95 lines
3.7 KiB
YAML
95 lines
3.7 KiB
YAML
name: Update Arch Repository
|
|
|
|
on:
|
|
push:
|
|
paths:
|
|
- 'x86_64/*.pkg.tar.zst'
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
build-and-deploy:
|
|
runs-on: local # Ensure your runner has the 'local:host' label
|
|
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Import GPG Key
|
|
run: |
|
|
echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --batch --import --yes
|
|
|
|
- name: Build and Sign Repository
|
|
run: |
|
|
cd x86_64
|
|
rm -f hyprarch-repo.db* hyprarch-repo.files*
|
|
mkdir -p db_temp
|
|
|
|
gpg --export --armor 236328A7F2C2001E > pubkey.gpg
|
|
|
|
for pkg in *.pkg.tar.zst; do
|
|
# Create BINARY detached signature
|
|
echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --yes --pinentry-mode loopback --local-user 236328A7F2C2001E --passphrase-fd 0 --detach-sign --output "$pkg.sig" "$pkg"
|
|
|
|
# Extract Metadata
|
|
pkgname=$(bsdtar -xOf "$pkg" .PKGINFO | grep "^pkgname =" | cut -d' ' -f3 | tr -d '\r')
|
|
pkgver=$(bsdtar -xOf "$pkg" .PKGINFO | grep "^pkgver =" | cut -d' ' -f3 | tr -d '\r')
|
|
pkgdesc=$(bsdtar -xOf "$pkg" .PKGINFO | grep "^pkgdesc =" | cut -d' ' -f3- | sed "s/['\"]//g" | tr -d '\r')
|
|
pkgsize=$(stat -c%s "$pkg")
|
|
instsize=$(bsdtar -xOf "$pkg" .PKGINFO | grep "^size =" | cut -d' ' -f3 | tr -d '\r')
|
|
|
|
mkdir -p "db_temp/$pkgname-$pkgver"
|
|
|
|
{
|
|
echo "%NAME%"; echo "$pkgname"; echo ""
|
|
echo "%VERSION%"; echo "$pkgver"; echo ""
|
|
echo "%DESC%"; echo "$pkgdesc"; echo ""
|
|
echo "%FILENAME%"; echo "$pkg"; echo ""
|
|
echo "%CSIZE%"; echo "$pkgsize"; echo ""
|
|
echo "%ISIZE%"; echo "$instsize"; echo ""
|
|
echo "%PGPSIG%"
|
|
base64 -w 0 "$pkg.sig"
|
|
echo ""
|
|
echo ""
|
|
} > "db_temp/$pkgname-$pkgver/desc"
|
|
done
|
|
|
|
cd db_temp
|
|
tar --owner=0 --group=0 -c * | gzip -n -9 > ../hyprarch-repo.db.tar.gz
|
|
cd ..
|
|
cp hyprarch-repo.db.tar.gz hyprarch-repo.db
|
|
cp hyprarch-repo.db.tar.gz hyprarch-repo.files
|
|
echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --yes --pinentry-mode loopback --local-user 236328A7F2C2001E --passphrase-fd 0 --detach-sign --output hyprarch-repo.db.sig hyprarch-repo.db
|
|
rm -rf db_temp
|
|
|
|
- name: Generate Landing Page
|
|
run: |
|
|
cat <<EOF > index.html
|
|
<!DOCTYPE html>
|
|
<html>
|
|
<head>
|
|
<title>HyprArch Repo</title>
|
|
<style>
|
|
body { font-family: sans-serif; background: #2e3440; color: #eceff4; padding: 40px; }
|
|
.container { max-width: 800px; margin: auto; background: #3b4252; padding: 30px; border-radius: 10px; }
|
|
pre { background: #2e3440; padding: 15px; border-radius: 5px; color: #ebcb8b; }
|
|
a { color: #88c0d0; }
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<div class="container">
|
|
<h1>🚀 HyprArch Pi Repository</h1>
|
|
<pre>curl -s https://repo.stuple.net/x86_64/pubkey.gpg | sudo pacman-key -a - && sudo pacman-key --lsign-key 236328A7F2C2001E</pre>
|
|
<pre>[hyprarch-repo]
|
|
SigLevel = Required DatabaseOptional
|
|
Server = https://repo.stuple.net/\$arch</pre>
|
|
<p><a href="./x86_64/">📂 Browse File Index</a></p>
|
|
</div>
|
|
</body>
|
|
</html>
|
|
EOF
|
|
|
|
- name: Deploy to Local Web Folder
|
|
run: |
|
|
# Since stui now owns the folder, we don't need sudo here
|
|
mkdir -p /var/www/hyprarch-repo/x86_64
|
|
cp -rf . /var/www/hyprarch-repo/ |