Skip to content

Commit 2a98589

Browse files
authored
Adjust APT release script during GPG key rotation (#464)
1 parent dcfa4ff commit 2a98589

File tree

2 files changed

+17
-0
lines changed

2 files changed

+17
-0
lines changed

scripts/new-public-key.gpg

+14
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
-----BEGIN PGP PUBLIC KEY BLOCK-----
2+
3+
mDMEZs7fYxYJKwYBBAHaRw8BAQdAyoFCfBmwdPB3c7pVsQw+lYSuJzXZO3VkQlZs
4+
mFteW5q0NVNUQUNLSVQgR1BHIFNJR05FUiA8c3RhY2tpdC1ncGctc2lnbmVyQHN0
5+
YWNraXQuY2xvdWQ+iJkEExYKAEEWIQS4bpVrR+qLfEWw7biJ8pBDfqyyqwUCZs7f
6+
YwIbAwUJAO1OAAULCQgHAgIiAgYVCgkICwIEFgIDAQIeBwIXgAAKCRCJ8pBDfqyy
7+
q9RbAPsF3c+JkyXkOpHlIRzy0dfFwNO0H75ev95TuAhZlk6+5wEAl/WOogYvlUbD
8+
x8Uko7PbY1cN3S1N8ZAruOabxSvjPAG4OARmzt9jEgorBgEEAZdVAQUBAQdAI62z
9+
jCQW8MI6f9SFsaMHDOkhLTcQ5dGfngybmHTWgy4DAQgHiH4EGBYKACYWIQS4bpVr
10+
R+qLfEWw7biJ8pBDfqyyqwUCZs7fYwIbDAUJAO1OAAAKCRCJ8pBDfqyyqwBxAP96
11+
6oW1eQLAeTkZTshfQOHU1JTEe5kNPqKg4j2QrnCyYwD/SI0yqHeHYSV+LQ1XYngY
12+
dGSb94FNr07033VwWlokFg4=
13+
=f80Z
14+
-----END PGP PUBLIC KEY BLOCK-----

scripts/publish-apt-packages.sh

+3
Original file line numberDiff line numberDiff line change
@@ -50,6 +50,9 @@ aptly snapshot create new-snapshot from repo new-repo
5050
printf "\n>>> Merging snapshots \n"
5151
aptly snapshot pull -no-remove -architectures="amd64,i386,arm64" current-snapshot new-snapshot updated-snapshot ${DISTRIBUTION}
5252

53+
# Import new public key (temporary)
54+
gpg --no-default-keyring --keyring=${CUSTOM_KEYRING_FILE} --import new-public-key.gpg
55+
5356
# Publish the new snapshot to the remote repo
5457
printf "\n>>> Publishing updated snapshot \n"
5558
aptly publish snapshot -keyring="${CUSTOM_KEYRING_FILE}" -gpg-key="${GPG_PRIVATE_KEY_FINGERPRINT}" -passphrase "${GPG_PASSPHRASE}" -config "${APTLY_CONFIG_FILE_PATH}" updated-snapshot "s3:${APT_BUCKET_NAME}:${APT_REPO_FOLDER}"

0 commit comments

Comments
 (0)