From 93d442d270264f02fb3cb404c424c5dece298d03 Mon Sep 17 00:00:00 2001
From: rob thijssen <grenade@rob.tn>
Date: Sun, 26 Apr 2026 17:56:50 +0300
Subject: [PATCH] fix(ci): capture rpm --addsign output to file for error
 reporting

Direct stdout/stderr capture may miss gpg subprocess output. Write
to a temp file and cat it on failure.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 script/publish-repo.sh | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/script/publish-repo.sh b/script/publish-repo.sh
index 395d8c2..428d934 100755
--- a/script/publish-repo.sh
+++ b/script/publish-repo.sh
@@ -9,8 +9,9 @@ REMOTE_DIR="/var/www/rpm/fedora/${FEDORA_VERSION}/x86_64"
 # sign each rpm with the imported gpg key
 for rpm in "${RPM_DIR}"/*.rpm; do
     echo "signing ${rpm}..."
-    if ! rpm --addsign "${rpm}" 2>&1; then
-        echo "failed to sign ${rpm}" >&2
+    if ! rpm --addsign "${rpm}" > /tmp/rpmsign.log 2>&1; then
+        echo "failed to sign ${rpm}:" >&2
+        cat /tmp/rpmsign.log >&2
         exit 1
     fi
 done