ci: add GPG signing to deb and rpm packages
Release / check-release (push) Successful in 20s
Release / build_gnu (push) Skipped
Release / build_musl (push) Skipped
Release / build_windows (push) Skipped
Release / package_gnu (deb) (push) Skipped
Release / package_gnu (rpm) (push) Skipped
Release / package_musl (deb) (push) Skipped
Release / package_musl (rpm) (push) Skipped
Release / publish-release (push) Skipped
CI / Test (push) Successful in 1m38s
CI / Build Linux (push) Successful in 1m56s
Release / check-release (push) Successful in 20s
Release / build_gnu (push) Skipped
Release / build_musl (push) Skipped
Release / build_windows (push) Skipped
Release / package_gnu (deb) (push) Skipped
Release / package_gnu (rpm) (push) Skipped
Release / package_musl (deb) (push) Skipped
Release / package_musl (rpm) (push) Skipped
Release / publish-release (push) Skipped
CI / Test (push) Successful in 1m38s
CI / Build Linux (push) Successful in 1m56s
This commit is contained in:
@@ -147,6 +147,25 @@ jobs:
|
||||
cp "$rpm_file" "dist/$(basename "$rpm_file" .rpm)-gnu.rpm"
|
||||
fi
|
||||
|
||||
- name: Import GPG key
|
||||
uses: crazy-max/ghaction-import-gpg@v6
|
||||
id: import-gpg
|
||||
with:
|
||||
gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
|
||||
passphrase: ${{ secrets.GPG_PASSPHRASE }}
|
||||
|
||||
- name: Sign packages
|
||||
run: |
|
||||
if [ "${{ matrix.type }}" = "deb" ]; then
|
||||
sudo apt-get install -y dpkg-sig
|
||||
dpkg-sig -s builder -k ${{ steps.import-gpg.outputs.keyid }} dist/*.deb
|
||||
elif [ "${{ matrix.type }}" = "rpm" ]; then
|
||||
sudo apt-get install -y rpm
|
||||
echo "%_signature gpg" > ~/.rpmmacros
|
||||
echo "%_gpg_name ${{ steps.import-gpg.outputs.keyid }}" >> ~/.rpmmacros
|
||||
rpm --addsign dist/*.rpm
|
||||
fi
|
||||
|
||||
- name: Upload Package Artifact
|
||||
uses: actions/upload-artifact@v3
|
||||
with:
|
||||
@@ -193,6 +212,25 @@ jobs:
|
||||
cp "$rpm_file" "dist/$(basename "$rpm_file" .rpm)-musl.rpm"
|
||||
fi
|
||||
|
||||
- name: Import GPG key
|
||||
uses: crazy-max/ghaction-import-gpg@v6
|
||||
id: import-gpg
|
||||
with:
|
||||
gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
|
||||
passphrase: ${{ secrets.GPG_PASSPHRASE }}
|
||||
|
||||
- name: Sign packages
|
||||
run: |
|
||||
if [ "${{ matrix.type }}" = "deb" ]; then
|
||||
sudo apt-get install -y dpkg-sig
|
||||
dpkg-sig -s builder -k ${{ steps.import-gpg.outputs.keyid }} dist/*.deb
|
||||
elif [ "${{ matrix.type }}" = "rpm" ]; then
|
||||
sudo apt-get install -y rpm
|
||||
echo "%_signature gpg" > ~/.rpmmacros
|
||||
echo "%_gpg_name ${{ steps.import-gpg.outputs.keyid }}" >> ~/.rpmmacros
|
||||
rpm --addsign dist/*.rpm
|
||||
fi
|
||||
|
||||
- name: Upload Package Artifact
|
||||
uses: actions/upload-artifact@v3
|
||||
with:
|
||||
|
||||
Reference in New Issue
Block a user