deployment: Publish OS packages to cloudsmith (#2105)

* deployment: Publish OS packages to cloudsmith

.github/workflows/release.yaml

@@ -56,26 +56,25 @@ jobs:
           echo ::set-output name=tag::${TAG}
           echo ::set-output name=version::${TAG#v}
 
-      - name: Install jfrog cli
+      - name: Install Cloudsmith CLI
-        uses: jfrog/setup-jfrog-cli@v1
-
-      - name: Configure jfrog cli
         run: |
-          jfrog bt config --user ${{ secrets.BINTRAY_USER }} --key ${{ secrets.BINTRAY_KEY }}
+          pip3 install cloudsmith-cli
 
-      - name: Upload packages to bintray beta channel
+      - name: Publish to Cloudsmith
-        if: "contains(steps.tagName.outputs.version, 'rc') == 1"
+        env:
+          CLOUDSMITH_API_KEY: ${{ secrets.CLOUDSMITH_API_KEY }}
+        working-directory: dist/
         run: |
           VERSION=${{ steps.tagName.outputs.version }}
-          jfrog bt upload --publish dist/pomerium-${VERSION}-1.x86_64.rpm pomerium/enterprise-yum/pomerium/${VERSION} centos/8/x86_64/beta/
+          RPMS="pomerium-${VERSION}-1.x86_64.rpm pomerium-${VERSION}-1.aarch64.rpm pomerium-cli-${VERSION}-1.aarch64.rpm pomerium-cli-${VERSION}-1.x86_64.rpm pomerium-cli-${VERSION}-1.armhf.rpm"
-          jfrog bt upload --publish dist/pomerium-cli-${VERSION}-1.x86_64.rpm pomerium/enterprise-yum/pomerium/${VERSION} centos/8/x86_64/beta/
+          for pkg in $(echo $RPMS); do
+            cloudsmith push rpm pomerium/pomerium/el/any-version $pkg
+          done
 
-      - name: Upload packages to bintray stable channel
+          DEBS="pomerium-cli_${VERSION}-1_amd64.deb pomerium-cli_${VERSION}-1_arm64.deb pomerium-cli_${VERSION}-1_armhf.deb pomerium_${VERSION}-1_amd64.deb pomerium_${VERSION}-1_arm64.deb"
-        if: "contains(steps.tagName.outputs.version, 'rc') == 0"
+          for pkg in $(echo $DEBS); do
-        run: |
+            cloudsmith push deb pomerium/pomerium/debian/any-version $pkg
-          VERSION=${{ steps.tagName.outputs.version }}
+          done
-          jfrog bt upload --publish dist/pomerium-${VERSION}-1.x86_64.rpm pomerium/enterprise-yum/pomerium/${VERSION} centos/8/x86_64/stable/
-          jfrog bt upload --publish dist/pomerium-cli-${VERSION}-1.x86_64.rpm pomerium/enterprise-yum/pomerium/${VERSION} centos/8/x86_64/stable/
 
       - name: Find latest tag
         id: latestTag

docs/docs/installation.md

@@ -37,7 +37,30 @@ curl -L https://github.com/pomerium/pomerium/releases/download/${VERSION}/pomeri
 - Supported formats: `rpm`, `deb`
 - Requires `systemd` support
 
-Official packages can be found on our [GitHub Releases](https://github.com/pomerium/pomerium/releases) page.
+Official packages can be found on our [GitHub Releases](https://github.com/pomerium/pomerium/releases) page or from [Cloudsmith](https://cloudsmith.io/~pomerium/repos/pomerium/packages/).
+
+- [RPM Instructions](https://cloudsmith.io/~pomerium/repos/pomerium/setup/#formats-rpm)
+- [Deb Instructions](https://cloudsmith.io/~pomerium/repos/pomerium/setup/#formats-deb)
+
+#### Example yum repo
+
+```
+[pomerium-pomerium]
+name=pomerium-pomerium
+baseurl=https://dl.cloudsmith.io/public/pomerium/pomerium/rpm/el/$releasever/$basearch
+repo_gpgcheck=1
+enabled=1
+gpgkey=https://dl.cloudsmith.io/public/pomerium/pomerium/gpg.6E388440B94E1407.key
+gpgcheck=1
+sslverify=1
+pkg_gpgcheck=1
+```
+#### Example deb setup
+
+```bash
+curl -1sLf 'https://dl.cloudsmith.io/public/pomerium/pomerium/gpg.6E388440B94E1407.key' | apt-key add -
+echo "deb https://dl.cloudsmith.io/public/pomerium/pomerium/deb/debian buster main" > /etc/apt/sources.list.d/pomerium-pomerium.list
+```
 
 ### Docker Image
 
@@ -110,8 +133,30 @@ curl -L https://github.com/pomerium/pomerium/releases/download/${VERSION}/pomeri
 
 - Supported formats: `rpm`, `deb`
 
-Official packages can be found on our [GitHub Releases](https://github.com/pomerium/pomerium/releases) page.
+Official packages can be found on our [GitHub Releases](https://github.com/pomerium/pomerium/releases) page or from [Cloudsmith](https://cloudsmith.io/~pomerium/repos/pomerium/packages/).
 
+- [RPM Instructions](https://cloudsmith.io/~pomerium/repos/pomerium/setup/#formats-rpm)
+- [Deb Instructions](https://cloudsmith.io/~pomerium/repos/pomerium/setup/#formats-deb)
+
+#### Example yum repo
+
+```
+[pomerium-pomerium]
+name=pomerium-pomerium
+baseurl=https://dl.cloudsmith.io/public/pomerium/pomerium/rpm/el/$releasever/$basearch
+repo_gpgcheck=1
+enabled=1
+gpgkey=https://dl.cloudsmith.io/public/pomerium/pomerium/gpg.6E388440B94E1407.key
+gpgcheck=1
+sslverify=1
+pkg_gpgcheck=1
+```
+#### Example deb setup
+
+```bash
+curl -1sLf 'https://dl.cloudsmith.io/public/pomerium/pomerium/gpg.6E388440B94E1407.key' | apt-key add -
+echo "deb https://dl.cloudsmith.io/public/pomerium/pomerium/deb/debian buster main" > /etc/apt/sources.list.d/pomerium-pomerium.list
+```
 ### Homebrew
 
 ```shell