Answer architecture round 2: 1 🔴, 0 🟡; self-host signed apt, dnf and apk repositories on GitHub Pages in place of Cloudsmith, and keep an older tag's image while leaving latest alone

2026-10-13 19:56:37 +02:00
parent cc7d4fb972
commit f08182fb94
8 changed files with 173 additions and 56 deletions
@@ -78,10 +78,13 @@ jobs:
    permissions:
      contents: write
      packages: write
+      pages: write
+      id-token: write
    uses: ./.github/workflows/packages.yml
    with:
      tag: ${{ needs.release.outputs.tag }}
    secrets:
      TAP_GITHUB_TOKEN: ${{ secrets.TAP_GITHUB_TOKEN }}
      AUR_KEY: ${{ secrets.AUR_KEY }}
-      CLOUDSMITH_API_KEY: ${{ secrets.CLOUDSMITH_API_KEY }}
+      PACKAGES_GPG_KEY: ${{ secrets.PACKAGES_GPG_KEY }}
+      PACKAGES_RSA_KEY: ${{ secrets.PACKAGES_RSA_KEY }}