Sign rpms before createrepo_c
All checks were successful
CI / test (push) Successful in 8m22s
Lint / test (push) Successful in 36s
Trivy / test (push) Successful in 17s

This commit is contained in:
Miguel Jacq 2025-12-24 18:27:24 +11:00
parent 26c136900e
commit 48e18e0408
Signed by: mig5
GPG key ID: 59B3F0C24135C6A9

View file

@ -85,15 +85,15 @@ echo "==> Updating RPM repo..."
mkdir -p "$RPM_REPO" mkdir -p "$RPM_REPO"
cp "${BUILD_OUTPUT}/rpm/"*.rpm "$RPM_REPO/" cp "${BUILD_OUTPUT}/rpm/"*.rpm "$RPM_REPO/"
for file in `ls -1 "$PWD/dist/rpm"`; do
rpmsign --addsign "$PWD/dist/rpm/$file"
done
createrepo_c "$RPM_REPO" createrepo_c "$RPM_REPO"
echo "==> Signing repomd.xml..." echo "==> Signing repomd.xml..."
qubes-gpg-client --local-user "$KEYID" --detach-sign --armor "$RPM_REPO/repodata/repomd.xml" > "$RPM_REPO/repodata/repomd.xml.asc" qubes-gpg-client --local-user "$KEYID" --detach-sign --armor "$RPM_REPO/repodata/repomd.xml" > "$RPM_REPO/repodata/repomd.xml.asc"
for file in `ls -1 "$PWD/dist/rpm"`; do
rpmsign --addsign "$PWD/dist/rpm/$file"
done
echo "==> Syncing repo to server..." echo "==> Syncing repo to server..."
rsync -aHPvz --exclude=.git --delete "$REPO_ROOT/" "$REMOTE/" rsync -aHPvz --exclude=.git --delete "$REPO_ROOT/" "$REMOTE/"