From: Ruben Beltran del Rio <redacted>
Date: Tue, 12 Mar 2024 20:05:30 +0000 (+0100)
Subject: Add artefact signing
X-Git-Tag: 7.0.0~18
X-Git-Url: https://git.r.bdr.sh/rbdr/blog/commitdiff_plain/4dfd8d3dd6d0e5835085781b98d2bb542ff4a6bb

Add artefact signing
---

diff --git a/.build.yml b/.build.yml
index 2b3b77e..402571e 100644
--- a/.build.yml
+++ b/.build.yml
@@ -8,11 +8,13 @@ packages:
   - aarch64-linux-gnu-gcc
   - tar
   - gzip
+  - gpg
 sources:
   - git@git.sr.ht:~rbdr/blog
 secrets:
   - 89d3b676-25d6-4942-8231-38b73aa62bf6
   - 0b0d3e5e-fbdc-41d0-97ed-ee654fe797ff
+  - 92255d6d-31d6-489b-87a5-b8f826c2eb77
 tasks:
   - set_rust: |
       cd blog
diff --git a/Makefile b/Makefile
index 8130a1c..4c077dd 100644
--- a/Makefile
+++ b/Makefile
@@ -15,7 +15,9 @@ build: prepare
 	cargo build --profile $(profile) --target $(target)
 
 release: rpm tar
-	rsync -avz $(app_name)-$(target)-$(channel).tar.gz deploy@conchos.unlimited.pizza:/srv/http/build.r.bdr.sh/$(app_name)
+	@$(eval filename := $(app_name)-$(target)-$(channel))
+	rsync -avz $(filename).tar.gz deploy@conchos.unlimited.pizza:/srv/http/build.r.bdr.sh/$(app_name)
+	rsync -avz $(filename).asc deploy@conchos.unlimited.pizza:/srv/http/build.r.bdr.sh/$(app_name)
 
 $(architectures):
 ifneq ($(channel),)
@@ -27,7 +29,9 @@ endif
 rpm: build
 
 tar: build
-	tar -czvf $(app_name)-$(target)-$(channel).tar.gz -C target/$(target)/$(profile)/ $(app_name)
+	@$(eval filename := $(app_name)-$(target)-$(channel))
+	tar -czvf $(filename).tar.gz -C target/$(target)/$(profile)/ $(app_name)
+	gpg --armor --output $(filename).asc --detach-sig $(filename).tar.gz
 
 package: $(architectures)