Update .github/workflows/update-repo.yml
This commit is contained in:
50
.github/workflows/update-repo.yml
vendored
50
.github/workflows/update-repo.yml
vendored
@@ -1,4 +1,4 @@
|
|||||||
name: Update Arch Repository (Host stui)
|
name: Update Arch Repository
|
||||||
|
|
||||||
on:
|
on:
|
||||||
push:
|
push:
|
||||||
@@ -8,7 +8,7 @@ on:
|
|||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
build-and-deploy:
|
build-and-deploy:
|
||||||
runs-on: local # Ensure your runner has the 'local:host' label
|
runs-on: local
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout code
|
- name: Checkout code
|
||||||
@@ -23,49 +23,22 @@ jobs:
|
|||||||
- name: Build and Sign Repository
|
- name: Build and Sign Repository
|
||||||
run: |
|
run: |
|
||||||
cd x86_64
|
cd x86_64
|
||||||
# Remove old database files
|
# Clean old metadata
|
||||||
rm -f hyprarch-repo.db* hyprarch-repo.files*
|
rm -f hyprarch-repo.db* hyprarch-repo.files*
|
||||||
mkdir -p db_temp
|
|
||||||
|
|
||||||
# Export public key for landing page
|
# 1. Export public key for landing page
|
||||||
gpg --export --armor 236328A7F2C2001E > pubkey.gpg
|
gpg --export --armor 236328A7F2C2001E > pubkey.gpg
|
||||||
|
|
||||||
|
# 2. Generate Binary Signatures
|
||||||
for pkg in *.pkg.tar.zst; do
|
for pkg in *.pkg.tar.zst; do
|
||||||
# 1. Create BINARY detached signature
|
echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --yes --pinentry-mode loopback --local-user 236328A7F2C2001E --passphrase-fd 0 --detach-sign "$pkg"
|
||||||
echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --yes --pinentry-mode loopback --local-user 236328A7F2C2001E --passphrase-fd 0 --detach-sign --output "$pkg.sig" "$pkg"
|
|
||||||
|
|
||||||
# 2. Extract Metadata safely
|
|
||||||
pkgname=$(bsdtar -xOf "$pkg" .PKGINFO | grep "^pkgname =" | cut -d' ' -f3 | tr -d '\r')
|
|
||||||
pkgver=$(bsdtar -xOf "$pkg" .PKGINFO | grep "^pkgver =" | cut -d' ' -f3 | tr -d '\r')
|
|
||||||
pkgdesc=$(bsdtar -xOf "$pkg" .PKGINFO | grep "^pkgdesc =" | cut -d' ' -f3- | sed "s/['\"]//g" | tr -d '\r')
|
|
||||||
pkgsize=$(stat -c%s "$pkg")
|
|
||||||
instsize=$(bsdtar -xOf "$pkg" .PKGINFO | grep "^size =" | cut -d' ' -f3 | tr -d '\r')
|
|
||||||
|
|
||||||
mkdir -p "db_temp/$pkgname-$pkgver"
|
|
||||||
{
|
|
||||||
echo "%NAME%"; echo "$pkgname"; echo ""
|
|
||||||
echo "%VERSION%"; echo "$pkgver"; echo ""
|
|
||||||
echo "%DESC%"; echo "$pkgdesc"; echo ""
|
|
||||||
echo "%FILENAME%"; echo "$pkg"; echo ""
|
|
||||||
echo "%CSIZE%"; echo "$pkgsize"; echo ""
|
|
||||||
echo "%ISIZE%"; echo "$instsize"; echo ""
|
|
||||||
echo "%PGPSIG%"
|
|
||||||
base64 -w 0 "$pkg.sig"
|
|
||||||
echo ""
|
|
||||||
echo ""
|
|
||||||
} > "db_temp/$pkgname-$pkgver/desc"
|
|
||||||
done
|
done
|
||||||
|
|
||||||
# 3. Pack the Database
|
# 3. Build DB using Python helper
|
||||||
cd db_temp
|
python3 ~/build_db.py
|
||||||
tar --owner=0 --group=0 -c * | gzip -n -9 > ../hyprarch-repo.db.tar.gz
|
|
||||||
cd ..
|
|
||||||
|
|
||||||
# 4. Sign and Finalize Database
|
# 4. Sign the database file
|
||||||
cp hyprarch-repo.db.tar.gz hyprarch-repo.db
|
echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --yes --pinentry-mode loopback --local-user 236328A7F2C2001E --passphrase-fd 0 --detach-sign hyprarch-repo.db
|
||||||
cp hyprarch-repo.db.tar.gz hyprarch-repo.files
|
|
||||||
echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --yes --pinentry-mode loopback --local-user 236328A7F2C2001E --passphrase-fd 0 --detach-sign --output hyprarch-repo.db.sig hyprarch-repo.db
|
|
||||||
rm -rf db_temp
|
|
||||||
|
|
||||||
- name: Generate Subfolder Index
|
- name: Generate Subfolder Index
|
||||||
run: |
|
run: |
|
||||||
@@ -117,7 +90,7 @@ jobs:
|
|||||||
|
|
||||||
<h2>3. Sync</h2>
|
<h2>3. Sync</h2>
|
||||||
<div class="step">
|
<div class="step">
|
||||||
<code>sudo pacman -Sy</code>
|
<code>sudo pacman -Syy</code>
|
||||||
</div>
|
</div>
|
||||||
|
|
||||||
<hr style="margin-top:40px; border: 0; border-top: 1px solid #4c566a;">
|
<hr style="margin-top:40px; border: 0; border-top: 1px solid #4c566a;">
|
||||||
@@ -130,6 +103,5 @@ jobs:
|
|||||||
|
|
||||||
- name: Deploy to Local Web Folder
|
- name: Deploy to Local Web Folder
|
||||||
run: |
|
run: |
|
||||||
# Use your correct repo path and ensure stui has write access to it
|
|
||||||
mkdir -p /var/www/hyprarch-repo/x86_64
|
mkdir -p /var/www/hyprarch-repo/x86_64
|
||||||
cp -rf . /var/www/hyprarch-repo/
|
cp -rf . /var/www/hyprarch-repo/
|
||||||
Reference in New Issue
Block a user