ci: add GPG signing to deb and rpm packages

.github/workflows/release.yml

@@ -147,6 +147,25 @@ jobs:
             cp "$rpm_file" "dist/$(basename "$rpm_file" .rpm)-gnu.rpm"
           fi
 
+      - name: Import GPG key
+        uses: crazy-max/ghaction-import-gpg@v6
+        id: import-gpg
+        with:
+          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
+          passphrase: ${{ secrets.GPG_PASSPHRASE }}
+
+      - name: Sign packages
+        run: |
+          if [ "${{ matrix.type }}" = "deb" ]; then
+            sudo apt-get install -y dpkg-sig
+            dpkg-sig -s builder -k ${{ steps.import-gpg.outputs.keyid }} dist/*.deb
+          elif [ "${{ matrix.type }}" = "rpm" ]; then
+            sudo apt-get install -y rpm
+            echo "%_signature gpg" > ~/.rpmmacros
+            echo "%_gpg_name ${{ steps.import-gpg.outputs.keyid }}" >> ~/.rpmmacros
+            rpm --addsign dist/*.rpm
+          fi
+
       - name: Upload Package Artifact
         uses: actions/upload-artifact@v3
         with:
@@ -193,6 +212,25 @@ jobs:
             cp "$rpm_file" "dist/$(basename "$rpm_file" .rpm)-musl.rpm"
           fi
 
+      - name: Import GPG key
+        uses: crazy-max/ghaction-import-gpg@v6
+        id: import-gpg
+        with:
+          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
+          passphrase: ${{ secrets.GPG_PASSPHRASE }}
+
+      - name: Sign packages
+        run: |
+          if [ "${{ matrix.type }}" = "deb" ]; then
+            sudo apt-get install -y dpkg-sig
+            dpkg-sig -s builder -k ${{ steps.import-gpg.outputs.keyid }} dist/*.deb
+          elif [ "${{ matrix.type }}" = "rpm" ]; then
+            sudo apt-get install -y rpm
+            echo "%_signature gpg" > ~/.rpmmacros
+            echo "%_gpg_name ${{ steps.import-gpg.outputs.keyid }}" >> ~/.rpmmacros
+            rpm --addsign dist/*.rpm
+          fi
+
       - name: Upload Package Artifact
         uses: actions/upload-artifact@v3
         with: