diff --git a/.github/workflows/update-repo.yml b/.github/workflows/update-repo.yml index 9f9b76e..bdb775e 100644 --- a/.github/workflows/update-repo.yml +++ b/.github/workflows/update-repo.yml @@ -1,4 +1,4 @@ -name: Update Arch Repository +name: Update Arch Repository on: push: @@ -23,22 +23,30 @@ jobs: - name: Build and Sign Repository run: | cd x86_64 - # Clean old metadata + # Remove ALL old metadata and symlinks to start fresh rm -f hyprarch-repo.db* hyprarch-repo.files* - # 1. Export public key for landing page + # 1. Export public key gpg --export --armor 236328A7F2C2001E > pubkey.gpg - # 2. Generate Binary Signatures + # 2. Sign packages (Force BINARY by removing --armor) for pkg in *.pkg.tar.zst; do echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --yes --pinentry-mode loopback --local-user 236328A7F2C2001E --passphrase-fd 0 --detach-sign "$pkg" done - # 3. Build DB using Python helper + # 3. Build DB using Python helper (Ensure you updated the script on the Pi as well) python3 ~/build_db.py - # 4. Sign the database file + # 4. Finalize Files (NO SYMLINKS) + # We manually copy instead of linking so the web server sees real files + cp hyprarch-repo.db.tar.gz hyprarch-repo.db + cp hyprarch-repo.db.tar.gz hyprarch-repo.files + + # 5. Sign the DB (Binary) echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --yes --pinentry-mode loopback --local-user 236328A7F2C2001E --passphrase-fd 0 --detach-sign hyprarch-repo.db + + # 6. Ensure .sig files match the main files exactly + cp hyprarch-repo.db.sig hyprarch-repo.db.tar.gz.sig - name: Generate Subfolder Index run: | @@ -77,25 +85,17 @@ jobs:

🚀 HyprArch Custom Repository

-

1. Add the GPG Key

-

Run this command to trust the repository maintainer (Mitsuba100):

curl -s https://repo.stuple.net/x86_64/pubkey.gpg | sudo pacman-key -a - && sudo pacman-key --lsign-key 236328A7F2C2001E
-

2. Configure Pacman

-

Add the following to the bottom of /etc/pacman.conf:

[hyprarch-repo]
           SigLevel = Required DatabaseOptional
           Server = https://repo.stuple.net/\$arch
-

3. Sync

-
- sudo pacman -Syy -
- +
sudo pacman -Syy

📁 Browse File Index

-

Automated by GitHub Actions • Last updated: '$(date)'

+

Last updated: '$(date)'

@@ -103,5 +103,7 @@ jobs: - name: Deploy to Local Web Folder run: | + # Clean the destination first to ensure no old symlinks remain + rm -rf /var/www/hyprarch-repo/x86_64/* mkdir -p /var/www/hyprarch-repo/x86_64 cp -rf . /var/www/hyprarch-repo/ \ No newline at end of file