From 48e18e04085d17a5d0742b265a0d2546fa753d8b Mon Sep 17 00:00:00 2001
From: Miguel Jacq <mig@mig5.net>
Date: Wed, 24 Dec 2025 18:27:24 +1100
Subject: [PATCH] Sign rpms before createrepo_c

---
 release.sh | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/release.sh b/release.sh
index 00e552a..47fedb0 100755
--- a/release.sh
+++ b/release.sh
@@ -85,15 +85,15 @@ echo "==> Updating RPM repo..."
 mkdir -p "$RPM_REPO"
 cp "${BUILD_OUTPUT}/rpm/"*.rpm "$RPM_REPO/"
 
+for file in `ls -1 "$PWD/dist/rpm"`; do
+  rpmsign --addsign "$PWD/dist/rpm/$file"
+done
+
 createrepo_c "$RPM_REPO"
 
 echo "==> Signing repomd.xml..."
 qubes-gpg-client --local-user "$KEYID" --detach-sign --armor "$RPM_REPO/repodata/repomd.xml" > "$RPM_REPO/repodata/repomd.xml.asc"
 
-for file in `ls -1 "$PWD/dist/rpm"`; do
-  rpmsign --addsign "$PWD/dist/rpm/$file"
-done
-
 echo "==> Syncing repo to server..."
 rsync -aHPvz --exclude=.git --delete "$REPO_ROOT/" "$REMOTE/"