feat(release): add ASCII-armored .asc signature alongside .sig

This commit is contained in:
2026-07-17 09:57:39 -04:00
parent 06db6f1d48
commit 9081e08785
2 changed files with 15 additions and 5 deletions

View File

@@ -56,6 +56,7 @@ ASSET_PATH="$destbin/$assetname.tar.gz"
SIGNER_KEY="svatantrya@bitcoin-after.life"
ASSET_SHA256="$ASSET_PATH.sha256"
ASSET_SIG="$ASSET_PATH.sig"
ASSET_ASC="$ASSET_PATH.asc"
giteahost="https://bitcoin-after.life/gitea"
url_releases="$giteahost/api/v1/repos/$OWNER/$REPO/releases"
@@ -100,7 +101,12 @@ prepare_release(){
sha256sum "$asset_tar_gz" > "$asset_tar_gz.sha256"
if ! gpg --batch --yes --detach-sign --local-user "$SIGNER_KEY" "$asset_tar_gz"; then
echo_e "error signing release tarball"
echo_e "error signing release tarball (binary)"
exit 1
fi
if ! gpg --batch --yes --detach-sign --armor --output "$asset_tar_gz.asc" --local-user "$SIGNER_KEY" "$asset_tar_gz"; then
echo_e "error signing release tarball (ascii-armored)"
exit 1
fi
)
@@ -139,7 +145,7 @@ add_asset_release() {
exit 1
fi
local assets=("$ASSET_PATH" "$ASSET_SHA256" "$ASSET_SIG")
local assets=("$ASSET_PATH" "$ASSET_SHA256" "$ASSET_SIG" "$ASSET_ASC")
for asset in "${assets[@]}"; do
if [ ! -f "$asset" ]; then
echo_e "missing asset: $asset"
@@ -166,9 +172,12 @@ Verification Instructions:
SHA256 Checksum:
sha256sum -c $assetname.tar.gz.sha256
GPG Signature:
GPG Signature (binary):
gpg --verify $assetname.tar.gz.sig $assetname.tar.gz
GPG Signature (ASCII-armored):
gpg --verify $assetname.tar.gz.asc $assetname.tar.gz
Signed by Svātantrya (svatantrya@bitcoin-after.life)")
release_data=$(jq -n -c \