/verda-cloud/verda-cli/releases):
@@ -79,7 +107,7 @@ verda vm create \
   --kind gpu \
   --instance-type 1V100.6V \
   --location FIN-01 \
-  --os ubuntu-24.04-cuda-12.8-open-docker \
+  --os ubuntu-24.04-cuda-13.0-open-docker \
   --os-volume-size 100 \
   --hostname gpu-runner
 ```

go.mod

@@ -9,7 +9,7 @@ require (
 	github.com/spf13/pflag v1.0.10
 	github.com/spf13/viper v1.21.0
 	github.com/verda-cloud/verdacloud-sdk-go v1.4.2
-	github.com/verda-cloud/verdagostack v1.1.2
+	github.com/verda-cloud/verdagostack v1.1.3
 	go.yaml.in/yaml/v3 v3.0.4
 )
 

go.sum

@@ -104,8 +104,8 @@ github.com/subosito/gotenv v1.6.0 h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8
 github.com/subosito/gotenv v1.6.0/go.mod h1:Dk4QP5c2W3ibzajGcXpNraDfq2IrhjMIvMSWPKKo0FU=
 github.com/verda-cloud/verdacloud-sdk-go v1.4.2 h1:oVb8fHVQOY+YPuuMYMee9gYCkPTwAw01LmkqxM21T/Y=
 github.com/verda-cloud/verdacloud-sdk-go v1.4.2/go.mod h1:pmlpiCL9fTSikZ3qWLJPpHOG0E8PKkQVUX5s4Z+SktY=
-github.com/verda-cloud/verdagostack v1.1.2 h1:J/TL9CPDnbLuUgd5Lj0ppNmTG1iXuMq4L9gT+H5vwrI=
-github.com/verda-cloud/verdagostack v1.1.2/go.mod h1:9uKLNxvH7JRkHj2sxZc4TI5O/JbbveCrLkOkekoY/sA=
+github.com/verda-cloud/verdagostack v1.1.3 h1:aJy8ixF5KR3bDy5k5n1fpEHKgZxCIt/FAH+HAvNidSM=
+github.com/verda-cloud/verdagostack v1.1.3/go.mod h1:9uKLNxvH7JRkHj2sxZc4TI5O/JbbveCrLkOkekoY/sA=
 github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e h1:JVG44RsyaB9T2KIHavMF/ppJZNG9ZpyihvCd0w101no=
 github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e/go.mod h1:RbqR21r5mrJuqunuUZ/Dhy/avygyECGrLceyNeo4LiM=
 github.com/yosida95/uritemplate/v3 v3.0.2 h1:Ed3Oyj9yrmi9087+NczuL5BwkIc4wvTb5zIM+UJPGz4=

internal/verda-cli/cmd/update/update.go

@@ -158,14 +158,31 @@ func runUpdate(ctx context.Context, f cmdutil.Factory, ioStreams cmdutil.IOStrea
 
 	_, _ = fmt.Fprintf(ioStreams.Out, "Updated to %s\n", target)
 
-	// Warn if old binary exists in a system path.
+	// Migrate: if the currently running binary is outside ~/.verda/bin/,
+	// handle the old location based on how it was installed.
 	oldExe, _ := resolveExecutable()
 	if oldExe != "" && oldExe != dst {
-		_, _ = fmt.Fprintf(ioStreams.ErrOut,
-			"\nNote: old binary still exists at %s\n"+
-				"  Remove it to avoid conflicts: sudo rm %s\n"+
-				"  Ensure %s is in your PATH.\n",
-			oldExe, oldExe, binDir)
+		if isManagedByPackageManager(oldExe) {
+			// Installed via Homebrew, apt, rpm, etc. — don't touch it.
+			// Let the package manager handle upgrades for that path.
+			_, _ = fmt.Fprintf(ioStreams.ErrOut,
+				"\nNote: %s appears to be managed by a package manager.\n"+
+					"  Future updates via 'verda update' will install to %s.\n"+
+					"  Use your package manager to update or remove the old binary.\n",
+				oldExe, dst)
+		} else {
+			// Manual install (curl, manual download) — safe to replace in-place.
+			if err := replaceBinary(oldExe, binary); err != nil {
+				_, _ = fmt.Fprintf(ioStreams.ErrOut,
+					"\nWarning: could not update old binary at %s: %v\n", oldExe, err)
+			}
+
+			_, _ = fmt.Fprintf(ioStreams.ErrOut,
+				"\nNote: verda is now installed at %s\n"+
+					"  Add it to your PATH:  export PATH=\"%s:$PATH\"\n"+
+					"  Then remove the old binary:  sudo rm %s\n",
+				dst, binDir, oldExe)
+		}
 	}
 
 	return nil
@@ -314,6 +331,28 @@ func readZipEntry(f *zip.File) ([]byte, error) {
 	return io.ReadAll(rc)
 }
 
+// isManagedByPackageManager returns true if the binary path looks like it was
+// installed by a package manager (Homebrew, apt/dpkg, rpm, apk, Scoop).
+func isManagedByPackageManager(exePath string) bool {
+	managedPrefixes := []string{
+		"/opt/homebrew/",     // Homebrew (Apple Silicon)
+		"/usr/local/Cellar/", // Homebrew (Intel Mac)
+		"/home/linuxbrew/",   // Homebrew (Linux)
+		"/usr/bin/",          // apt/dpkg, rpm, apk system packages
+		"/snap/",             // Snap packages
+	}
+	for _, prefix := range managedPrefixes {
+		if strings.HasPrefix(exePath, prefix) {
+			return true
+		}
+	}
+	// Scoop on Windows: ~/scoop/apps/
+	if runtime.GOOS == osWindows && strings.Contains(exePath, `\scoop\apps\`) {
+		return true
+	}
+	return false
+}
+
 // --- Binary replacement ---
 
 func resolveExecutable() (string, error) {

test/test-release-packages.sh

@@ -0,0 +1,59 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+DIST_DIR="${1:-dist}"
+PASS=0
+FAIL=0
+
+run_test() {
+  local name="$1"
+  shift
+  echo "=== Testing: ${name} ==="
+  if "$@"; then
+    echo "--- PASS: ${name}"
+    ((PASS++))
+  else
+    echo "--- FAIL: ${name}"
+    ((FAIL++))
+  fi
+  echo
+}
+
+# Snapshot build (skip if dist already exists)
+if [ ! -d "${DIST_DIR}" ]; then
+  echo "=== Building snapshot ==="
+  goreleaser release --snapshot --clean
+  echo
+fi
+
+# deb (Ubuntu)
+run_test "deb/ubuntu" docker run --rm -v "${PWD}/${DIST_DIR}:/dist:ro" ubuntu:24.04 sh -c '
+  dpkg -i /dist/verda_*_linux_amd64.deb && verda version
+'
+
+# rpm (Fedora)
+run_test "rpm/fedora" docker run --rm -v "${PWD}/${DIST_DIR}:/dist:ro" fedora:41 sh -c '
+  rpm -i /dist/verda_*_linux_amd64.rpm && verda version
+'
+
+# apk (Alpine)
+run_test "apk/alpine" docker run --rm -v "${PWD}/${DIST_DIR}:/dist:ro" alpine:3.20 sh -c '
+  apk add --allow-untrusted /dist/verda_*_linux_amd64.apk && verda version
+'
+
+# tar.gz binary
+run_test "tar.gz/binary" docker run --rm -v "${PWD}/${DIST_DIR}:/dist:ro" ubuntu:24.04 sh -c '
+  tar xzf /dist/verda_*_linux_amd64.tar.gz -C /usr/local/bin && verda version
+'
+
+# Homebrew (only works after a real release)
+if [ "${TEST_HOMEBREW:-}" = "1" ]; then
+  run_test "homebrew" docker run --rm homebrew/brew sh -c '
+    brew tap verda-cloud/tap && brew install verda && verda version
+  '
+fi
+
+# Scoop (skip — no good container option for Windows)
+
+echo "=== Results: ${PASS} passed, ${FAIL} failed ==="
+[ "${FAIL}" -eq 0 ]