A self-contained Ubuntu APT repository served via GitHub Pages at
packages.honurobotics.com. .debs live under pool/; all metadata is
regenerated by apt-ftparchive and GPG-signed in CI, then published with
GitHub Actions Pages.
A producer repo in the HonuRobotics organization (e.g. encinowaves) builds
per-codename .debs on a release tag, attaches them to its GitHub Release, and
fires a repository_dispatch.
.github/workflows/ingest.yml downloads them, files them into pool/ with
scripts/sort-debs.sh, regenerates + signs metadata with
scripts/build-index.sh, verifies an install in a clean container with
scripts/verify-repo.sh, and deploys to Pages.
Give the producer repo a release.yml that builds ~ubuntuXX.XX-suffixed
.debs and dispatches publish-deb here with {repo, tag}. No changes needed
in this repo.
Production signing runs in the apt-signing GitHub environment. Store
APT_GPG_PRIVATE_KEY as an environment secret and configure required reviewers
for that environment before enabling ingestion.
The archive signing-key fingerprint is
EF5A A826 FB9E 5420 73A7 2FDF 05CD EB9C 453C 4234.
sudo sh -c "$(curl -fsSL https://packages.honurobotics.com/setup.sh)"
sudo apt install <package>
scripts/tests/test-build-index.sh
scripts/tests/test-sort-debs.sh
scripts/tests/test-verify-repo.sh # needs Docker
scripts/tests/test-setup-sh.sh