Skip to content
zoryn/ maintainer-assistant

zoryn — ALT Linux maintainer assistant

Zoryn drives a package from upstream release to a sisyphus build — automating what can be automated while keeping you in control of the process.

The name comes from an ancient root meaning light and clear sight. Zoryn helps you see through the maze of upstream releases, spec files and build queues.

At the core — two commands: zoryn up → zoryn submit. Everything else is auxiliary.

InstallQuick startCommands

Guide

Start here if you're setting zoryn up for the first time or scaling a build farm.

  • Installation — apt-get install zoryn on Sisyphus, or build from source with dune.
  • Quick start — bootstrap ~/.zoryn and the full per-package cycle in six commands.
  • Configuration — ~/.zoryn, builder configs, per-package .gear/version-up, CVE sources, merge hints.
  • Build farm — adding remote hashers, parallel local hashers, worked examples for 3/4/5 architectures.
  • Hooks — scripts in .gear/merge-up.d/ and .gear/up.d/, log highlighting, environment.
  • Sandbox — hybrid / bwrap / direct runners to keep ~/.ssh and ~/.gnupg safe.
  • Batch configs — describe groups of related packages (PHP extensions, OCaml toolchains) that build together.

Commands

Every zoryn subcommand, grouped by purpose — see the full reference.

  • Packaging: clone, up, commit, submit.
  • Build: build, builder.
  • Tasks: task — new, ls, show, add, run, abort, approve, download, delete, refresh, rebuild, test-rebuild, batch, manage, …
  • Checks: check — version, upstream, spec, packages, version-up.
  • Spec & tags: spec, tag.
  • Generators: gen — opam2spec, pypi2spec, watch, environment, version-up.

What zoryn does

  • zoryn up — full update pipeline: fetch → merge → spec → changelog → build. State-aware with --continue / --abort.
  • Build anywhere — local and remote hasher machines, @all / @host:basalt patterns, --top TUI for live monitoring.
  • Task management — task new / add / run / approve, interactive TUI, state columns, syntax-highlighted logs.
  • Pre-submit checks — spec validation, CVE scan, sisyphus_check, Bugzilla bug-closure verification.
  • Generators — opam2spec, pypi2spec, watch, version-up, environment — spec + .gear from two commands.
  • Sandboxed hooks — hooks from .gear/*.d/ run in bwrap + hasher chroot; your ~/.ssh and ~/.gnupg stay safe.

A typical maintainer day

Two core commands plus a handful of helpers — from "a new release dropped" to a sisyphus subtask:

$ zoryn clone libnghttp2
$ zoryn up
$ zoryn submit --run
$ zoryn task manage