fix(build): make AppImages installable via Gear Lever, fix bundling on Arch

.github/workflows/release.yml

@@ -73,6 +73,9 @@ jobs:
           TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
           TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
           LDAI_UPDATE_INFORMATION: ${{ contains(matrix.platform, 'ubuntu') && 'gh-releases-zsync|tonhowtf|omniget|latest|*AppImage.zsync' || '' }}
+          # linuxdeploy bundles an old `strip` that fails on modern .relr.dyn
+          # relocations; disable stripping so AppImage bundling succeeds.
+          NO_STRIP: ${{ contains(matrix.platform, 'ubuntu') && '1' || '' }}
           NODE_OPTIONS: --max-old-space-size=6144
         with:
           tagName: v__VERSION__

README.md

@@ -381,6 +381,8 @@ Production build:
 pnpm tauri build --config '{"bundle":{"createUpdaterArtifacts":false}}'
 ```
 
+On Linux, use `pnpm tauri:appimage` instead (wraps the same flag, skips the strip step that fails on `.relr.dyn`, uses a patched `linuxdeploy-plugin-gtk.sh` that works on Arch).
+
 Releases sign their updater artifacts with a private key only the maintainers hold, so a plain `pnpm tauri build` stops at the bundling step with *"A public key has been found, but no private key"*. The flag above turns those artifacts off for your local build — everything else is identical. It is passed on the command line rather than committed to `tauri.conf.json` on purpose: a config that disables them by default would silently ship a release with no signatures and break the auto-updater for everyone.
 
 ### Command line interface

package.json

@@ -11,6 +11,7 @@
     "check": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json",
     "check:watch": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json --watch",
     "tauri": "tauri",
+    "tauri:appimage": "bash scripts/linux/appimage.sh",
     "version:set": "node scripts/bump-version.js",
     "generate:i18n-keys": "node scripts/generate-i18n-keys.js",
     "check:i18n": "node scripts/generate-i18n-keys.js --strict",
@@ -74,7 +75,7 @@
     "@sveltejs/adapter-static": "^3.0.6",
     "@sveltejs/kit": "^2.9.0",
     "@sveltejs/vite-plugin-svelte": "^5.0.0",
-    "@tauri-apps/cli": "^2",
+    "@tauri-apps/cli": "^2.11.4",
     "@types/katex": "^0.16.7",
     "@types/marked": "^6.0.0",
     "@types/node": "^25.6.0",

scripts/linux/appimage.sh

@@ -0,0 +1,30 @@
+#! /usr/bin/env bash
+#
+# Builds the Linux AppImage with our patched linuxdeploy-plugin-gtk.
+#
+# The Tauri bundler downloads linuxdeploy-plugin-gtk.sh once and never
+# re-checks it, so dropping our copy where it looks pins that copy for every
+# later build. We therefore turn on `bundle.useLocalToolsDir`, which moves the
+# bundler's tool cache from the shared ~/.cache/tauri into this project's cargo
+# target directory. Nothing outside the repo is touched, and `cargo clean`
+# undoes it.
+
+set -e
+
+cd "$(dirname "$0")/../.."
+
+target_dir=$(cargo metadata --no-deps --format-version 1 \
+    --manifest-path src-tauri/Cargo.toml |
+    node -e 'let s="";process.stdin.on("data",c=>s+=c).on("end",()=>console.log(JSON.parse(s).target_directory))')
+
+tools_dir="$target_dir/.tauri"
+mkdir -p "$tools_dir"
+cp scripts/linux/linuxdeploy-plugin-gtk.sh "$tools_dir/"
+chmod +x "$tools_dir/linuxdeploy-plugin-gtk.sh"
+echo "Using patched linuxdeploy-plugin-gtk.sh from $tools_dir"
+echo "Tool cache is project-local (target/.tauri/); 'cargo clean' removes it."
+
+# NO_STRIP: linuxdeploy's strip step fails on the .relr.dyn sections newer
+# linkers emit. createUpdaterArtifacts: a local build has no signing key.
+exec env NO_STRIP=1 node_modules/.bin/tauri build --bundles appimage \
+    --config '{"bundle":{"useLocalToolsDir":true,"createUpdaterArtifacts":false}}' "$@"