Fix rpm apt release

Author: jfantinhardesty

.github/workflows/publish-release.yml

@@ -191,8 +191,8 @@ jobs:
           TAG: ${{ github.ref_name }}
         run: |
           mkdir ./packages
-          gh release download $TAG --dir ./packages -p "*.deb"
-          gh release download $TAG --dir ./packages -p "*.rpm"
+          gh release download "$TAG" --repo "${{ github.repository }}" --dir ./packages -p "*.deb"
+          gh release download "$TAG" --repo "${{ github.repository }}" --dir ./packages -p "*.rpm"
 
       - name: Import GPG key
         id: import_gpg
@@ -204,6 +204,7 @@ jobs:
       - name: Update APT repository
         working-directory: ./gh-pages
         run: |
+          set -euo pipefail
           # Move new .deb files into the repository
           find ../packages -name "*_amd64.deb" -exec mv {} dists/stable/main/binary-amd64/ \;
           find ../packages -name "*_arm64.deb" -exec mv {} dists/stable/main/binary-arm64/ \;
@@ -212,7 +213,7 @@ jobs:
           gzip -k -f dists/stable/main/binary-amd64/Packages
           apt-ftparchive packages dists/stable/main/binary-arm64 > dists/stable/main/binary-arm64/Packages
           gzip -k -f dists/stable/main/binary-arm64/Packages
-          # Generate and sign the Release file
+          # Generate Release file
           apt-ftparchive \
             -o APT::FTPArchive::Release::Origin="Seagate Technology" \
             -o APT::FTPArchive::Release::Label="cloudfuse" \
@@ -222,21 +223,28 @@ jobs:
             -o APT::FTPArchive::Release::Components="main" \
             -o APT::FTPArchive::Release::Description="APT repository for cloudfuse" \
             release dists/stable > dists/stable/Release
-          gpg --clearsign -u "${STEPS_IMPORT_GPG_OUTPUTS_FINGERPRINT}" --batch --pinentry-mode loopback --passphrase "${SECRET_GPG_PASSPHRASE}" -o dists/stable/InRelease dists/stable/Release
-          gpg -u "${STEPS_IMPORT_GPG_OUTPUTS_FINGERPRINT}" --batch --pinentry-mode loopback --passphrase "${SECRET_GPG_PASSPHRASE}" -abs -o dists/stable/Release.gpg dists/stable/Release
+          # Remove old signatures to avoid "File exists"
+          rm -f dists/stable/InRelease dists/stable/Release.gpg
+          # Sign the Release file
+          gpg --yes --clearsign -u "${STEPS_IMPORT_GPG_OUTPUTS_FINGERPRINT}" --batch --pinentry-mode loopback --passphrase "${SECRET_GPG_PASSPHRASE}" -o dists/stable/InRelease dists/stable/Release
+          gpg --yes -u "${STEPS_IMPORT_GPG_OUTPUTS_FINGERPRINT}" --batch --pinentry-mode loopback --passphrase "${SECRET_GPG_PASSPHRASE}" -abs -o dists/stable/Release.gpg dists/stable/Release
         env:
           STEPS_IMPORT_GPG_OUTPUTS_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }}
           SECRET_GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
 
       - name: Update RPM repository
         working-directory: ./gh-pages
         run: |
+          set -euo pipefail
           # Move new .rpm files
           find ../packages -name "*.rpm" -exec mv {} rpm-repo/ \;
           # Create/update repository metadata
           createrepo_c --database rpm-repo/
+          # Remove old signatures to avoid "File exists"
+          rm -f rpm-repo/repodata/repomd.xml.asc rpm-repo/repodata/repomd.xml.gpg
           # Sign the repository metadata
-          gpg --detach-sign --armor -u "${STEPS_IMPORT_GPG_OUTPUTS_FINGERPRINT}" --batch --pinentry-mode loopback --passphrase "${SECRET_GPG_PASSPHRASE}" rpm/repodata/repomd.xml
+          gpg --yes --detach-sign --armor -u "${STEPS_IMPORT_GPG_OUTPUTS_FINGERPRINT}" --batch --pinentry-mode loopback --passphrase "${SECRET_GPG_PASSPHRASE}" -o rpm-repo/repodata/repomd.xml.asc \
+             rpm-repo/repodata/repomd.xml
         env:
           STEPS_IMPORT_GPG_OUTPUTS_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }}
           SECRET_GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}