Add scripts and CI workflows to build debian package

.github/workflows/release.yml

@@ -205,6 +205,52 @@ jobs:
           name: wheels-linux-armv6
           path: dist
 
+  build-debian:
+    needs: [tag, build-linux, build-linux-aarch64]
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        include:
+          - artifact: wheels-linux-x86_64
+            arch: amd64
+          - artifact: wheels-linux-i686
+            arch: i386
+          - artifact: wheels-linux-armv7
+            arch: armhf
+          - artifact: wheels-linux-aarch64
+            arch: arm64
+    steps:
+      - name: Checkout this repository
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ needs.tag.outputs.branch }}
+
+      - name: Download wheel
+        uses: actions/download-artifact@v4
+        with:
+          name: ${{ matrix.artifact }}
+          path: dist
+
+      - name: Convert wheel to Debian package
+        run: |
+          shopt -s nullglob
+          wheels=(dist/eclipse_zenoh-*.whl)
+          if [[ ${#wheels[@]} -ne 1 ]]; then
+            echo "Expected exactly one wheel, found: ${#wheels[@]} (${wheels[*]})" >&2
+            exit 1
+          fi
+          bash ci/scripts/wheel-to-deb.sh \
+            "${wheels[0]}" \
+            python3-eclipse-zenoh \
+            "${{ needs.tag.outputs.version }}" \
+            "${{ matrix.arch }}"
+
+      - name: Upload Debian package artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: deb-${{ matrix.arch }}
+          path: "*.deb"
+
   publish-pypi:
     needs:
       [
@@ -253,3 +299,21 @@ jobs:
           branch: ${{ needs.tag.outputs.branch }}
           github-token: ${{ secrets.BOT_TOKEN_WORKFLOW }}
           archive-patterns: "^$"
+
+  publish-debian-github:
+    needs: [tag, build-debian, publish-github]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Download Debian packages
+        uses: actions/download-artifact@v4
+        with:
+          pattern: deb-*
+          path: debs
+          merge-multiple: true
+
+      - name: Upload Debian packages to GitHub release
+        if: ${{ inputs.live-run || false }}
+        run: gh release upload "${{ needs.tag.outputs.version }}" debs/*.deb --clobber
+        env:
+          GH_TOKEN: ${{ secrets.BOT_TOKEN_WORKFLOW }}
+          GH_REPO: ${{ github.repository }}

ci/scripts/wheel-to-deb.sh

@@ -0,0 +1,82 @@
+#!/usr/bin/env bash
+#
+# Copyright (c) 2026 ZettaScale Technology
+#
+# This program and the accompanying materials are made available under the
+# terms of the Eclipse Public License 2.0 which is available at
+# http://www.eclipse.org/legal/epl-2.0, or the Apache License, Version 2.0
+# which is available at https://www.apache.org/licenses/LICENSE-2.0.
+#
+# SPDX-License-Identifier: EPL-2.0 OR Apache-2.0
+#
+# Contributors:
+#   ZettaScale Zenoh Team, <zenoh@zettascale.tech>
+#
+# Usage: wheel-to-deb.sh <wheel_file> <package_name> <version> <debian_arch>
+# Example:
+#   wheel-to-deb.sh eclipse_zenoh-1.0.0-cp39-abi3-manylinux_2_17_x86_64.whl \
+#     python3-eclipse-zenoh 1.0.0 amd64
+
+set -euo pipefail
+
+if [[ $# -ne 4 ]]; then
+    echo "Usage: $0 <wheel_file> <package_name> <version> <debian_arch>" >&2
+    echo "Example: $0 eclipse_zenoh-1.0.0-cp39-abi3-manylinux_2_17_x86_64.whl python3-eclipse-zenoh 1.0.0 amd64" >&2
+    exit 1
+fi
+
+WHEEL=$1
+PKG=$2
+VER=$3
+ARCH=$4
+
+WORKDIR=$(mktemp -d)
+trap 'rm -rf "$WORKDIR"' EXIT
+
+unzip -q "$WHEEL" -d "$WORKDIR/contents"
+
+DIST_PKG="$WORKDIR/deb/usr/lib/python3/dist-packages"
+mkdir -p "$DIST_PKG"
+
+cp -r "$WORKDIR/contents/zenoh" "$DIST_PKG/"
+
+# Copy dist-info for importlib.metadata and pip compatibility
+mapfile -t DIST_INFO_DIRS < <(find "$WORKDIR/contents" -maxdepth 1 -name "*.dist-info" -type d)
+if [[ ${#DIST_INFO_DIRS[@]} -gt 1 ]]; then
+    echo "Expected at most one dist-info directory, found: ${DIST_INFO_DIRS[*]}" >&2
+    exit 1
+fi
+if [[ ${#DIST_INFO_DIRS[@]} -eq 1 ]]; then
+    cp -r "${DIST_INFO_DIRS[0]}" "$DIST_PKG/"
+    # Mark as dpkg-managed so pip does not attempt to uninstall these files
+    echo "dpkg" > "$DIST_PKG/$(basename "${DIST_INFO_DIRS[0]}")/INSTALLER"
+fi
+
+# Derive minimum glibc version from the manylinux tag in the wheel filename
+# e.g. manylinux_2_17 -> libc6 (>= 2.17), manylinux_2_28 -> libc6 (>= 2.28)
+LIBC6_DEP="libc6"
+if [[ "$WHEEL" =~ manylinux_([0-9]+)_([0-9]+) ]]; then
+    LIBC6_DEP="libc6 (>= ${BASH_REMATCH[1]}.${BASH_REMATCH[2]})"
+fi
+
+mkdir -p "$WORKDIR/deb/DEBIAN"
+cat > "$WORKDIR/deb/DEBIAN/control" <<CTRL
+Package: $PKG
+Version: $VER
+Architecture: $ARCH
+Maintainer: ZettaScale Zenoh Team <zenoh@zettascale.tech>
+Depends: python3 (>= 3.9), $LIBC6_DEP
+Section: python
+Priority: optional
+Homepage: https://zenoh.io
+Description: Eclipse Zenoh Python bindings
+ Eclipse Zenoh: Zero Overhead Pub/sub, Store/Query and Compute.
+ .
+ This package provides the Python bindings for Eclipse Zenoh, enabling
+ pub/sub, queryable and geo-distributed storage in Python.
+ .
+ Built from manylinux wheels.
+CTRL
+
+dpkg-deb --build --root-owner-group "$WORKDIR/deb" "${PKG}_${VER}_${ARCH}.deb"
+echo "Built: ${PKG}_${VER}_${ARCH}.deb"