It is nice to have signed RPMs, but the process is tedious. I have to copy the RPM out of customers' enclaves (painful), upload it to GitHub, sign it (on possible another computer), upload that. And repeat for every distro/version combination. Yuck!
Can I add a target to Makefile.bootstrap to upload the RPM to GitHub using curl? And can I also add a target to grab a release, sign it and upload from a trusted computer?
It is nice to have signed RPMs, but the process is tedious. I have to copy the RPM out of customers' enclaves (painful), upload it to GitHub, sign it (on possible another computer), upload that. And repeat for every distro/version combination. Yuck!
Can I add a target to Makefile.bootstrap to upload the RPM to GitHub using curl? And can I also add a target to grab a release, sign it and upload from a trusted computer?