diff --git a/.github/workflows/update-repo.yml b/.github/workflows/update-repo.yml index 4e74ebc..9bef63e 100644 --- a/.github/workflows/update-repo.yml +++ b/.github/workflows/update-repo.yml @@ -23,24 +23,25 @@ jobs: cd x86_64 rm -f hyprarch-repo.db* hyprarch-repo.files* *.sig + # Export public key for users to download gpg --export --armor 236328A7F2C2001E > pubkey.gpg - # Sign packages (Binary) + # Sign all packages for pkg in *.pkg.tar.zst; do echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --yes --pinentry-mode loopback \ --local-user 236328A7F2C2001E --passphrase-fd 0 \ --detach-sign "$pkg" done - # Build DB via Python + # Build the database using the fixed Python script python3 ~/build_db.py - # Sign the DB file (Binary) + # Sign the database file echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --yes --pinentry-mode loopback \ --local-user 236328A7F2C2001E --passphrase-fd 0 \ --detach-sign hyprarch-repo.db - # Mirror sig for the .tar.gz version + # Mirror sig for compatibility cp hyprarch-repo.db.sig hyprarch-repo.db.tar.gz.sig - name: Generate Subfolder Index @@ -67,21 +68,40 @@ jobs:
Welcome to the official HyprArch repository maintained by Stuart Drew (Mitsuba100).
+Import and locally sign the key to trust these packages:
curl -s https://repo.stuple.net/x86_64/pubkey.gpg | sudo pacman-key -a - && sudo pacman-key --lsign-key 236328A7F2C2001E+
Add the following to the bottom of /etc/pacman.conf:
[hyprarch-repo] - SigLevel = Required DatabaseOptional - Server = https://repo.stuple.net/\$arch- -
Last updated: '$(date)'
+SigLevel = Required DatabaseOptional +Server = https://repo.stuple.net/\$arch + +sudo pacman -Sy && sudo pacman -S HyprArch-waybar
+