157ed6e378
The old bakery-signing-key.minisign-sec on hestia was password-encrypted and the password was lost, so scripts/gen-index.sh never actually signed index.json (silent no-op warning). bakery/src/manifest.rs (0.3.0+) hard- requires that signature, so every bakery command has been failing with 'fetching index.json.minisig — the index must be signed before it can be trusted' since the signing enforcement shipped. Generated a new no-password minisign keypair on hestia (~/.secrets/bakery-signing-key-2.minisign-sec), updated the hardcoded PUBKEY in manifest.rs and get.sh to match, wired BAKERY_MINISIGN_SEC_KEY_PATH as a Forgejo Actions secret so future CI releases sign automatically, and manually signed+published the current index.json on hestia so bakery works immediately.
28 lines
594 B
TOML
28 lines
594 B
TOML
[workspace]
|
|
members = ["bakery", "bread-theme", "bread-utils", "bread-onnx"]
|
|
resolver = "2"
|
|
|
|
[workspace.package]
|
|
version = "0.3.1"
|
|
edition = "2021"
|
|
license = "MIT"
|
|
authors = ["Breadway <plasticbread849@gmail.com>"]
|
|
|
|
[workspace.dependencies]
|
|
anyhow = "1"
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
toml = "0.8"
|
|
dirs = "5"
|
|
ureq = { version = "2", features = ["json"] }
|
|
sha2 = "0.10"
|
|
hex = "0.4"
|
|
clap = { version = "4", features = ["derive", "env"] }
|
|
chrono = "0.4"
|
|
minisign-verify = "0.2"
|
|
tracing = "0.1"
|
|
|
|
[profile.release]
|
|
lto = "thin"
|
|
codegen-units = 1
|
|
strip = "symbols"
|