packaging: GoReleaser for apt (.deb) and brew (self-hosted tap), no rpm

- .goreleaser.yaml replaces the hand-rolled release job: cross-platform tarballs
  (scp-and-run unchanged) + .deb with a hardened systemd unit + auto-updated
  Homebrew tap at githubflyideas/homebrew-tap
- brew install githubflyideas/tap/pingping  |  dpkg -i pingping_*_amd64.deb
- TAP_TOKEN secret wired so the tap formula updates itself on each release

Author: githubflyideas

.github/workflows/release.yml

@@ -5,40 +5,17 @@ on:
 permissions:
   contents: write
 jobs:
-  build:
+  goreleaser:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+        with: { fetch-depth: 0 }
       - uses: actions/setup-go@v5
+        with: { go-version: '1.22' }
+      - uses: goreleaser/goreleaser-action@v6
         with:
-          go-version: '1.22'
-      - name: test
-        run: go test ./...
-      - name: build & package
-        run: |
-          set -e
-          for target in linux/amd64 linux/arm64 darwin/amd64 darwin/arm64; do
-            GOOS=${target%/*}; GOARCH=${target#*/}
-            dir="pingping-${GITHUB_REF_NAME}-${GOOS}-${GOARCH}"
-            mkdir -p "$dir"
-            CGO_ENABLED=0 GOOS=$GOOS GOARCH=$GOARCH \
-              go build -trimpath -ldflags "-s -w -X main.version=${GITHUB_REF_NAME}" \
-              -o "$dir/pingping" .
-            cp LICENSE clean.sh "$dir/"
-            tar czf "$dir.tar.gz" "$dir"
-          done
-          sha256sum pingping-*.tar.gz > SHA256SUMS
-      - uses: softprops/action-gh-release@v2
-        with:
-          files: |
-            pingping-*.tar.gz
-            SHA256SUMS
-          body: |
-            ## 开箱即用
-            ```bash
-            tar xzf pingping-*.tar.gz && cd pingping-*/
-            ./pingping
-            ```
-            首次运行自动生成演示配置(探测 www.baidu.com),打开 http://localhost:8517 即见烟雾图。
-            Linux 静态编译,所有发行版通用;非 root 运行若提示无法创建 ICMP socket,执行
-            `sudo setcap cap_net_raw+ep ./pingping` 或放开 `net.ipv4.ping_group_range`。
+          version: '~> v2'
+          args: release --clean
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          TAP_TOKEN: ${{ secrets.TAP_TOKEN }}

.goreleaser.yaml

@@ -0,0 +1,85 @@
+# GoReleaser — one config produces: cross-platform tarballs, .deb packages (apt/dpkg),
+# and an auto-updated Homebrew tap. No rpm. Zero-dependency single binary, so packaging
+# stays trivial. Run `goreleaser release` on tag push via CI.
+version: 2
+
+project_name: pingping
+
+before:
+  hooks:
+    - go test ./...
+
+builds:
+  - id: pingping
+    main: .
+    binary: pingping
+    env:
+      - CGO_ENABLED=0
+    flags:
+      - -trimpath
+    ldflags:
+      - -s -w -X main.version={{ .Version }}
+    goos: [linux, darwin]
+    goarch: [amd64, arm64]
+
+# Tarballs for the "scp and run" crowd — unchanged experience, plus LICENSE and clean.sh.
+archives:
+  - id: tar
+    formats: [tar.gz]
+    name_template: "{{ .ProjectName }}-v{{ .Version }}-{{ .Os }}-{{ .Arch }}"
+    files:
+      - LICENSE
+      - clean.sh
+
+checksum:
+  name_template: "SHA256SUMS"
+
+# .deb only (apt / dpkg). Static binary → no dependencies, ships a systemd unit.
+nfpms:
+  - id: deb
+    package_name: pingping
+    formats: [deb]
+    maintainer: githubflyideas <githubflyideas@users.noreply.github.com>
+    description: Single-binary link quality oscilloscope (modern SmokePing alternative).
+    homepage: https://github.com/githubflyideas/pingping
+    license: Apache-2.0
+    bindir: /usr/bin
+    contents:
+      - src: clean.sh
+        dst: /usr/share/pingping/clean.sh
+      - src: packaging/pingping.service
+        dst: /lib/systemd/system/pingping.service
+        type: config
+
+# Homebrew: pushed to githubflyideas/homebrew-tap → `brew install githubflyideas/tap/pingping`.
+brews:
+  - name: pingping
+    repository:
+      owner: githubflyideas
+      name: homebrew-tap
+      token: "{{ .Env.TAP_TOKEN }}"
+    directory: Formula
+    homepage: https://github.com/githubflyideas/pingping
+    description: Single-binary link quality oscilloscope (modern SmokePing alternative).
+    license: Apache-2.0
+    install: |
+      bin.install "pingping"
+    test: |
+      system "#{bin}/pingping", "-version"
+
+release:
+  github:
+    owner: githubflyideas
+    name: pingping
+  header: |
+    ## Install
+
+    **Homebrew** (macOS/Linux):
+    ```bash
+    brew install githubflyideas/tap/pingping
+    ```
+    **Debian/Ubuntu** (.deb):
+    ```bash
+    dpkg -i pingping_*_linux_amd64.deb   # then: systemctl enable --now pingping
+    ```
+    **Or just scp and run** — download a tarball below, extract, `./pingping`. Zero dependencies.

packaging/pingping.service

@@ -0,0 +1,21 @@
+[Unit]
+Description=pingping — link quality oscilloscope
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+# Runs from its own dir so data/ and targets/ live under /var/lib/pingping.
+WorkingDirectory=/var/lib/pingping
+ExecStart=/usr/bin/pingping
+Restart=on-failure
+RestartSec=5
+DynamicUser=yes
+StateDirectory=pingping
+AmbientCapabilities=CAP_NET_RAW
+# Hardening
+NoNewPrivileges=yes
+ProtectSystem=strict
+ProtectHome=yes
+
+[Install]
+WantedBy=multi-user.target