From 067f592615e03bfd143aeda0f5e26634f178a16d Mon Sep 17 00:00:00 2001 From: enricobuehler Date: Mon, 15 Jun 2026 13:01:24 +0000 Subject: [PATCH] feat(rpm): add the package-signing public key (activates the dormant signing) The dedicated EdDSA signing key (AF245C506F4E4763, "punktfunk packages ") whose private half is now the RPM_GPG_PRIVATE_KEY CI secret. Committing the public half so clients can fetch it (raw URL) for gpgcheck=1. This push triggers a rpm.yml run that signs 0.2.0~ciN via packaging/rpm/sign-rpms.sh (no longer a no-op); the gpgcheck=1 flip follows once that signed build is confirmed published. Co-Authored-By: Claude Opus 4.8 (1M context) --- packaging/rpm/RPM-GPG-KEY-punktfunk | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 packaging/rpm/RPM-GPG-KEY-punktfunk diff --git a/packaging/rpm/RPM-GPG-KEY-punktfunk b/packaging/rpm/RPM-GPG-KEY-punktfunk new file mode 100644 index 0000000..d5080ff --- /dev/null +++ b/packaging/rpm/RPM-GPG-KEY-punktfunk @@ -0,0 +1,9 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mDMEai/2eRYJKwYBBAHaRw8BAQdAFxLGvh8wvzES9ylmxT4gy1i58EituotPyZwt +z+y9rbC0JXB1bmt0ZnVuayBwYWNrYWdlcyA8cGFja2FnZXNAdW5vbS5pbz6IkAQT +FgoAOBYhBDG6uOY81eoQ6beahK8kXFBvTkdjBQJqL/Z5AhsjBQsJCAcCBhUKCQgL +AgQWAgMBAh4BAheAAAoJEK8kXFBvTkdj1QsBAM0sI/qUzGEbuC2Zrk36QQBrUu/9 +sy5uhYGZD6lMJ4uZAQC7W81H2gHlTDTA2Nq35HKW9IOU+Ll2c9fqa7fAIKf9Bg== +=e4Az +-----END PGP PUBLIC KEY BLOCK-----