Action/archbuild
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Feat: add gpg key support

Browse Source
This commit is contained in:
Yi-Ting Shih
2025-07-28 00:23:26 +08:00
parent c81ddb0641
commit 9ba6362f00
1 changed files with 45 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

50
action.yaml
View File

@@ -8,6 +8,10 @@ inputs:
description: "The context of the build environment" description: "The context of the build environment"
required: false required: false
default: . default: .
gpg-password:
description: "Password of the gpg secret key to sign the package"
required: false
default: 'none'
repo-name: repo-name:
description: "The repo name to be pushed to" description: "The repo name to be pushed to"
required: false required: false
@@ -41,7 +45,12 @@ runs:
- name: Build package - name: Build package
run: | run: |
cd "${{ inputs.context }}" cd "${{ inputs.context }}"
makepkg -sc --needed --noconfirm if [[ "${{ inputs.gpg-password }}" != 'none' ]]; then
echo "${{ inputs.gpg-password }}" | \
makepkg -sc --needed --noconfirm --sign
else
makepkg -sc -needed --noconfirm
fi
- name: Setup MinIO - name: Setup MinIO
run: | run: |
@@ -52,19 +61,46 @@ runs:
- name: Copy repo db from MinIO - name: Copy repo db from MinIO
run: | run: |
mkdir repo mkdir repo
mcli cp "m/${{ inputs.minio-bucket }}/${{ inputs.repo-name }}.db" "repo/${{ inputs.repo-name }}.db.tar.zst"
mcli cp "m/${{ inputs.minio-bucket }}/${{ inputs.repo-name }}.files" "repo/${{ inputs.repo-name }}.files.tar.zst" mcli cp "m/${{ inputs.minio-bucket }}/${{ inputs.repo-name }}.db" \
"repo/${{ inputs.repo-name }}.db.tar.zst"
mcli cp "m/${{ inputs.minio-bucket }}/${{ inputs.repo-name }}.files" \
"repo/${{ inputs.repo-name }}.files.tar.zst"
echo "Copy ${{ inputs.repo-name }}.db and ${{ inputs.repo-name }}.files from MinIO" echo "Copy ${{ inputs.repo-name }}.db and ${{ inputs.repo-name }}.files from MinIO"
- name: Add pkgs to repo db - name: Add pkgs to repo db
run: | run: |
if [[ "${{ inputs.gpg-password }}" != 'none' ]]; then
echo "${{ inputs.gpg-password }}" | \
repo-add --verify --sign \
"repo/${{ inputs.repo-name }}.db.tar.gz" *.pkg.tar.zst --
mv *.pkg.tar.zst *.pkg.tar.zst.sig repo
else
repo-add "repo/${{ inputs.repo-name }}.db.tar.zst" *.pkg.tar.zst repo-add "repo/${{ inputs.repo-name }}.db.tar.zst" *.pkg.tar.zst
mv *.pkg.tar.zst repo mv *.pkg.tar.zst repo
fi
echo "Add $(ls *.pkg.tar.zst) to repo" echo "Add $(ls *.pkg.tar.zst) to repo"
- name: Update repo to MinIO - name: Update repo to MinIO
run: | run: |
mcli mv repo/${{ inputs.repo-name }}.db.tar.zst "m/${{ inputs.minio-bucket }}/${{ inputs.repo-name }}.db" mcli mv "repo/${{ inputs.repo-name }}.db.tar.zst" \
mcli mv repo/${{ inputs.repo-name }}.files.tar.zst "m/${{ inputs.minio-bucket }}/${{ inputs.repo-name }}.files" "m/${{ inputs.minio-bucket }}/${{ inputs.repo-name }}.db"
mcli mv repo/*.pkg.tar.zst "m/${{ inputs.minio-bucket }}" if [[ -e "repo/${{ inputs.repo-name }}.db.tar.zst.sig" ]]; then
echo "Update ${{ inputs.repo-name }}.db adn ${{ inputs.repo-name }}.files to MinIO" mcli mv "repo/${{ inputs.repo-name }}.db.tar.zst.sig" \
"m/${{ inputs.minio-bucket }}/${{ inputs.repo-name }}.db.sig"
fi
mcli mv "repo/${{ inputs.repo-name }}.files.tar.zst" \
"m/${{ inputs.minio-bucket }}/${{ inputs.repo-name }}.files"
if [[ -e "repo/${{ inputs.repo-name }}.files.tar.zst.sig" ]]; then
mcli mv "repo/${{ inputs.repo-name }}.files.tar.zst.sig" \
"m/${{ inputs.minio-bucket }}/${{ inputs.repo-name }}.files.sig"
fi
find repo -name '*.pkg.tar.zst' | xargs -I% \
mcli mv % "m/${{ inputs.minio-bucket }}"
find repo -name '*.pkg.tar.zst.sig' | xargs -I% \
mcli mv % "m/${{ inputs.minio-bucket }}"
echo "Update ${{ inputs.repo-name }}.db and ${{ inputs.repo-name }}.files to MinIO"