reprepro to build in the common 'repo' git repo now that we have enroll

repo/conf/distributions

@@ -1,35 +0,0 @@
-Origin: mig5
-Label: php-sqlcipher
-Suite: stable
-Codename: trixie
-Architectures: amd64
-Components: main
-Description: mig5 SQLCipher for PHP packages for Debian 13 (trixie)
-SignWith: !qubes-gpg-sign
-
-Origin: mig5
-Label: php-sqlcipher
-Suite: stable
-Codename: bookworm
-Architectures: amd64
-Components: main
-Description: mig5 SQLCipher for PHP packages for Debian 12 (bookworm)
-SignWith: !qubes-gpg-sign
-
-Origin: mig5
-Label: php-sqlcipher
-Suite: stable
-Codename: noble
-Architectures: amd64
-Components: main
-Description: mig5 SQLCipher for PHP packages for Ubuntu 24.04 (noble)
-SignWith: !qubes-gpg-sign
-
-Origin: mig5
-Label: php-sqlcipher
-Suite: stable
-Codename: jammy
-Architectures: amd64
-Components: main
-Description: mig5 SQLCipher for PHP packages for Ubuntu 22.04 (jammy)
-SignWith: !qubes-gpg-sign

repo/conf/qubes-gpg-sign

@@ -1,39 +0,0 @@
-#!/bin/sh
-set -eu
-
-release="$1"                    # file to sign (exists in the repo VM)
-inrel="${2:-}"                  # path for InRelease.new (may be empty)
-relgpg="${3:-}"                 # path for Release.gpg.new (may be empty)
-
-export QUBES_GPG_DOMAIN="${QUBES_GPG_DOMAIN:-vault}"
-
-WRAP="${WRAP:-/usr/bin/qubes-gpg-client-wrapper}"
-KEY="${REPO_SIGN_KEY:-00AE817C24A10C2540461A9C1D7CDE0234DB458D}"
-
-gpgcmd() {
-  if [ -n "$KEY" ]; then
-    "$WRAP" --batch --no-tty -u "$KEY" "$@"
-  else
-    "$WRAP" --batch --no-tty "$@"
-  fi
-}
-
-mkout() {                       # write stdout to a tmp next to dst, then mv
-  dst="$1"; dir="$(dirname "$dst")"
-  tmp="$(mktemp "$dir/.reprepro.XXXXXX")"
-  cat >"$tmp"
-  mv -f "$tmp" "$dst"
-}
-
-[ -r "$release" ] || { echo "error: $release not readable" >&2; exit 1; }
-umask 022
-
-# InRelease (clearsigned)
-if [ -n "$inrel" ]; then
-  gpgcmd --clearsign <"$release" | mkout "$inrel"
-fi
-
-# Release.gpg (detached, armored)
-if [ -n "$relgpg" ]; then
-  gpgcmd --armor --detach-sign <"$release" | mkout "$relgpg"
-fi

scripts/publish.sh

@@ -8,6 +8,6 @@ for CODENAME in trixie bookworm noble jammy; do
   # feed all .deb for that codename into the repo
   if compgen -G "${OUT_DIR}/${CODENAME}/php*/*.deb" >/dev/null 2>&1; then
     find "${OUT_DIR}/${CODENAME}" -name '*.deb' -print0 \
-      | xargs -0 -n1 reprepro -b repo includedeb "$CODENAME"
+      | xargs -0 -n1 reprepro -b /home/user/git/repo includedeb "$CODENAME"
   fi
 done