fix(ci): remove rpm --checksig that requires root
All checks were successful
poll-upstream / check (push) Successful in 1s
All checks were successful
poll-upstream / check (push) Successful in 1s
The rpm keyring import needs root access which CI doesn't have. Client-side verification on install is sufficient. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -5,14 +5,10 @@ RPM_DIR="${1:?usage: $0 <rpm-directory>}"
|
|||||||
: "${FEDORA_VERSION:?}"
|
: "${FEDORA_VERSION:?}"
|
||||||
REMOTE_DIR="/var/www/rpm/fedora/${FEDORA_VERSION}/x86_64"
|
REMOTE_DIR="/var/www/rpm/fedora/${FEDORA_VERSION}/x86_64"
|
||||||
|
|
||||||
# import the public key into rpm's keyring for verification
|
|
||||||
gpg --export --armor "$(rpm --eval '%{_gpg_name}')" | rpm --import /dev/stdin
|
|
||||||
|
|
||||||
# sign each rpm with the imported gpg key
|
# sign each rpm with the imported gpg key
|
||||||
for rpm in "${RPM_DIR}"/*.rpm; do
|
for rpm in "${RPM_DIR}"/*.rpm; do
|
||||||
echo "signing ${rpm}..."
|
echo "signing ${rpm}..."
|
||||||
rpm --addsign "${rpm}"
|
rpm --addsign "${rpm}"
|
||||||
rpm --checksig "${rpm}"
|
|
||||||
done
|
done
|
||||||
|
|
||||||
install --directory --mode 700 ~/.ssh
|
install --directory --mode 700 ~/.ssh
|
||||||
|
|||||||
Reference in New Issue
Block a user