ci: authenticate apt to the private package registry (Basic Auth via token)

This commit is contained in:
2026-06-22 19:27:00 +03:00
parent bd8b966017
commit b14ea0e381
+9
View File
@@ -86,11 +86,20 @@ jobs:
env: env:
SERVER: ${{ github.server_url }} SERVER: ${{ github.server_url }}
OWNER: ${{ github.repository_owner }} OWNER: ${{ github.repository_owner }}
ACTOR: ${{ github.actor }}
TOKEN: ${{ secrets.PUBLISH_TOKEN }}
run: | run: |
set -euo pipefail set -euo pipefail
apt-get update apt-get update
apt-get install -y --no-install-recommends \ apt-get install -y --no-install-recommends \
cmake make gcc libc6-dev dpkg-dev file ca-certificates curl cmake make gcc libc6-dev dpkg-dev file ca-certificates curl
# The Gitea Debian registry is private: apt needs HTTP Basic Auth. [trusted=yes]
# only skips GPG verification, NOT authentication — hence the prior 401. The token
# is written to auth.conf.d (never echoed to the log).
install -d -m 0700 /etc/apt/auth.conf.d
printf 'machine %s login %s password %s\n' "${SERVER#*://}" "$ACTOR" "$TOKEN" \
> /etc/apt/auth.conf.d/gitea.conf
chmod 600 /etc/apt/auth.conf.d/gitea.conf
echo "deb [trusted=yes] ${SERVER}/api/packages/${OWNER}/debian stable main" \ echo "deb [trusted=yes] ${SERVER}/api/packages/${OWNER}/debian stable main" \
> /etc/apt/sources.list.d/gitea.list > /etc/apt/sources.list.d/gitea.list
apt-get update apt-get update