151 lines
5.6 KiB
YAML
151 lines
5.6 KiB
YAML
name: Update Arch Repository
|
|
|
|
on:
|
|
push:
|
|
paths:
|
|
- 'x86_64/*.pkg.tar.zst'
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
update-db:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Setup tools
|
|
run: sudo apt-get update && sudo apt-get install -y libarchive-tools gpg
|
|
|
|
- name: Import GPG Key
|
|
run: |
|
|
if [ -z "${{ secrets.GPG_PRIVATE_KEY }}" ]; then
|
|
echo "ERROR: GPG_PRIVATE_KEY secret is empty!"
|
|
exit 1
|
|
fi
|
|
# Import and set trust to avoid prompt errors
|
|
echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --import --batch --yes
|
|
echo "236328A7F2C2001E:6:" | gpg --import-ownertrust --batch
|
|
|
|
- name: Update Repository Database
|
|
run: |
|
|
cd x86_64
|
|
rm -f hyprarch-repo.db* hyprarch-repo.files*
|
|
|
|
mkdir -p db_temp
|
|
|
|
# GPG Arguments to prevent 'Inappropriate ioctl'
|
|
# We force loopback pinentry so it doesn't look for a real keyboard/screen
|
|
GPG_OPTS="--batch --yes --pinentry-mode loopback --local-user 236328A7F2C2001E"
|
|
|
|
for pkg in *.pkg.tar.zst; do
|
|
# 1. Sign the package
|
|
gpg $GPG_OPTS --detach-sign --no-armor "$pkg"
|
|
|
|
# 2. Extract Metadata
|
|
pkgname=$(bsdtar -xOf "$pkg" .PKGINFO | grep "^pkgname =" | cut -d' ' -f3)
|
|
pkgver=$(bsdtar -xOf "$pkg" .PKGINFO | grep "^pkgver =" | cut -d' ' -f3)
|
|
pkgdesc=$(bsdtar -xOf "$pkg" .PKGINFO | grep "^pkgdesc =" | cut -d' ' -f3- | sed "s/['\"]//g")
|
|
|
|
mkdir -p "db_temp/$pkgname-$pkgver"
|
|
|
|
{
|
|
echo "%NAME%"
|
|
echo "$pkgname"
|
|
echo ""
|
|
echo "%VERSION%"
|
|
echo "$pkgver"
|
|
echo ""
|
|
echo "%DESC%"
|
|
echo "$pkgdesc"
|
|
echo ""
|
|
echo "%FILENAME%"
|
|
echo "$pkg"
|
|
echo ""
|
|
echo "%CSIZE%"
|
|
echo "$(stat -c%s "$pkg")"
|
|
echo ""
|
|
echo "%ISIZE%"
|
|
echo "$(bsdtar -xOf "$pkg" .PKGINFO | grep "^size =" | cut -d' ' -f3)"
|
|
echo ""
|
|
echo "%PGPSIG%"
|
|
gpg $GPG_OPTS --detach-sign --stdout --no-armor "$pkg" | base64 | tr -d '\n'
|
|
echo ""
|
|
} > "db_temp/$pkgname-$pkgver/desc"
|
|
done
|
|
|
|
# 3. Pack and Sign DB
|
|
cd db_temp
|
|
tar -c * | gzip -9 > ../hyprarch-repo.db.tar.gz
|
|
cd ..
|
|
gpg $GPG_OPTS --detach-sign --no-armor hyprarch-repo.db.tar.gz
|
|
|
|
# 4. Finalize
|
|
cp hyprarch-repo.db.tar.gz hyprarch-repo.db
|
|
cp hyprarch-repo.db.tar.gz.sig hyprarch-repo.db.sig
|
|
cp hyprarch-repo.db.tar.gz hyprarch-repo.files
|
|
cp hyprarch-repo.db.tar.gz hyprarch-repo.files.tar.gz
|
|
rm -rf db_temp
|
|
|
|
- name: Generate Subfolder Index
|
|
run: |
|
|
cd x86_64
|
|
echo "<html><head><title>Index of /x86_64/</title></head><body style='font-family: monospace;'>" > index.html
|
|
echo "<h1>Index of /x86_64/</h1><hr><pre>" >> index.html
|
|
echo "<a href='../'>../</a>" >> index.html
|
|
for file in *; do
|
|
if [[ "$file" != "index.html" ]]; then
|
|
size=$(du -sh "$file" | cut -f1)
|
|
date=$(date -r "$file" '+%d-%b-%Y %H:%M')
|
|
printf "<a href='%s'>%s</a>%-$(($(printf '%s' "$file" | wc -c) > 50 ? 1 : 50 - $(printf '%s' "$file" | wc -c)))s %s %8s\n" "$file" "$file" "" "$date" "$size" >> index.html
|
|
fi
|
|
done
|
|
echo "</pre><hr></body></html>" >> index.html
|
|
|
|
- name: Generate Root Landing Page
|
|
run: |
|
|
echo '<!DOCTYPE html>
|
|
<html>
|
|
<head>
|
|
<title>HyprArch Repository</title>
|
|
<style>
|
|
body { font-family: sans-serif; margin: 40px; line-height: 1.6; background: #2e3440; color: #eceff4; }
|
|
a { color: #88c0d0; text-decoration: none; }
|
|
a:hover { text-decoration: underline; }
|
|
.container { max-width: 800px; margin: auto; background: #3b4252; padding: 20px; border-radius: 8px; }
|
|
h1 { border-bottom: 2px solid #4c566a; padding-bottom: 10px; }
|
|
pre { background: #2e3440; padding: 15px; border-radius: 5px; color: #ebcb8b; }
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<div class="container">
|
|
<h1>🚀 HyprArch Custom Repository</h1>
|
|
<p>To use this repository, add the following to your <code>/etc/pacman.conf</code>:</p>
|
|
<pre>[hyprarch-repo]
|
|
SigLevel = Required DatabaseOptional
|
|
Server = https://hyprarch-repo.stuple.net/$arch</pre>
|
|
|
|
<h2>📦 Available Packages</h2>
|
|
<ul>
|
|
<li><a href="./x86_64/">Browse x86_64 Packages</a></li>
|
|
</ul>
|
|
<hr>
|
|
<p><small>Automated by GitHub Actions</small></p>
|
|
</div>
|
|
</body>
|
|
</html>' > index.html
|
|
|
|
- name: Commit and Push
|
|
run: |
|
|
git config --global user.name "github-actions[bot]"
|
|
git config --global user.email "github-actions[bot]@users.noreply.github.com"
|
|
git add .
|
|
if ! git diff-index --quiet HEAD; then
|
|
git commit -m "Fix GPG ioctl error and rebuild signed DB"
|
|
git push
|
|
else
|
|
echo "Nothing to change."
|
|
fi
|