Add support for Linux ARM64 (#19931)

#1845

Co-authored-by: Lucas Manuel Rodriguez <lucas@fleetdm.com>
Co-authored-by: Roberto Dip <rroperzh@gmail.com>

.github/workflows/fleet-and-orbit.yml

@@ -296,7 +296,7 @@ jobs:
 
       - name: Build Repository and run TUF server
         env:
-          SYSTEMS: "macos windows linux"
+          SYSTEMS: "macos windows linux linux-arm64"
           PKG_FLEET_URL: ${{ needs.gen.outputs.address }}
           PKG_TUF_URL: http://localhost:8081
           DEB_FLEET_URL: ${{ needs.gen.outputs.address }}

.github/workflows/generate-desktop-targets.yml

@@ -157,3 +157,31 @@ jobs:
         with:
           name: desktop.tar.gz
           path: desktop.tar.gz
+
+  desktop-linux-arm64:
+    runs-on: ubuntu-latest
+    steps:
+
+      - name: Harden Runner
+        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        with:
+          egress-policy: audit
+
+      - name: Install Go
+        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+        with:
+          go-version: ${{ vars.GO_VERSION }}
+
+      - name: Checkout
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+
+      - name: Generate desktop.tar.gz
+        run: |
+          FLEET_DESKTOP_VERSION=$FLEET_DESKTOP_VERSION \
+          make desktop-linux-arm64
+
+      - name: Upload desktop.tar.gz
+        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # 4.3.3
+        with:
+          name: desktop-arm64.tar.gz
+          path: desktop.tar.gz

.github/workflows/generate-osqueryd-targets.yml

@@ -76,6 +76,35 @@ jobs:
           name: osqueryd
           path: opt/osquery/bin/osqueryd
 
+  generate-linux-arm64:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        with:
+          egress-policy: audit
+
+      - name: Checkout
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+
+      - name: Install file
+        run: |
+          sudo apt-get install -y file
+
+      - name: Download and extract osqueryd for linux-arm64
+        run: |
+          curl -L https://github.com/osquery/osquery/releases/download/${{ env.OSQUERY_VERSION }}/osquery_${{ env.OSQUERY_VERSION }}-1.linux_arm64.deb --output osquery.deb
+          ar x osquery.deb
+          tar xf data.tar.gz
+          chmod +x ./opt/osquery/bin/osqueryd
+          file ./opt/osquery/bin/osqueryd | grep aarch64
+
+      - name: Upload osqueryd for linux-arm64
+        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v2
+        with:
+          name: osqueryd-arm64
+          path: opt/osquery/bin/osqueryd
+
   generate-windows:
     runs-on: windows-latest
     steps:

.github/workflows/goreleaser-orbit.yaml

@@ -106,6 +106,39 @@ jobs:
           name: orbit-linux
           path: dist/orbit_linux_amd64_v1/orbit
 
+  goreleaser-linux-arm64:
+    runs-on: ubuntu-20.04
+    permissions:
+      contents: read
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        with:
+          egress-policy: audit
+
+      - name: Checkout
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+
+      # Note that goreleaser does not like the orbit- prefixed flag unless you use the closed-source
+      # paid version. We pay for goreleaser, but using the closed source build would weaken our
+      # supply-chain integrity goals, so we hack around it by replacing the tag.
+      - name: Replace tag
+        run: git tag $(echo ${{ github.ref_name }} | sed -e 's/orbit-//g') && git tag -d ${{ github.ref_name }}
+
+      - name: Set up Go
+        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+        with:
+          go-version: ${{ vars.GO_VERSION }}
+
+      - name: Run GoReleaser
+        run: go run github.com/goreleaser/goreleaser@56c9d09a1b925e2549631c6d180b0a1c2ebfac82 release --debug --rm-dist --skip-publish -f orbit/goreleaser-linux-arm64.yml # v1.20.0
+
+      - name: Upload
+        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # 4.3.3
+        with:
+          name: orbit-linux-arm64
+          path: dist/orbit_linux_arm64_v1/orbit
+
   goreleaser-windows:
     runs-on: windows-2022
     permissions: