feat: enhance Arch repository creation in release workflow with impro…

…ved signing and verification
ParetoSecurity · Jan 9, 2025 · dbd7f00 · dbd7f00
1 parent cdd3ec3
commit dbd7f00
Showing 1 changed file with 16 additions and 3 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -63,10 +63,23 @@ jobs:
 
       - name: Create Arch repository
         run: |
-          sudo apt -y -q install pacman-package-manager
+          sudo add-apt-repository --yes ppa:michel-slm/kernel-utils
+          sudo apt-get -qq --yes install pacman-package-manager libarchive-tools
           mkdir -p apt/arch/
-          mv dist/*.pkg.tar.zst apt/arch/
-          repo-add apt/arch/paretosecurity.db.tar.zst apt/arch/*pkg.tar.zst || true
+          for file in dist/*.pkg.tar.zst ; do \
+            arch=$(basename $file .pkg.tar.zst | sed 's/.*-//') ; \
+            echo "Processing arch $arch..." && \
+            mkdir -p apt/aur/stable/$arch && \
+            cp dist/*-$arch.pkg.tar.zst apt/aur/stable/$arch && \
+            repo-add \
+              --verify \
+              --sign \
+              --new \
+              --remove \
+              --prevent-downgrade \
+              apt/aur/stable/$arch/manala.db.tar.gz apt/aur/stable/$arch/*-$arch.pkg.tar.zst && \
+            gpg --detach-sign --no-armor --batch --yes apt/aur/stable/$arch/*-$arch.pkg.tar.zst ; \
+          done
 
       - name: Host repository for testing
         uses: Eun/http-server-action@f71cec1321f665652a46c40b6852f8e5a68bfcd4 # v1