From e6ac42e158ed5ceee2c58eaf2f23a0ad3bb82f41 Mon Sep 17 00:00:00 2001 From: "Danilo M." Date: Mon, 19 Oct 2026 20:53:05 +0200 Subject: Track the slackrepo config; add sb-publish and publish gates slackrepo_SBo-danix.conf is now kept here. Site values (rsync target, Gotify URL and key) moved to the root-only SBo-danix.local it sources; make-local.py migrates them out of an old inline config. The rsync push moved into sb-publish; rsync_push_hook calls it and holds back when SBB_PUBLISH=n, so sb-builder can build without publishing and publish later. --preview does not set OPT_DRY_RUN, so the hooks now also check OPT_PREVIEW: previews no longer notify Gotify or run manage-packages.sh for real. gpg-agent.conf adds allow-preset-passphrase so sb-builder can unlock the signing key for jobs without a tty. Co-Authored-By: Claude Opus 5.5 --- README.md | 18 +++++++++++++++++- 1 file changed, 17 insertions(+), 1 deletion(-) (limited to 'README.md') diff --git a/README.md b/README.md index 075c5b6..e462c7e 100644 --- a/README.md +++ b/README.md @@ -25,6 +25,19 @@ upstream tree), so the overlay version wins. `--yes` applies without asking, `--no` only shows the plan (for non-interactive callers such as sb-builder). `SBO_REPO` overrides the repo path. +- `slackrepo_SBo-danix.conf`: the slackrepo config for this repo + (`/etc/slackrepo/`). Site values (rsync target, Gotify URL and key) are not + in it: it sources the root-only `/etc/slackrepo/SBo-danix.local`, see + `SBo-danix.local.example`. Hooks honour `SBB_PUBLISH=n` (no rsync push, set by + sb-builder for unpublished runs), and a `--preview` neither notifies Gotify + nor runs `manage-packages.sh` for real. +- `sb-publish`: pushes the package repository to the mirror. Called by the + config's `rsync_push_hook`; run it by hand to publish builds made with + `SBB_PUBLISH=n`. +- `gpg-agent.conf`: root's gpg-agent config, with `allow-preset-passphrase` so + sb-builder can unlock the package signing key for jobs that have no tty. +- `make-local.py`: one-off migration, builds `SBo-danix.local` from the values + in an older config that still had them inline. - `sbpull.bash`: `sbpull {personal|pentesting} [--yes|--no]` shell function. Pulls one overlay subtree and runs `sbshadow` (passing the flag on), to carry overlay changes without a full rebuild. Source it from root's @@ -33,8 +46,11 @@ upstream tree), so the overlay version wins. ## Install ```bash -install -m 755 slackrepo_setup_SBo-danix.sh sbshadow /usr/local/bin/ +install -m 755 slackrepo_setup_SBo-danix.sh sbshadow sb-publish /usr/local/bin/ echo ". /path/to/sbpull.bash" >> ~/.bashrc +install -m 644 slackrepo_SBo-danix.conf /etc/slackrepo/ +install -m 600 SBo-danix.local.example /etc/slackrepo/SBo-danix.local # then edit +install -m 600 gpg-agent.conf /root/.gnupg/ && gpgconf --reload gpg-agent ``` Optional: `mkhint` (mkhintfile repo) for phantom-dep hintfile -- cgit v1.2.3