Add artefact signing

diff --git a/.build.yml b/.build.yml
index 2b3b77e8d44198a51530f4e11c94b93d5fe34174..402571ee80ae61953ba0fbd157ad83f43131f482 100644 (file)
--- a/.build.yml
+++ b/.build.yml
@@ -8,11 +8,13 @@ packages:
   - aarch64-linux-gnu-gcc
   - tar
   - gzip
+  - gpg
 sources:
   - git@git.sr.ht:~rbdr/blog
 secrets:
   - 89d3b676-25d6-4942-8231-38b73aa62bf6
   - 0b0d3e5e-fbdc-41d0-97ed-ee654fe797ff
+  - 92255d6d-31d6-489b-87a5-b8f826c2eb77
 tasks:
   - set_rust: |
       cd blog

diff --git a/Makefile b/Makefile
index 8130a1cd04b9ab6cfbdca3f9531e346f45dd20d6..4c077dd9a3677d89fa81583ba6731f9893e56797 100644 (file)
--- a/Makefile
+++ b/Makefile
@@ -15,7 +15,9 @@ build: prepare
        cargo build --profile $(profile) --target $(target)
 
 release: rpm tar
-       rsync -avz $(app_name)-$(target)-$(channel).tar.gz deploy@conchos.unlimited.pizza:/srv/http/build.r.bdr.sh/$(app_name)
+       @$(eval filename := $(app_name)-$(target)-$(channel))
+       rsync -avz $(filename).tar.gz deploy@conchos.unlimited.pizza:/srv/http/build.r.bdr.sh/$(app_name)
+       rsync -avz $(filename).asc deploy@conchos.unlimited.pizza:/srv/http/build.r.bdr.sh/$(app_name)
 
 $(architectures):
 ifneq ($(channel),)
@@ -27,7 +29,9 @@ endif
 rpm: build
 
 tar: build
-       tar -czvf $(app_name)-$(target)-$(channel).tar.gz -C target/$(target)/$(profile)/ $(app_name)
+       @$(eval filename := $(app_name)-$(target)-$(channel))
+       tar -czvf $(filename).tar.gz -C target/$(target)/$(profile)/ $(app_name)
+       gpg --armor --output $(filename).asc --detach-sig $(filename).tar.gz
 
 package: $(architectures)