feat(forge): minor improvements to RPM signing

This commit is contained in:
Elian Doran 2025-08-14 12:40:19 +03:00
parent b66b4dec83
commit 50568704ca
No known key found for this signature in database

View File

@ -163,7 +163,7 @@ runs:
echo "Note: ZIP files are not code signed, but their contents should be" echo "Note: ZIP files are not code signed, but their contents should be"
fi fi
- name: Import GPG signing key - name: Sign the RPM
if: inputs.os == 'linux' if: inputs.os == 'linux'
shell: ${{ inputs.shell }} shell: ${{ inputs.shell }}
run: | run: |
@ -177,10 +177,10 @@ runs:
# Sign the RPM # Sign the RPM
rpm_file=$(find ./apps/desktop/dist -name "*.rpm" -print -quit) rpm_file=$(find ./apps/desktop/dist -name "*.rpm" -print -quit)
rpmsign --define "_gpg_name Trilium Notes Signing Key <triliumnotes@outlook.com>" --addsign "$rpm_file" rpmsign --define "_gpg_name Trilium Notes Signing Key <triliumnotes@outlook.com>" --addsign "$rpm_file"
rpm -Kv "$rpm_file"
# Validate code signing # Validate code signing
if ! rpm -K "$rpm_file" | grep -q "digests signatures OK"; then if ! rpm -K "$rpm_file" | grep -q "digests signatures OK"; then
echo .rpm file not signed echo .rpm file not signed
rpm -Kv "$rpm_file"
exit 1 exit 1
fi fi