austin/FlatKontrol
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: keep GnuPG home outside the workspace to avoid copying agent sockets

Browse Source
This commit is contained in:
austin
2026-06-30 19:47:52 -05:00
parent 064e3a7400
commit 502ec59145
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/build.yml
+3 -1
View File
@@ -46,7 +46,9 @@ jobs:
env: env:
FLATPAK_GPG_PRIVATE_KEY: ${{ secrets.FLATPAK_GPG_PRIVATE_KEY }} FLATPAK_GPG_PRIVATE_KEY: ${{ secrets.FLATPAK_GPG_PRIVATE_KEY }}
run: | run: |
export GNUPGHOME="$GITHUB_WORKSPACE/.gnupg" # Keep the keyring OUT of the workspace: the manifest's dir source
# copies the checkout, and gpg-agent sockets are "special files".
export GNUPGHOME="$RUNNER_TEMP/gnupg"
mkdir -p "$GNUPGHOME"; chmod 700 "$GNUPGHOME" mkdir -p "$GNUPGHOME"; chmod 700 "$GNUPGHOME"
printf '%s\n' "$FLATPAK_GPG_PRIVATE_KEY" | gpg --batch --import printf '%s\n' "$FLATPAK_GPG_PRIVATE_KEY" | gpg --batch --import
FPR=$(gpg --list-secret-keys --with-colons | awk -F: '/^fpr:/{print $10; exit}') FPR=$(gpg --list-secret-keys --with-colons | awk -F: '/^fpr:/{print $10; exit}')