thepaperpilot/forgejo
1
0
Fork 0
Code Issues Pull requests Releases Activity Actions

[CI] Forgejo Actions based release process (squash) no ownca

Browse source 
The private Forgejo instance trusted with the release signing keys no
longer requires the installation of the ownca certificate authority.

Refs: https://codeberg.org/forgejo/docs/pulls/338
(cherry picked from commit 72f9ae796d)
This commit is contained in:
Earl Warren 2023-12-28 17:23:09 +01:00
parent ac889d4290
commit ba222c299c
No known key found for this signature in database
GPG key ID: 0579CB2928A78A00
1 changed files with 1 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
.forgejo/workflows/publish-release.yml
View file

@ -13,7 +13,7 @@
# DOER: forgejo-experimental-ci # DOER: forgejo-experimental-ci
# TOKEN: <generated from codeberg.org/forgejo-experimental-ci> # TOKEN: <generated from codeberg.org/forgejo-experimental-ci>
# #
# https://forgejo.octopuce.forgejo.org/forgejo/forgejo # http://private.forgejo.org/forgejo/forgejo
# #
# Copies & sign a release from codeberg.org/forgejo-integration to codeberg.org/forgejo # Copies & sign a release from codeberg.org/forgejo-integration to codeberg.org/forgejo
# #
@ -37,13 +37,6 @@ jobs:
runs-on: self-hosted runs-on: self-hosted
if: secrets.DOER != '' && secrets.FORGEJO != '' && secrets.TO_OWNER != '' && secrets.FROM_OWNER != '' && secrets.TOKEN != '' if: secrets.DOER != '' && secrets.FORGEJO != '' && secrets.TO_OWNER != '' && secrets.FROM_OWNER != '' && secrets.TOKEN != ''
steps: steps:
- name: install the certificate authority
if: secrets.ROLE == 'forgejo-release'
run: |
apt-get install -qq -y wget
wget --no-check-certificate -O /usr/local/share/ca-certificates/enough.crt https://forgejo.octopuce.forgejo.org/forgejo/enough/raw/branch/main/certs/2023-05-13/ca.crt
update-ca-certificates --fresh
- uses: actions/checkout@v3 - uses: actions/checkout@v3
- name: copy & sign binaries and container images from one owner to another - name: copy & sign binaries and container images from one owner to another