Files
bearwave/scripts/build-flatpak.sh
Sebastian Palencsar 15691bc46f fix(flatpak): GPG-sign repo summaries during build and deploy
Unsigned summary updates left stale summary.sig files on the server,
causing BAD signature errors for clients. Sign exports and summaries
with the BearWave repo key and require .sig files before deploy.
2026-06-22 16:32:16 +02:00

22 lines
547 B
Bash
Executable File

#!/usr/bin/env bash
set -euo pipefail
root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
cd "$root"
gpg_key_id="${BEARWAVE_FLATPAK_GPG_KEY:-AA1D2F0170800855}"
flatpak-builder \
--repo=flatpak_repo \
--gpg-sign="${gpg_key_id}" \
--force-clean \
flatpak_build \
de.nerdbear.bearwave.json
flatpak build-update-repo --gpg-sign="${gpg_key_id}" flatpak_repo
echo "Flatpak repo updated in flatpak_repo/."
echo "Deploy with: scripts/deploy-flatpak.sh"
if [[ "${1:-}" == "--deploy" ]]; then
exec "${root}/scripts/deploy-flatpak.sh"
fi