From 5723b26b8af1efca0400efc03e2d73cdf7c87b7d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?S=C3=A9bastien=20Graveline?= <graveline.seb@gmail.com>
Date: Wed, 1 Jul 2026 19:00:30 -0400
Subject: [PATCH] post-install eBPF permissions archlinux

---
 .goreleaser.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index ccd0614..b3a8944 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -77,6 +77,13 @@ nfpms:
           mode: 0644
     scripts:
       postinstall: packaging/postinstall.sh
+    # pacman runs post_install() only on a fresh install; replacing an existing
+    # version (pacman -U / -Syu) runs post_upgrade() instead. Without this the
+    # setcap is skipped on upgrades and the binary loses its eBPF caps. deb/rpm
+    # re-run postinstall on upgrade already, so only archlinux needs this.
+    archlinux:
+      scripts:
+        postupgrade: packaging/postinstall.sh
 
 checksum:
   name_template: checksums.txt