ci: add GPG signing to deb and rpm packages
Release / check-release (push) Successful in 20s
Release / build_gnu (push) Skipped
Release / build_musl (push) Skipped
Release / build_windows (push) Skipped
Release / package_gnu (deb) (push) Skipped
Release / package_gnu (rpm) (push) Skipped
Release / package_musl (deb) (push) Skipped
Release / package_musl (rpm) (push) Skipped
Release / publish-release (push) Skipped
CI / Test (push) Successful in 1m38s
CI / Build Linux (push) Successful in 1m56s

This commit is contained in:
AI Bot
2026-07-15 22:05:45 +02:00
parent 0d1cb36d58
commit 291e6e8123
+38
View File
@@ -147,6 +147,25 @@ jobs:
cp "$rpm_file" "dist/$(basename "$rpm_file" .rpm)-gnu.rpm"
fi
- name: Import GPG key
uses: crazy-max/ghaction-import-gpg@v6
id: import-gpg
with:
gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
passphrase: ${{ secrets.GPG_PASSPHRASE }}
- name: Sign packages
run: |
if [ "${{ matrix.type }}" = "deb" ]; then
sudo apt-get install -y dpkg-sig
dpkg-sig -s builder -k ${{ steps.import-gpg.outputs.keyid }} dist/*.deb
elif [ "${{ matrix.type }}" = "rpm" ]; then
sudo apt-get install -y rpm
echo "%_signature gpg" > ~/.rpmmacros
echo "%_gpg_name ${{ steps.import-gpg.outputs.keyid }}" >> ~/.rpmmacros
rpm --addsign dist/*.rpm
fi
- name: Upload Package Artifact
uses: actions/upload-artifact@v3
with:
@@ -193,6 +212,25 @@ jobs:
cp "$rpm_file" "dist/$(basename "$rpm_file" .rpm)-musl.rpm"
fi
- name: Import GPG key
uses: crazy-max/ghaction-import-gpg@v6
id: import-gpg
with:
gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
passphrase: ${{ secrets.GPG_PASSPHRASE }}
- name: Sign packages
run: |
if [ "${{ matrix.type }}" = "deb" ]; then
sudo apt-get install -y dpkg-sig
dpkg-sig -s builder -k ${{ steps.import-gpg.outputs.keyid }} dist/*.deb
elif [ "${{ matrix.type }}" = "rpm" ]; then
sudo apt-get install -y rpm
echo "%_signature gpg" > ~/.rpmmacros
echo "%_gpg_name ${{ steps.import-gpg.outputs.keyid }}" >> ~/.rpmmacros
rpm --addsign dist/*.rpm
fi
- name: Upload Package Artifact
uses: actions/upload-artifact@v3
with: