ci(gitea): use dedicated artix runner (runs-on: artix)

Drop the job-level container override now that a native Artix host runner (artix-runner, label 'artix') is registered on Gitea. Jobs run directly in the Artix runner container — no nested container, no Debian base image. Remove the obsolete GitHub workflow file.
2026-08-20 20:45:30 +02:00
parent ce8fb94a91
commit 7256fd331a
1 changed files with 14 additions and 9 deletions
@@ -0,0 +1,87 @@
+name: Build Packages
+
+on:
+  push:
+    branches: [master]
+  workflow_dispatch:
+  schedule:
+    - cron: "0 0 * * 1"
+
+permissions:
+  contents: write
+
+jobs:
+  build:
+    runs-on: artix
+
+    steps:
+    - uses: actions/checkout@v4
+      with:
+        token: ${{ secrets.GITEA_TOKEN }}
+
+    - name: Install deps
+      run: |
+        pacman -Syu --noconfirm --needed --overwrite='*' \
+          python-yaml \
+          git \
+          sudo \
+          base-devel \
+          debugedit
+
+    - name: Create builder user
+      run: |
+        useradd -m builder
+        echo "builder ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers
+
+    - name: Build packages
+      run: python build-packages.py
+
+    - name: Set up repo
+      run: |
+        mkdir -p repo/antergos-pkgs/os/x86_64
+        cp /tmp/pkgout/*.pkg.tar.zst repo/antergos-pkgs/os/x86_64/
+
+    - name: Generate repo database
+      run: |
+        cd repo/antergos-pkgs/os/x86_64
+        repo-add antergos-pkgs.db.tar.gz *.pkg.tar.zst
+
+    - name: Sign repo database
+      env:
+        SIGNING_KEY: ${{ secrets.SIGNING_KEY }}
+        SIGNING_PASSPHRASE: ${{ secrets.SIGNING_PASSPHRASE }}
+      run: |
+        if [[ -n "$SIGNING_KEY" && -n "$SIGNING_PASSPHRASE" ]]; then
+          export GNUPGHOME=/tmp/gpg-sign
+          mkdir -p "$GNUPGHOME" && chmod 700 "$GNUPGHOME"
+          echo "$SIGNING_KEY" | base64 -d > /tmp/signing-key.gpg
+          gpg --batch --import /tmp/signing-key.gpg
+          cd repo/antergos-pkgs/os/x86_64
+          gpg --batch --yes --pinentry-mode loopback --passphrase "$SIGNING_PASSPHRASE" \
+            --detach-sign --output antergos-pkgs.db.tar.gz.sig antergos-pkgs.db.tar.gz
+          cp antergos-pkgs.db.tar.gz.sig antergos-pkgs.db.sig
+
+          rm -rf "$GNUPGHOME" /tmp/signing-key.gpg
+        else
+          echo "Signing secrets not set — skipping signature"
+        fi
+
+    - name: Copy to root for flat-URL compat
+      run: |
+        cp repo/antergos-pkgs/os/x86_64/*.pkg.tar.zst repo/
+        cp repo/antergos-pkgs/os/x86_64/antergos-pkgs.db* repo/
+
+    - name: Generate index and package list
+      run: python generate-index.py
+
+    - name: Deploy to repo branch
+      env:
+        GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
+      run: |
+        git config user.name "gitea-actions"
+        git config user.email "actions@antergos-nas.taild4360b.ts.net"
+        git remote set-url origin "https://git:${GITEA_TOKEN}@antergos-nas.taild4360b.ts.net/Antergos-NeXT/antergos-packages.git"
+        git checkout -B repo
+        git add -f repo
+        git commit -m "Update packages [skip ci]" || echo "Nothing to commit"
+        git push origin repo --force