Breadway/bos
1
0
Fork 0
Code Issues Pull requests Projects Releases 8 Packages Wiki Activity Actions

ci: publish signed [breadway] repo to dl.breadway.dev/arch

Browse source 
Host job on hestia (no container) collects breadlock plus the ISO AUR
republishes from the Forgejo registry, detach-signs them, repo-add -s,
and writes /srv/breadway-dl/arch/x86_64/. ISO SigLevel stays Never.
This commit is contained in:
Breadway 2026-08-16 00:55:59 +08:00
parent 863fb80de2
commit 93e29e85d0
5 changed files with 453 additions and 32 deletions
Download patch file Download diff file Expand all files Collapse all files

4
.forgejo/workflows/release-iso.yml
View file

@ -12,8 +12,8 @@ name: Build and release ISO
# MIRROR_TOKEN — GitHub personal access token with repo scope
# GPG_PRIVATE_KEY — armoured secret key for the dedicated "BOS Release Signing"
# identity (releases@breadway.dev); public half is committed
# at KEYS.asc for verifying ISO SHA256SUMS only. That key
# does not sign the [breadway] pacman repo. No passphrase
# at KEYS.asc. Signs ISO SHA256SUMS here; the same secret
# signs the [breadway] repo in signed-repo.yml. No passphrase
# (CI-only key, access controlled via the Forgejo secret
# store).