Sign the repository

kiron1 · Dec 16, 2023 · 0311948 · 0311948
1 parent bf710a5
commit 0311948
Show file tree

Hide file tree

Showing 3 changed files with 24 additions and 6 deletions.
diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
@@ -18,6 +18,11 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v3
+      - name: Configure GPG Key
+        run: |
+          echo -n "$GPG_SIGNING_KEY" | base64 --decode | gpg --import
+        env:
+          GPG_SIGNING_KEY: ${{ secrets.GPG_SIGNING_KEY }}
       - name: Build
         run: ./apt.sh
         env:

diff --git a/apt.sh b/apt.sh
@@ -9,6 +9,7 @@ set -euo pipefail
 # repos=(kiron1/proxydetox kiron1/bazel-compile-commands)
 repos=(kiron1/proxydetox)
 machines=(x86_64)
+[email protected]
 
 declare -A aptarch=( ["x86_64"]="amd64" )
 
@@ -42,3 +43,9 @@ for s in "${suits[@]}"; do
   apt-ftparchive generate apt-ftparchive.conf
   apt-ftparchive "-c=${s}.conf" release "${archive_dir}/dists/${s}" > "${archive_dir}/dists/${s}/Release"
 done
+
+
+for s in "${suits[@]}"; do
+  gpg -u "${key}" -bao "${archive_dir}/dists/${s}/Release.gpg" "${archive_dir}/dists/${s}/Release"
+  gpg -u "${key}" --clear-sign --output "${archive_dir}/dists/${s}/InRelease" "${archive_dir}/dists/${s}/Release"
+done
diff --git a/public/index.html b/public/index.html
@@ -2,7 +2,6 @@
 <html>
 <head>
     <meta http-equiv="Content-type" content="text/html; charset=utf-8">
-    <meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'">
     <title>Colorto.cc Packages</title>
     <style type="text/css" media="screen">
     body {
@@ -18,7 +17,8 @@
 
     .container {
         margin: 50px auto 40px auto;
-        width: 600px;
+        //width: 600px;
+        width: 80vw;
     }
 
     .container h1, .container h2, .container h3 {
@@ -35,9 +35,7 @@
     }
 
     h1 {
-        width: 800px;
         position: relative;
-        left: -100px;
         letter-spacing: -1px;
         line-height: 60px;
         font-size: 60px;
@@ -78,20 +76,28 @@ <h1>Colorto.cc Packages</h1>
                 The site contains binary pacakges of selected <tt>colorto.cc</tt> applications.
         </p>
 
+        <p>
+            <strong>Install the signing key</strong>
+        </p>
+
+        <p>
+            <code>curl https://packages.colorto.cc/packages-colortocc.gpg | tee /usr/share/keyrings/packages-colortocc.gpg > /dev/null</code>
+        </p>
+
         <p>
             <strong>Ubuntu 20.04 LTS Focal Package Repository</strong>
         </p>
 
         <p>
-            <code>sudo apt-add-repository 'deb https://packages.colorto.cc/ubuntu focal main'</code>
+            <code>echo 'deb [signed-by=/usr/share/keyrings/packages-colortocc.gpg] https://packages.colorto.cc/ubuntu focal main' | sudo tee -a /etc/apt/sources.list.d/colortocc.list</code>
         </p>
 
         <p>
             <strong>Ubuntu 22.04 LTS Jammy Package Repository</strong>
         </p>
 
         <p>
-            <code>sudo apt-add-repository 'deb https://packages.colorto.cc/ubuntu jammy main'</code>
+            <code>echo 'deb [signed-by=/usr/share/keyrings/packages-colortocc.gpg] https://packages.colorto.cc/ubuntu jammy main' | sudo tee -a /etc/apt/sources.list.d/colortocc.list</code>
         </p>
 
     </div>