fix(ci): use heredoc for rpmmacros to avoid shell escaping issues
The echo-based approach was mangling rpm macro tokens like
%{__plaintext_filename}. Switch to a heredoc so the content is
written verbatim.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -128,8 +128,10 @@ jobs:
|
|||||||
- name: Import signing key
|
- name: Import signing key
|
||||||
run: |
|
run: |
|
||||||
echo "${{ secrets.RPM_SIGNING_KEY }}" | gpg --batch --import
|
echo "${{ secrets.RPM_SIGNING_KEY }}" | gpg --batch --import
|
||||||
echo "%_gpg_name ${{ secrets.RPM_SIGNING_KEY_ID }}" > ~/.rpmmacros
|
cat > ~/.rpmmacros << 'RPMMACROS'
|
||||||
echo "%__gpg_sign_cmd %{__gpg} --batch --no-armor --no-tty --pinentry-mode loopback --passphrase '' %{?_gpg_digest_algo:--digest-algo %{_gpg_digest_algo}} --no-secmem-warning -u \"%{_gpg_name}\" -sbo %{__signature_filename} --digest-algo sha256 %{__plaintext_filename}" >> ~/.rpmmacros
|
%_gpg_name ${{ secrets.RPM_SIGNING_KEY_ID }}
|
||||||
|
%__gpg_sign_cmd %{__gpg} --batch --no-armor --no-tty --pinentry-mode loopback --passphrase '' %{?_gpg_digest_algo:--digest-algo %{_gpg_digest_algo}} --no-secmem-warning -u "%{_gpg_name}" -sbo %{__signature_filename} --digest-algo sha256 %{__plaintext_filename}
|
||||||
|
RPMMACROS
|
||||||
|
|
||||||
- name: Sign and publish
|
- name: Sign and publish
|
||||||
run: ./script/publish-repo.sh rpms/
|
run: ./script/publish-repo.sh rpms/
|
||||||
|
|||||||
Reference in New Issue
Block a user