From d9e64a695087e849a90d0313083764022f719686 Mon Sep 17 00:00:00 2001 From: Sam Therapy Date: Thu, 20 Oct 2022 23:39:54 +0200 Subject: [PATCH] add GPG signing please Signed-off-by: Sam Therapy --- .drone.yml | 3 +++ conf/distributions | 2 ++ import-gpg.sh | 7 +++++++ 3 files changed, 12 insertions(+) create mode 100644 import-gpg.sh diff --git a/.drone.yml b/.drone.yml index 4f67066..5365bcd 100644 --- a/.drone.yml +++ b/.drone.yml @@ -12,6 +12,7 @@ steps: - wget http://ftp.us.debian.org/debian/pool/main/r/reprepro/reprepro_5.4.1-1_amd64.deb && dpkg -i ./reprepro_5.4.1-1_amd64.deb - rm ./reprepro_5.4.1-1_amd64.deb + - bash ./import-gpg.sh - bash ./prepare-pages.sh - git clone -b pages https://git.froth.zone/packages/awl pkg @@ -24,6 +25,8 @@ steps: - mv pkg/apt /pkg/apt environment: TAG: ${TAG} + SIGNING_KEY: + from_secret: SIGNING_KEY volumes: - name: pkg path: /pkg diff --git a/conf/distributions b/conf/distributions index 6984ceb..b30bdac 100644 --- a/conf/distributions +++ b/conf/distributions @@ -1,4 +1,6 @@ Codename: awl Components: main Architectures: i386 amd64 armhf arm64 source +SignWith: F8191A8C48DFEE8B Limit: 0 + diff --git a/import-gpg.sh b/import-gpg.sh new file mode 100644 index 0000000..381d57e --- /dev/null +++ b/import-gpg.sh @@ -0,0 +1,7 @@ +#!/usr/bin/env bash + +set -e + +[ -z "$SIGNING_KEY" ] && echo "no key" && exit 1 + +echo -n "$SIGNING_KEY" | gpg --import