mirror of
https://github.com/outbackdingo/firezone.git
synced 2026-01-27 10:18:54 +00:00
883d95c2c8
In order to secure an APT repository, the `Release` file containing the hashes of all packages needs to be signed with a GPG key. These signatures simply need to be synced back up to the repository. The rest is handled by `apt` itself. Resolves: #10599
31 lines
876 B
YAML
31 lines
876 B
YAML
name: Sync APT repository metadata
|
|
run-name: Triggered by ${{ github.actor }}
|
|
on:
|
|
workflow_dispatch:
|
|
workflow_call:
|
|
|
|
concurrency:
|
|
group: "create-apt-repository" # Unique group name to force only a single job at a time.
|
|
cancel-in-progress: false
|
|
|
|
jobs:
|
|
create-apt-repository-metadata:
|
|
runs-on: ubuntu-24.04
|
|
steps:
|
|
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- uses: ./.github/actions/setup-azure-cli
|
|
|
|
- uses: ./.github/actions/setup-gpg
|
|
id: setup-gpg
|
|
with:
|
|
key: ${{ secrets.APT_REPOSITORY_GPG_KEY }}
|
|
email: packages@firezone.dev
|
|
|
|
- run: scripts/sync-apt.sh
|
|
env:
|
|
AZURERM_ARTIFACTS_CONNECTION_STRING: ${{ secrets.AZURERM_ARTIFACTS_CONNECTION_STRING }}
|
|
GPG_KEY_ID: ${{ steps.setup-gpg.outputs.key_id }}
|