update-deb-repo.yml

name: Update Deb Repo

on:
  workflow_dispatch:
  release:
    types: [released]

jobs:
  update-deb-repo:
    name: Update Deb Repo
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Get Latest Release
        id: release
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          gh release view --json tagName,assets > release.json
          echo "VERSION=$(jq -r '.tagName' release.json)" >> $GITHUB_OUTPUT
          gh release download -p ceramic-one_x86_64-unknown-linux-gnu.tar.gz
          tar xvf ceramic-one_x86_64-unknown-linux-gnu.tar.gz


      - name: Set up GPG
        run: |
          mkdir -p /tmp/gnupg
          echo "${{ secrets.REPO_GPG_PRIVATE_KEY }}" | gpg --homedir /tmp/gnupg --import
          echo "allow-loopback-pinentry" >> /tmp/gnupg/gpg-agent.conf
          echo "pinentry-mode loopback" >> /tmp/gnupg/gpg.conf
      - name: Install Dependencies
        run: sudo apt-get update && sudo apt-get install -y reprepro

      - name: Checkout Deb Repo
        uses: actions/checkout@v4
        with:
          repository: ceramicnetwork/debian-repo
          token: ${{ secrets.GH_TOKEN_PAT }}
      - name: Update Deb Repo
        working-directory: repo
        env:
          GPG_PASSPHRASE: ${{ secrets.REPO_GPG_PASSPHRASE }}
        run: |
          GNUPGHOME=/tmp/gnupg reprepro --basedir . includedeb stable ../ceramic-one.deb
      - name: Commit and Push changes
        working-directory: repo
        run: |
          git config --local user.email "github-actions[bot]@users.noreply.github.com"
          git config --local user.name "github-actions[bot]"
          git diff
          git add .
          git commit -m "chore: update ceramic-one deb to ${{ steps.release.outputs.VERSION }}"
          git push