3 Commits

Author SHA1 Message Date
Thomas Eizinger
883d95c2c8 feat(apt): sign contents of APT repository (#10688)
In order to secure an APT repository, the `Release` file containing the
hashes of all packages needs to be signed with a GPG key. These
signatures simply need to be synced back up to the repository. The rest
is handled by `apt` itself.

Resolves: #10599
2025-10-22 23:44:48 +00:00
Thomas Eizinger
c197d37aaa ci: install latest Azure CLI for APT sync (#10678)
Whichever version of the CLI is installed on the GitHub runners doesn't
appear to be able to run our script (which works just fine locally).
2025-10-22 05:09:13 +00:00
Thomas Eizinger
7e5ec7c2d7 ci: upload .deb from releases to APT repository (#10587)
This PR creates the necessary CI infrastructure to copy `.deb` packages
from releases to our APT repository. Re-generation of the index is
separated out into a dedicated workflow to avoid concurrency issues and
so we can re-generate it without making a release.

---------

Signed-off-by: Thomas Eizinger <thomas@eizinger.io>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-10-16 19:39:35 +00:00