>:| still not working
This commit is contained in:
15
.github/workflows/update-repo.yml
vendored
15
.github/workflows/update-repo.yml
vendored
@@ -25,7 +25,10 @@ jobs:
|
|||||||
echo "ERROR: GPG_PRIVATE_KEY secret is empty!"
|
echo "ERROR: GPG_PRIVATE_KEY secret is empty!"
|
||||||
exit 1
|
exit 1
|
||||||
fi
|
fi
|
||||||
echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --import --batch --yes
|
# Save key to a temp file to avoid "invalid option" command-line errors
|
||||||
|
echo "${{ secrets.GPG_PRIVATE_KEY }}" > private_key.gpg
|
||||||
|
gpg --batch --import private_key.gpg
|
||||||
|
rm private_key.gpg
|
||||||
|
|
||||||
- name: Update Repository Database
|
- name: Update Repository Database
|
||||||
run: |
|
run: |
|
||||||
@@ -34,12 +37,12 @@ jobs:
|
|||||||
|
|
||||||
mkdir -p db_temp
|
mkdir -p db_temp
|
||||||
|
|
||||||
# Define passphrase variable from secrets (defaults to empty)
|
# Define passphrase variable from secrets
|
||||||
PASS="${{ secrets.GPG_PASSPHRASE }}"
|
PASS="${{ secrets.GPG_PASSPHRASE }}"
|
||||||
|
|
||||||
for pkg in *.pkg.tar.zst; do
|
for pkg in *.pkg.tar.zst; do
|
||||||
# 1. Sign the package
|
# 1. Sign the package
|
||||||
gpg --batch --yes --pinentry-mode loopback --local-user 236328A7F2C2001E --passphrase "$PASS" --detach-sign --no-armor "$pkg"
|
echo "$PASS" | gpg --batch --yes --pinentry-mode loopback --local-user 236328A7F2C2001E --passphrase-fd 0 --detach-sign --no-armor "$pkg"
|
||||||
|
|
||||||
# 2. Extract Metadata
|
# 2. Extract Metadata
|
||||||
pkgname=$(bsdtar -xOf "$pkg" .PKGINFO | grep "^pkgname =" | cut -d' ' -f3)
|
pkgname=$(bsdtar -xOf "$pkg" .PKGINFO | grep "^pkgname =" | cut -d' ' -f3)
|
||||||
@@ -68,7 +71,7 @@ jobs:
|
|||||||
echo "$(bsdtar -xOf "$pkg" .PKGINFO | grep "^size =" | cut -d' ' -f3)"
|
echo "$(bsdtar -xOf "$pkg" .PKGINFO | grep "^size =" | cut -d' ' -f3)"
|
||||||
echo ""
|
echo ""
|
||||||
echo "%PGPSIG%"
|
echo "%PGPSIG%"
|
||||||
gpg --batch --yes --pinentry-mode loopback --local-user 236328A7F2C2001E --passphrase "$PASS" --detach-sign --stdout --no-armor "$pkg" | base64 | tr -d '\n'
|
echo "$PASS" | gpg --batch --yes --pinentry-mode loopback --local-user 236328A7F2C2001E --passphrase-fd 0 --detach-sign --stdout --no-armor "$pkg" | base64 | tr -d '\n'
|
||||||
echo ""
|
echo ""
|
||||||
} > "db_temp/$pkgname-$pkgver/desc"
|
} > "db_temp/$pkgname-$pkgver/desc"
|
||||||
done
|
done
|
||||||
@@ -77,7 +80,7 @@ jobs:
|
|||||||
cd db_temp
|
cd db_temp
|
||||||
tar -c * | gzip -9 > ../hyprarch-repo.db.tar.gz
|
tar -c * | gzip -9 > ../hyprarch-repo.db.tar.gz
|
||||||
cd ..
|
cd ..
|
||||||
gpg --batch --yes --pinentry-mode loopback --local-user 236328A7F2C2001E --passphrase "$PASS" --detach-sign --no-armor hyprarch-repo.db.tar.gz
|
echo "$PASS" | gpg --batch --yes --pinentry-mode loopback --local-user 236328A7F2C2001E --passphrase-fd 0 --detach-sign --no-armor hyprarch-repo.db.tar.gz
|
||||||
|
|
||||||
# 4. Finalize
|
# 4. Finalize
|
||||||
cp hyprarch-repo.db.tar.gz hyprarch-repo.db
|
cp hyprarch-repo.db.tar.gz hyprarch-repo.db
|
||||||
@@ -140,7 +143,7 @@ jobs:
|
|||||||
git config --global user.email "github-actions[bot]@users.noreply.github.com"
|
git config --global user.email "github-actions[bot]@users.noreply.github.com"
|
||||||
git add .
|
git add .
|
||||||
if ! git diff-index --quiet HEAD; then
|
if ! git diff-index --quiet HEAD; then
|
||||||
git commit -m "Cleanup script variables and finalize GPG signing"
|
git commit -m "Fix GPG import method and finalize signing"
|
||||||
git push
|
git push
|
||||||
else
|
else
|
||||||
echo "Nothing to change."
|
echo "Nothing to change."
|
||||||
|
|||||||
Reference in New Issue
Block a user