From 06b9a8149fc84fecaea420cfecde0f797a23bc51 Mon Sep 17 00:00:00 2001
From: Chris Schinnerl <chris@sia.tech>
Date: Mon, 5 Feb 2024 15:18:20 +0100
Subject: [PATCH 01/21] ci: sign deb files

---
 .github/workflows/build.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index df423fb2..34e79d8a 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -46,6 +46,10 @@ jobs:
           run: |
             apt update && apt install -y unzip dpkg-dev git
 
+        - name: Import GPG Key
+          run: |
+            echo "${{ secrets.GPG_SIGNING_KEY }}" | gpg --import
+
         - name: Checkout repo
           uses: actions/checkout@v3
 
@@ -116,6 +120,9 @@ jobs:
                 mkdir -p ./debian/pool/main/${{ env.PROJECT }}
                 mv ${BUILD_NAME}.deb ./debian/pool/main/${{ env.PROJECT }}/
 
+                # Sign the .deb file
+                dpkg-sig --sign builder ./debian/pool/main/${{ env.PROJECT }}/${BUILD_NAME}.deb
+
                 # Remove the temporary folders
                 rm -rf ${BUILD_NAME}
 

From fcf8fd7e4a274adb0fd44b3ef8b599932973faed Mon Sep 17 00:00:00 2001
From: Chris Schinnerl <chris@sia.tech>
Date: Mon, 5 Feb 2024 15:28:08 +0100
Subject: [PATCH 02/21] add public key

---
 .github/workflows/build.yml |   3 +--
 debian/gpg                  | Bin 0 -> 2264 bytes
 2 files changed, 1 insertion(+), 2 deletions(-)
 create mode 100644 debian/gpg

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 34e79d8a..8beb8404 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -48,7 +48,7 @@ jobs:
 
         - name: Import GPG Key
           run: |
-            echo "${{ secrets.GPG_SIGNING_KEY }}" | gpg --import
+            echo "${{ secrets.GPG_SIGNING_KEY }}" | base64 --decode | gpg --import
 
         - name: Checkout repo
           uses: actions/checkout@v3
@@ -62,7 +62,6 @@ jobs:
             run_id: ${{ env.WORKFLOW_ID }}
             workflow_conclusion: success
 
-
         - name: Build .deb Package
           shell: bash
           run: |
diff --git a/debian/gpg b/debian/gpg
new file mode 100644
index 0000000000000000000000000000000000000000..d4a133d46891e3f78a077f6caa7eab4832806460
GIT binary patch
literal 2264
zcmV;}2q*WM0u2OZ!0K-S5CG&+<?us+zGwBftromdFZs(tR4oO_Y8;bWjzR!OCuM(%
zHPSs4t!+Er4OfZc{`Out&4B(5(HOD1IY^rTXBfMU)&-@RBd0%8uEOJm%WyL1ivL8C
z(M4?7ZBJNWGE28HzCB(jb9zD<CBp1GV7I>%kb9CV7~OHI7#(d*f)IfNhlKh1(QX`j
z_^T(Y)(gw*qW2}UNSgVMENS#VT@u2X7X=hU8F1vW6R>h)TP}LES+;$KafOz=|7;T?
zDW)(8nzij#7=h%?l)_b@zclS-wY>UlkLVbHWStyd>777zOY{2bCkD&~jS%!$GJSMk
zhn0GN(vOf1)$QLqxdVoAlz3n9>)v~l4G_9e(uh%L;{lmwNha~4j%{psyZJR~vIujK
z6X-d0q8MslvkvR<>pq$avpD@G&jtkdFYDGVe3SZ>_M+CT$~x-QFk#~<($vLn>>`||
z%|49=!PVUiUa)ny!xz2->$rc3z`@64P;QgjCJ6KMaMWr4H~t{&Dt}x>h2t00()mr-
zQ7j913(Ev1id%je`Qh%~$%J}2^h8q2uLb*f3G*@_=8xJ&`Iwp!tl$lL8qC)Nu896;
zt5|~<V)~HV8b_EHJ}@D4OC(}AD!r*ecI{$GC2)0@-};rSu~H(*g$WYk@_wN9L7|u)
zsyRjN_|^r!;12*10RRECAX8~!AX8~)ZfS03AZulLAUtSgY;12pb7^5NbY){`K8XTU
z1QP)W06rEW1e9%n6?G2Ga!UQ^ZjxpT2?J!xF9iZ+!0K-T8v_Li1$M`81q%rX2Lc8a
z3JC}c0t6NU0|5da0Rk6*0162Zl4c7D17ylC5cLoM#lF{`4&5wPpOM_h$L~Wu4#4vD
zt86I28>4_k6kFziks$5bx~eCkW!UctpW3JoWe*9<9)-0=N|>2k<QN)L5x&GUD?!kk
z+Rq3>1qDq7X5BeIy%Dl_zwUN<ufLJ!Qd}E(887B7`CODNqUUt#(L7daSG9q*VN1H;
z%UkZVqW8nr3MAGjR@W1y7c+inHoQByUqKUNpB7c=k52Ij2tI;z7v1#B3xsJYllWR@
zR<LqE&%DZM2W!{MNoiH5DU!VGY<rRwgm^?`o&}N0a54aLKoN5N@q}rv8s`t)gNMl(
zEoF_0tX~>n)*pfTb2`9-)Edffmq?T%+aTB8E*YCOfR^JFsMWY^^B-kTZzQSyI=%b*
z7i>|$8IO;3yZ7Xd{UJ~{p3@FO47m;Ke_jj?l3KFdsxanL?6&N|BB&kWuA5_(mB|*W
z0x>9B4R?#Rovg<lZJT`WygOgTGK{Y2cc|q0u^{gu4ebb59pez3<FrwRe%hEqxWFO}
zq}*sGcodc)e91tkfX0Y|I}W7d##c(@t5(%w_=#fm!36hnRT+QC^@`tWmZ{cowI)g|
z%wbFWlm84;${IK-8(4P7^HsN_XRh^IX12~TvZeSyi&%p;|5EuZnX>iS7I?S37#7;z
zK!(x}@&=<rD5&q)>6?ktAV(Mc-%N^=xdIIYWx(oh0T2Mrn5HoYKhw?Q<I$v)Bu*SQ
zSDApA%cZj;QHew6h6jkO8h*3g6?bPtfbeJ9xxOjD?jXY@eK3F$A00QC?1@V6!XM|p
zarKgVIkt+cnV=Enc=76_9^lNM!1Uqqkq=nm(f0p~MM%o2&b2KY&Ae6$zXzuHNU4c#
zJMnXR!4rQ^e*lSDU(3>;guQz}9D{y^+66ZvyiPZ}E&<a(im_t31mv!zuWZ~qD&zVe
zr6_?)9o?(cg2p=jWnvJTe9N*#YP9U#j3K_8l0@QX2-d^YiDsLi?QP>^+Sk80)p{o*
zmUR2onVHp*6|l)=;>s~0jBT<YLdT6?O5L#TinK+%+^rX{DI@c%B9oL!5#VoQ^i~l>
zko~gt7C8d~`gVL5Lg8^7$S>g#S&mtMZ@txDzpO;miG{q$D|aBV&w9@^6T!&a7)`j!
zEcLsVpH%{I(3pWSEjTujt4^`xKCV-Tq1XuHfRKb?Td`_K#B+`iYoQw)vLf+<8m>;i
zuE<Ws3kj0V${=AoMS@u0i$_%r%E2IK$-+e$ZM4hyw$x=)i8yRnndMgp8g=Vrl-0rN
zqnafkP5{PoK2L5yA!Rq^{dr76Khv#iMM&a<x^DOpcqNuF@P+S8w^>U-HY|+PpCR-a
z+MibX8AH@AVaS`WL=+M6>>pw!c%SC&vYR^q5di=Ji2^(X7y$?XCKe$Clx=_&bq>sO
zO8w|=l4c7D17ylC1p;Nj>Td!Y3<U`VcE@i33JDOBW(x@eWXdnIOb`4Eih^GG1Ctf0
zh%*9V0F5mR3#4?E=$yU{xvPXsIs6dKB|hs6BW#v#DjxoTE0d1grtBC?*EdiWt11Em
zW&^N+!*;wj(@EKGsT!ch4LTv-Bgk3vD2hWKgyL7M0A!yV2uOawAU#JzWp5SO^ltlY
z`&1U$TQS1&iYKA(&a)>ydRF{jKE0GOOTbMxfBct`i)6NoJL+!IFGC>nQIu2~CUOJ|
zKYxfP<?Y+95s&TLm8LcobJJF<NdGGgfMqW@8I|$*|D^4Tl<VojhLn}`3^rR>7_xbR
zu)d!TDI4N+Ah)P8T}M2fEd+&j6#_^aa0r7x54*UkmjcEf%6CUENp&m0NEW%N3ZKNJ
z;{KsFy#;TLBrH>vkSk?O!4zR*d`LJ}?#(|^<2GZ)zJkFAX=*=auuY2cIPBA6cktM@
zX1wVgkL994E<0}2Sq=EsNW&?(3!@pRMp3^-mFD^e2vM44heO`m&vS;C3Qgje<xvyG
zn24dq!8VqDoGH)0YABRU;(rc16<u)C1r2!X^CqLSX*q3MEzB`h`CuehlCQ%~yAR?(
z>q9tB1tab%$}&Ilh1R`z=|lF)&eq2s<;m94`rk>>_}gd7gPcDoyoCr}>6vmP+o1*j
m%i}V>Ddv`BkVA2=F4z98a83*JL2hKukK&*?#9PWl_eU+^#W`#M

literal 0
HcmV?d00001


From 0c445cb2341c6a581d741d8c0446ec605c7baaff Mon Sep 17 00:00:00 2001
From: Chris Schinnerl <chris@sia.tech>
Date: Mon, 5 Feb 2024 15:35:23 +0100
Subject: [PATCH 03/21] ci: install dpkgs-sig

---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 8beb8404..736d72d6 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -44,7 +44,7 @@ jobs:
 
         - name: Install dependencies
           run: |
-            apt update && apt install -y unzip dpkg-dev git
+            apt update && apt install -y unzip dpkg-dev git dpkg-sig
 
         - name: Import GPG Key
           run: |

From 98eae8acbba89852b4ccaaba09b1706dac0c4609 Mon Sep 17 00:00:00 2001
From: Chris Schinnerl <chris@sia.tech>
Date: Mon, 5 Feb 2024 15:41:34 +0100
Subject: [PATCH 04/21] ci: use gpg directly for signing

---
 .github/workflows/build.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 736d72d6..5ba7750f 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -44,7 +44,7 @@ jobs:
 
         - name: Install dependencies
           run: |
-            apt update && apt install -y unzip dpkg-dev git dpkg-sig
+            apt update && apt install -y unzip dpkg-dev git
 
         - name: Import GPG Key
           run: |
@@ -120,7 +120,7 @@ jobs:
                 mv ${BUILD_NAME}.deb ./debian/pool/main/${{ env.PROJECT }}/
 
                 # Sign the .deb file
-                dpkg-sig --sign builder ./debian/pool/main/${{ env.PROJECT }}/${BUILD_NAME}.deb
+                gpg --armor --detach-sign --output ./debian/pool/main/${{ env.PROJECT }}/${BUILD_NAME}.deb.sig ./debian/pool/main/${{ env.PROJECT }}/${BUILD_NAME}.deb
 
                 # Remove the temporary folders
                 rm -rf ${BUILD_NAME}

From ddf1624f71b1d3b170a1907073e2715bf463a03d Mon Sep 17 00:00:00 2001
From: Chris Schinnerl <chris@sia.tech>
Date: Mon, 5 Feb 2024 16:22:49 +0100
Subject: [PATCH 05/21] ci: update readme

---
 .github/workflows/build.yml |   6 ++++++
 README.md                   |   3 ++-
 debian/gpg                  | Bin 2264 -> 3146 bytes
 3 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 5ba7750f..c2bdc4b9 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -133,6 +133,12 @@ jobs:
             # Delete artifacts folder
             rm -rf ./artifacts
 
+            # Create the Release file
+            apt-ftparchive release debian/dists/stable > debian/dists/stable/Release
+
+            # Sign the Release file
+            gpg --armor --detach-sign --output debian/dists/stable/Release.gpg debian/dists/stable/Release
+
         - name: Create Pull Request
           uses: peter-evans/create-pull-request@v5
           with:
diff --git a/README.md b/README.md
index 0eaa2039..283fa1d8 100644
--- a/README.md
+++ b/README.md
@@ -11,5 +11,6 @@ The following packages are supported
 Simply add this repo to your sources by running the following command
 
 ```bash
-echo "deb [trusted=yes] https://linux.sia.tech/debian stable main" | sudo tee -a /etc/apt/sources.list.d/siafoundation.list
+sudo curl -fsSL https://linux.sia.tech/debian/gpg | sudo gpg --dearmor -o /usr/share/keyrings/siafoundation.gpg
+echo "deb [signed-by=/usr/share/keyrings/siafoundation.gpg] https://linux.sia.tech/debian stable main" | sudo tee -a /etc/apt/sources.list.d/siafoundation.list
 ```
diff --git a/debian/gpg b/debian/gpg
index d4a133d46891e3f78a077f6caa7eab4832806460..9055821d6975b0c915a3a7b1ab60a7ba777c4a2b 100644
GIT binary patch
literal 3146
zcmZ`+w+`&e4ej+6w-+9i!xpbl&N-`F?JDOSzTWEx1BMF|n1(YT2@cO8`PW}RVFgJs
z|JaiK#|~Is;r?hs@`u$ePW$)mUjWcMipfebL-sT)Fnk;2@#)|am_iY@xNkb}AmWDA
zKzCy0UEO|!6C5LahBO8>^Q*i7QA0NCg_|Kh)X<UUmVq)*iMf(4kycP=jPyx%9E;d@
zlq%#03P_5>@mT-x`cNM)0cbZ-%*<-@k*YM>9Wyfg71!01w@Rvh^wmN+?6^E9CzM4p
zk!!BXZx*1Opa^`0`vd@P;x5YvKHvF*l!s1fI;Li((jUF0O9N~puy;;v%(^Zw#eBQE
z*7@npOdn=A%F-854U*U`50tS+t-X_zQ)h$<lcdajvoq9i)M=QCBIK~AwE@edl)SGj
zQqvHyhzHpuK-M4WVIoto-NYCWIL7lZA0V$G7z@d<!lGLK=OoBQ=ptVP)t<1kcf41N
z;)tJ83Z!k@({Ihnq6^=l7I|li@*x<X<U3@nsyU_%i-h>ao<?nbnwPrL5^H}B@|A3b
z`ir0|-Ze5mnzb*1A<2#Q)q^XdR%N>T$0tp8l|#(A@>Pzo^U6U6-0=b*nDg^(1Bvtj
zv`!QnGEYPrAQQq%@}8hrh(!D<0{G}m1QAvaEA{(y`nuadsTeA1qtr?siI?Ddz)jL3
zh?Oe+C?zpMZ};evzLHj)K}czReicS4P@gZ6V#LWYJLomZJ^KL-PK3SNtpSUhUvnU$
zRHUkE%p%<jBD?o~1+}hLPV3=^3XXQlj%k_CO(#-C6R{ap@+adm4#NT)$NKL`C<C+`
zvcB8Xn_belEp4glGU+-T*_;xOfYZnv?Xl%T#_<`aWb7)bSk>Ktk_{1ly>9Qo#%xl1
z?rizg7!TG_yVIHurdoN{X~pmQ{pnVfV?G>P1sdm+I#W6kz?25dRQT`Y48x47p#Im0
zU<VFkL?A-o7Uo^iK**nqE)M5`t<%<#89hhfboZtdoFD?<OzZI*y3DgmiXCdv>hPLJ
z9t~{nv*uM6O5RkbvE?LEXSm1ez#1$&K>u27PB26^fW>r!37dl5^#@F9NQs34T>?=*
z64s_Vm~3Ep2fC&YUu$t~F`Yvy`X#X!^?m2{2qd5JD0rkCTcoZc<gz;PF~K+grY))}
z9M^1yD-FryWzkNl*rN)IFAN6ma~IxT?}OshhYNe#G)UilE5Bcb?nPbrD@gCKuJs4!
zu#zhwRdKQXOs7$@x5J7z02Pw(e&cWAguW$SsFH_tO){_XHI+yOvfyBlr(y@vIvpKc
z2g<gV$P3@4bVW)vYkrK>guC=SG8)?1?M+ZKzd&e>Gf`%w1hl`|fe{MzQbGnBHp6nt
zo8a>eip$e%yZHt%Z9Iw2Ubp>WmAU-lGnpks6yEN8W*T9PN(8H^=(`x7Z<cN}MV(Yk
z2X~`U)0b>o09=HUx&@PRs#wkqXRs_dNKz1;DsDHJnt%JBH<#j~npB0+F%!;9wW3h`
z>^E2U)c``<A|%rBI?|ET@v#pQqy^m|_4b;(d5AuG(0lb`B*8(o5N!nX__nw)i{wnE
zkq84uG~Zw0)^96*t#gb!%9fN*1_ejE_L+{LZi;WznTXqxJ4)v9kRpw+G0qm0km;@h
zaLvjh^c21_`}_a)2&>nUi+v#f$?XPydx0w8AG6ETQf>4pGnydjc!0nYxz^5ivDjZR
z{tgb#pXqBRj(T9In&;IRK1)_9WIs<RrPC-{DF}+VUa3l2*;@l<qA!I!#OZu)<()SM
znuqa1a(Sew;39)+I8^R=ur?3Qp6rUag_ftIQs$)FEl7NTd=>lxenE`Vr7?YY1Ma<Y
znE8|#DWYY7Da&P<)VecYlc^W6-W|VP=IF@GlhXDdsmf$9mcjVN-bYZb2?_OKEvOTH
zQ>yS@{1r>i>X>%VwbX$#Gaga8z9;!D%gq+uatN@@kW_Cg`r1d>r$gAf(RoL4eK$hY
zNa(Eyy4-{>4a@kwUR?1o?@c7>Nr9|InXCZtT)E6p8xAW`Xl?X<xe39XI{6*W*xAKP
zHp&Bc*|h08D5J12roh!TJ+;anRl`0duzp_T^Em$bX);Mb@w<MIop=|aqn@x@vxW!b
z<|HltBDeNT_!TK9oMkbs;#LtQ&VWn1PgAkW=&ql&)~~XfcYgu*TcAYl?7inRmWjWK
zW!Drn{0;ff!YWdso^6n3nXdz&o&{-Wsg`sleICZ_H6bMG1;|I9M`G+00cWm30ezHU
zlqkT60wH`sfnX9@+@Ps}lA3mq6>&99PFjf%U;m~a%%HmR1j8-E(swSxV@#cwvnQWA
zTVN*;3VD@LrOQ>Q2dGTTtp7BL+EHkhEm@9Xda)LSPC^+m4y;F3H7Kw4woi1<G26SQ
zMW+8}EaCv^JVnk4(F>&+u56wEJ^~+~foKk&x%g=L_KK#OH@L*%Ox;=aN%n%@|APRZ
z^-Cq31jO>D>Qf8PnQPbMvwV<@Mpzc6Wve6{v57Fze2*N1Cj6?%{C7D~7#>m}o7?wj
zB&Jo%xk6Vdeb<_EkpkZ3D<gS@bXH2SGNm1S`81+K)OL3e#i)?Y(&&*nfF8$T%pq&N
zKd-#Y==dRD9k1%A0AmGo$8EB;+qhC>PkB0Qlr$m*Av^Y;($Q@UQ~(u>H<ZNP2E?-N
zouFcD`{BGP(7hU^6dV@YhjcMOlZ9%Xbxh~@4!XiI%x+60T_u1r<G|s>Cka$xMbAg0
zLu6ZpH&zKz(NPs?V3hKq?VYOU?$jlDoiO))sbBA4JoZfhvojZ$=GV|HpobG4jpwWZ
z5jh$f8mH@433e%#nC*}M^6)2Zu7%`I=R3WdSHB9V2GC8j!l;VTW{sxHGsy|mjjga-
zC>2Bwh9hmmYgws}S3kO)1i5M4|E4`9NT;rX?HoYq*HcX&&Cj)j2nGL2Yi0aotU0CN
zzzz0+j$<c0b#da97$PTp24-#@k2+h=+wV3Yx-r8DV<O?)xSb*1UsfA$`NerEi}mbX
zTgTgmG!a=4oD6<=U#aN2sP6t|9=N@JtXwo%O3(bj)8nB8O1$^!r?#`viJ==b?jO1K
zUGF&#CLQ`#fJ@9;9AvUt?^_M1m4Nkev%B?wnT7ub{!V*G2L4$D1e5>&Tf)Bp-d6xf

literal 2264
zcmV;}2q*WM0u2OZ!0K-S5CG&+<?us+zGwBftromdFZs(tR4oO_Y8;bWjzR!OCuM(%
zHPSs4t!+Er4OfZc{`Out&4B(5(HOD1IY^rTXBfMU)&-@RBd0%8uEOJm%WyL1ivL8C
z(M4?7ZBJNWGE28HzCB(jb9zD<CBp1GV7I>%kb9CV7~OHI7#(d*f)IfNhlKh1(QX`j
z_^T(Y)(gw*qW2}UNSgVMENS#VT@u2X7X=hU8F1vW6R>h)TP}LES+;$KafOz=|7;T?
zDW)(8nzij#7=h%?l)_b@zclS-wY>UlkLVbHWStyd>777zOY{2bCkD&~jS%!$GJSMk
zhn0GN(vOf1)$QLqxdVoAlz3n9>)v~l4G_9e(uh%L;{lmwNha~4j%{psyZJR~vIujK
z6X-d0q8MslvkvR<>pq$avpD@G&jtkdFYDGVe3SZ>_M+CT$~x-QFk#~<($vLn>>`||
z%|49=!PVUiUa)ny!xz2->$rc3z`@64P;QgjCJ6KMaMWr4H~t{&Dt}x>h2t00()mr-
zQ7j913(Ev1id%je`Qh%~$%J}2^h8q2uLb*f3G*@_=8xJ&`Iwp!tl$lL8qC)Nu896;
zt5|~<V)~HV8b_EHJ}@D4OC(}AD!r*ecI{$GC2)0@-};rSu~H(*g$WYk@_wN9L7|u)
zsyRjN_|^r!;12*10RRECAX8~!AX8~)ZfS03AZulLAUtSgY;12pb7^5NbY){`K8XTU
z1QP)W06rEW1e9%n6?G2Ga!UQ^ZjxpT2?J!xF9iZ+!0K-T8v_Li1$M`81q%rX2Lc8a
z3JC}c0t6NU0|5da0Rk6*0162Zl4c7D17ylC5cLoM#lF{`4&5wPpOM_h$L~Wu4#4vD
zt86I28>4_k6kFziks$5bx~eCkW!UctpW3JoWe*9<9)-0=N|>2k<QN)L5x&GUD?!kk
z+Rq3>1qDq7X5BeIy%Dl_zwUN<ufLJ!Qd}E(887B7`CODNqUUt#(L7daSG9q*VN1H;
z%UkZVqW8nr3MAGjR@W1y7c+inHoQByUqKUNpB7c=k52Ij2tI;z7v1#B3xsJYllWR@
zR<LqE&%DZM2W!{MNoiH5DU!VGY<rRwgm^?`o&}N0a54aLKoN5N@q}rv8s`t)gNMl(
zEoF_0tX~>n)*pfTb2`9-)Edffmq?T%+aTB8E*YCOfR^JFsMWY^^B-kTZzQSyI=%b*
z7i>|$8IO;3yZ7Xd{UJ~{p3@FO47m;Ke_jj?l3KFdsxanL?6&N|BB&kWuA5_(mB|*W
z0x>9B4R?#Rovg<lZJT`WygOgTGK{Y2cc|q0u^{gu4ebb59pez3<FrwRe%hEqxWFO}
zq}*sGcodc)e91tkfX0Y|I}W7d##c(@t5(%w_=#fm!36hnRT+QC^@`tWmZ{cowI)g|
z%wbFWlm84;${IK-8(4P7^HsN_XRh^IX12~TvZeSyi&%p;|5EuZnX>iS7I?S37#7;z
zK!(x}@&=<rD5&q)>6?ktAV(Mc-%N^=xdIIYWx(oh0T2Mrn5HoYKhw?Q<I$v)Bu*SQ
zSDApA%cZj;QHew6h6jkO8h*3g6?bPtfbeJ9xxOjD?jXY@eK3F$A00QC?1@V6!XM|p
zarKgVIkt+cnV=Enc=76_9^lNM!1Uqqkq=nm(f0p~MM%o2&b2KY&Ae6$zXzuHNU4c#
zJMnXR!4rQ^e*lSDU(3>;guQz}9D{y^+66ZvyiPZ}E&<a(im_t31mv!zuWZ~qD&zVe
zr6_?)9o?(cg2p=jWnvJTe9N*#YP9U#j3K_8l0@QX2-d^YiDsLi?QP>^+Sk80)p{o*
zmUR2onVHp*6|l)=;>s~0jBT<YLdT6?O5L#TinK+%+^rX{DI@c%B9oL!5#VoQ^i~l>
zko~gt7C8d~`gVL5Lg8^7$S>g#S&mtMZ@txDzpO;miG{q$D|aBV&w9@^6T!&a7)`j!
zEcLsVpH%{I(3pWSEjTujt4^`xKCV-Tq1XuHfRKb?Td`_K#B+`iYoQw)vLf+<8m>;i
zuE<Ws3kj0V${=AoMS@u0i$_%r%E2IK$-+e$ZM4hyw$x=)i8yRnndMgp8g=Vrl-0rN
zqnafkP5{PoK2L5yA!Rq^{dr76Khv#iMM&a<x^DOpcqNuF@P+S8w^>U-HY|+PpCR-a
z+MibX8AH@AVaS`WL=+M6>>pw!c%SC&vYR^q5di=Ji2^(X7y$?XCKe$Clx=_&bq>sO
zO8w|=l4c7D17ylC1p;Nj>Td!Y3<U`VcE@i33JDOBW(x@eWXdnIOb`4Eih^GG1Ctf0
zh%*9V0F5mR3#4?E=$yU{xvPXsIs6dKB|hs6BW#v#DjxoTE0d1grtBC?*EdiWt11Em
zW&^N+!*;wj(@EKGsT!ch4LTv-Bgk3vD2hWKgyL7M0A!yV2uOawAU#JzWp5SO^ltlY
z`&1U$TQS1&iYKA(&a)>ydRF{jKE0GOOTbMxfBct`i)6NoJL+!IFGC>nQIu2~CUOJ|
zKYxfP<?Y+95s&TLm8LcobJJF<NdGGgfMqW@8I|$*|D^4Tl<VojhLn}`3^rR>7_xbR
zu)d!TDI4N+Ah)P8T}M2fEd+&j6#_^aa0r7x54*UkmjcEf%6CUENp&m0NEW%N3ZKNJ
z;{KsFy#;TLBrH>vkSk?O!4zR*d`LJ}?#(|^<2GZ)zJkFAX=*=auuY2cIPBA6cktM@
zX1wVgkL994E<0}2Sq=EsNW&?(3!@pRMp3^-mFD^e2vM44heO`m&vS;C3Qgje<xvyG
zn24dq!8VqDoGH)0YABRU;(rc16<u)C1r2!X^CqLSX*q3MEzB`h`CuehlCQ%~yAR?(
z>q9tB1tab%$}&Ilh1R`z=|lF)&eq2s<;m94`rk>>_}gd7gPcDoyoCr}>6vmP+o1*j
m%i}V>Ddv`BkVA2=F4z98a83*JL2hKukK&*?#9PWl_eU+^#W`#M


From deea47b4c00bccc1729cfed1c0d1f522fc5336ee Mon Sep 17 00:00:00 2001
From: Chris Schinnerl <chris@sia.tech>
Date: Mon, 5 Feb 2024 16:27:43 +0100
Subject: [PATCH 06/21] ci: install apt-utils

---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c2bdc4b9..16c64732 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -44,7 +44,7 @@ jobs:
 
         - name: Install dependencies
           run: |
-            apt update && apt install -y unzip dpkg-dev git
+            apt update && apt install -y unzip dpkg-dev git apt-utils
 
         - name: Import GPG Key
           run: |

From 0527e134341c4fbaabfe76d644ba8647e31d27ac Mon Sep 17 00:00:00 2001
From: Chris Schinnerl <chris@sia.tech>
Date: Mon, 5 Feb 2024 16:39:33 +0100
Subject: [PATCH 07/21] ci: extend release file

---
 .github/workflows/build.yml | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 16c64732..3fa76b8d 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -134,7 +134,15 @@ jobs:
             rm -rf ./artifacts
 
             # Create the Release file
-            apt-ftparchive release debian/dists/stable > debian/dists/stable/Release
+            echo "Origin: Sia Foundation" > debian/dists/stable/Release
+            echo "Label: Sia Foundation Debian Repository" >> debian/dists/stable/Release
+            echo "Suite: stable" >> debian/dists/stable/Release
+            echo "Codename: stable" >> debian/dists/stable/Release
+            echo "Version: 1.0" >> debian/dists/stable/Release
+            echo "Architectures: amd64 arm64" >> debian/dists/stable/Release
+            echo "Components: main" >> debian/dists/stable/Release
+            echo "Description: Sia Foundation Debian Repository" >> debian/dists/stable/Release
+            apt-ftparchive release debian/dists/stable >> debian/dists/stable/Release
 
             # Sign the Release file
             gpg --armor --detach-sign --output debian/dists/stable/Release.gpg debian/dists/stable/Release

From 3cc3ae7779d493949aea321c96c6cd6c4a784230 Mon Sep 17 00:00:00 2001
From: Chris Schinnerl <chris@sia.tech>
Date: Mon, 5 Feb 2024 17:31:04 +0100
Subject: [PATCH 08/21] ci: run dpkg-scanpackages from root

---
 .github/workflows/build.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 3fa76b8d..d93c1e9a 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -127,7 +127,9 @@ jobs:
 
                 # Update the Packages file
                 mkdir -p debian/dists/stable/main/binary-${arch}
-                dpkg-scanpackages ./debian/pool/main/ | gzip -c > debian/dists/stable/main/binary-${arch}/Packages.gz
+                cd debian
+                dpkg-scanpackages ./pool/main/ | gzip -c > dists/stable/main/binary-${arch}/Packages.gz
+                cd ..
             done
 
             # Delete artifacts folder

From 7052cd91f0372e075461ba429f45373b22b7be6a Mon Sep 17 00:00:00 2001
From: Chris Schinnerl <chris@sia.tech>
Date: Mon, 5 Feb 2024 17:34:01 +0100
Subject: [PATCH 09/21] ci: delete sig files before signing

---
 .github/workflows/build.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d93c1e9a..90a3c479 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -120,6 +120,7 @@ jobs:
                 mv ${BUILD_NAME}.deb ./debian/pool/main/${{ env.PROJECT }}/
 
                 # Sign the .deb file
+                rm -f ./debian/pool/main/${{ env.PROJECT }}/${BUILD_NAME}.deb.sig
                 gpg --armor --detach-sign --output ./debian/pool/main/${{ env.PROJECT }}/${BUILD_NAME}.deb.sig ./debian/pool/main/${{ env.PROJECT }}/${BUILD_NAME}.deb
 
                 # Remove the temporary folders
@@ -128,8 +129,8 @@ jobs:
                 # Update the Packages file
                 mkdir -p debian/dists/stable/main/binary-${arch}
                 cd debian
-                dpkg-scanpackages ./pool/main/ | gzip -c > dists/stable/main/binary-${arch}/Packages.gz
-                cd ..
+                dpkg-scanpackages . | gzip -c > dists/stable/main/binary-${arch}/Packages.gz
+                cd ../
             done
 
             # Delete artifacts folder
@@ -147,6 +148,7 @@ jobs:
             apt-ftparchive release debian/dists/stable >> debian/dists/stable/Release
 
             # Sign the Release file
+            rm -f debian/dists/stable/Release.gpg
             gpg --armor --detach-sign --output debian/dists/stable/Release.gpg debian/dists/stable/Release
 
         - name: Create Pull Request

From 641393276f7698e8107d6ae543b7ae81a208eaca Mon Sep 17 00:00:00 2001
From: Chris Schinnerl <chris@sia.tech>
Date: Tue, 6 Feb 2024 09:15:12 +0100
Subject: [PATCH 10/21] ci: run apt-ftparchive from root

---
 .github/workflows/build.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 90a3c479..75e58c1b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -129,7 +129,7 @@ jobs:
                 # Update the Packages file
                 mkdir -p debian/dists/stable/main/binary-${arch}
                 cd debian
-                dpkg-scanpackages . | gzip -c > dists/stable/main/binary-${arch}/Packages.gz
+                dpkg-scanpackages pool/main/ | gzip -c > dists/stable/main/binary-${arch}/Packages.gz
                 cd ../
             done
 
@@ -145,7 +145,7 @@ jobs:
             echo "Architectures: amd64 arm64" >> debian/dists/stable/Release
             echo "Components: main" >> debian/dists/stable/Release
             echo "Description: Sia Foundation Debian Repository" >> debian/dists/stable/Release
-            apt-ftparchive release debian/dists/stable >> debian/dists/stable/Release
+            apt-ftparchive -o APT::FTPArchive::Release::BasePath=debian release debian/dists/stable >> debian/dists/stable/Release
 
             # Sign the Release file
             rm -f debian/dists/stable/Release.gpg

From f5cd45a8e435259324d07dae6b62e9e33b3e27bb Mon Sep 17 00:00:00 2001
From: Chris Schinnerl <chris@sia.tech>
Date: Tue, 6 Feb 2024 10:50:45 +0100
Subject: [PATCH 11/21] ci: use config file for apt-ftparchive

---
 .github/workflows/build.yml | 22 +++++++++++++---------
 1 file changed, 13 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 75e58c1b..4027c6b6 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -136,16 +136,20 @@ jobs:
             # Delete artifacts folder
             rm -rf ./artifacts
 
+            # Create a config file for apt-ftparchive
+            echo "APT::FTPArchive::Release::Origin \"Sia Foundation\";" > ./release.conf
+            echo "APT::FTPArchive::Release::Label \"Sia Foundation Debian Repository\";" >> ./release.conf
+            echo "APT::FTPArchive::Release::Suite \"stable\";" >> ./release.conf
+            echo "APT::FTPArchive::Release::Codename \"stable\";" >> ./release.conf
+            echo "APT::FTPArchive::Release::Version \"1.0\";" >> ./release.conf
+            echo "APT::FTPArchive::Release::Architectures \"amd64 arm64\";" >> ./release.conf
+            echo "APT::FTPArchive::Release::Components \"main\";" >> ./release.conf
+            echo "APT::FTPArchive::Release::Description \"Sia Foundation Debian Repository\";" >> ./release.conf
+            echo "APT::FTPArchive::Release::BasePath \"debian\";" >> ./release.conf
+
             # Create the Release file
-            echo "Origin: Sia Foundation" > debian/dists/stable/Release
-            echo "Label: Sia Foundation Debian Repository" >> debian/dists/stable/Release
-            echo "Suite: stable" >> debian/dists/stable/Release
-            echo "Codename: stable" >> debian/dists/stable/Release
-            echo "Version: 1.0" >> debian/dists/stable/Release
-            echo "Architectures: amd64 arm64" >> debian/dists/stable/Release
-            echo "Components: main" >> debian/dists/stable/Release
-            echo "Description: Sia Foundation Debian Repository" >> debian/dists/stable/Release
-            apt-ftparchive -o APT::FTPArchive::Release::BasePath=debian release debian/dists/stable >> debian/dists/stable/Release
+            apt-ftparchive -c release.conf release debian/ > debian/dists/stable/Release
+            rm release.conf
 
             # Sign the Release file
             rm -f debian/dists/stable/Release.gpg

From d24b009c8123c837ec81116d151a715a18b426b1 Mon Sep 17 00:00:00 2001
From: Chris Schinnerl <chris@sia.tech>
Date: Tue, 6 Feb 2024 11:38:07 +0100
Subject: [PATCH 12/21] ci: use reprepro

---
 .github/workflows/build.yml | 162 +++++++++++++++++-------------------
 1 file changed, 77 insertions(+), 85 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 4027c6b6..13c8c3ea 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -44,7 +44,7 @@ jobs:
 
         - name: Install dependencies
           run: |
-            apt update && apt install -y unzip dpkg-dev git apt-utils
+            apt update && apt install -y unzip dpkg-dev git reprepro
 
         - name: Import GPG Key
           run: |
@@ -61,99 +61,91 @@ jobs:
             repo: SiaFoundation/${{ env.PROJECT }}
             run_id: ${{ env.WORKFLOW_ID }}
             workflow_conclusion: success
-
-        - name: Build .deb Package
+        
+        - name: Prepare repository with reprepro
+          run: |
+            mkdir -p conf
+            echo "Codename: stable" > conf/distributions
+            echo "Architectures: amd64 arm64 source" >> conf/distributions
+            echo "Components: main" >> conf/distributions
+            echo "Description: $DESCRIPTION" >> conf/distributions
+            echo "SignWith: yes" >> conf/distributions
+
+        - name: Build .deb Package and Add to Repository
           shell: bash
           run: |
             TAG=${{ env.RELEASE_TAG }}
             VERSION=${TAG:1}
 
             for arch in amd64 arm64; do
-                BUILD_NAME=${{ env.PROJECT }}_${VERSION}_${arch}
-
-                # Create the directory structure for the .deb package
-                mkdir -p ${BUILD_NAME}/DEBIAN
-                mkdir -p ${BUILD_NAME}/usr/bin
-                mkdir -p ${BUILD_NAME}/etc/systemd/system
-
-                # Copy the ${{ env.PROJECT }} binary
-                unzip ./artifacts/${{ env.PROJECT }}_linux_${arch}.zip -d ./artifacts/${arch}/
-                cp ./artifacts/${arch}/${{ env.PROJECT }} ${BUILD_NAME}/usr/bin/${{ env.PROJECT }}
-
-                # Create the control file
-                echo "Package: ${{ env.PROJECT }}" > ${BUILD_NAME}/DEBIAN/control
-                echo "Version: $VERSION" >> ${BUILD_NAME}/DEBIAN/control
-                echo "Architecture: ${arch}" >> ${BUILD_NAME}/DEBIAN/control
-                echo "Maintainer: The Sia Foundation <hello@sia.tech>" >> ${BUILD_NAME}/DEBIAN/control
-                echo "Description: ${DESCRIPTION}" >> ${BUILD_NAME}/DEBIAN/control
-                echo "Homepage: https://github.com/SiaFoundation/${{ env.PROJECT }}" >> ${BUILD_NAME}/DEBIAN/control
-
-                # Create systemd service file
-                echo "[Unit]" > ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
-                echo "Description=${DESCRIPTION}" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
-                echo "" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
-                echo "After=network.target" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
-
-                echo "[Service]" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
-                echo "ExecStart=/usr/bin/${{ env.PROJECT }}" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
-                echo "WorkingDirectory=/var/lib/${{ env.PROJECT }}" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
-                echo "Restart=always" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
-                echo "RestartSec=15" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
-                echo "" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
-
-                echo "[Install]" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
-                echo "WantedBy=multi-user.target" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
-                echo "Alias=${{ env.PROJECT }}.service" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
-
-                # Create the prerem script
-                echo "#!/bin/sh" > ${BUILD_NAME}/DEBIAN/prerm
-                echo "systemctl stop ${{ env.PROJECT }}.service" >> ${BUILD_NAME}/DEBIAN/prerm
-                echo "systemctl disable ${{ env.PROJECT }}.service" >> ${BUILD_NAME}/DEBIAN/prerm
-                chmod +x ${BUILD_NAME}/DEBIAN/prerm
-            
-                # Build the .deb file
-                echo "Building ${BUILD_NAME}.deb"
-                dpkg-deb --build ${BUILD_NAME}
-
-                # Move the .deb file
-                mkdir -p ./debian/pool/main/${{ env.PROJECT }}
-                mv ${BUILD_NAME}.deb ./debian/pool/main/${{ env.PROJECT }}/
-
-                # Sign the .deb file
-                rm -f ./debian/pool/main/${{ env.PROJECT }}/${BUILD_NAME}.deb.sig
-                gpg --armor --detach-sign --output ./debian/pool/main/${{ env.PROJECT }}/${BUILD_NAME}.deb.sig ./debian/pool/main/${{ env.PROJECT }}/${BUILD_NAME}.deb
-
-                # Remove the temporary folders
-                rm -rf ${BUILD_NAME}
-
-                # Update the Packages file
-                mkdir -p debian/dists/stable/main/binary-${arch}
-                cd debian
-                dpkg-scanpackages pool/main/ | gzip -c > dists/stable/main/binary-${arch}/Packages.gz
-                cd ../
+              BUILD_NAME=${{ env.PROJECT }}_${VERSION}_${arch}
+
+              # Create the directory structure for the .deb package
+              mkdir -p ${BUILD_NAME}/DEBIAN
+              mkdir -p ${BUILD_NAME}/usr/bin
+              mkdir -p ${BUILD_NAME}/etc/systemd/system
+
+              # Copy the ${{ env.PROJECT }} binary
+              unzip ./artifacts/${{ env.PROJECT }}_linux_${arch}.zip -d ./artifacts/${arch}/
+              cp ./artifacts/${arch}/${{ env.PROJECT }} ${BUILD_NAME}/usr/bin/${{ env.PROJECT }}
+
+              # Create the control file
+              echo "Package: ${{ env.PROJECT }}" > ${BUILD_NAME}/DEBIAN/control
+              echo "Version: $VERSION" >> ${BUILD_NAME}/DEBIAN/control
+              echo "Architecture: ${arch}" >> ${BUILD_NAME}/DEBIAN/control
+              echo "Maintainer: The Sia Foundation <hello@sia.tech>" >> ${BUILD_NAME}/DEBIAN/control
+              echo "Description: ${DESCRIPTION}" >> ${BUILD_NAME}/DEBIAN/control
+              echo "Homepage: https://github.com/SiaFoundation/${{ env.PROJECT }}" >> ${BUILD_NAME}/DEBIAN/control
+
+              # Create systemd service file
+              echo "[Unit]" > ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
+              echo "Description=${DESCRIPTION}" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
+              echo "" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
+              echo "After=network.target" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
+
+              echo "[Service]" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
+              echo "ExecStart=/usr/bin/${{ env.PROJECT }}" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
+              echo "WorkingDirectory=/var/lib/${{ env.PROJECT }}" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
+              echo "Restart=always" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
+              echo "RestartSec=15" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
+              echo "" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
+
+              echo "[Install]" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
+              echo "WantedBy=multi-user.target" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
+              echo "Alias=${{ env.PROJECT }}.service" >> ${BUILD_NAME}/etc/systemd/system/${{ env.PROJECT }}.service
+
+              # Create the prerem script
+              echo "#!/bin/sh" > ${BUILD_NAME}/DEBIAN/prerm
+              echo "systemctl stop ${{ env.PROJECT }}.service" >> ${BUILD_NAME}/DEBIAN/prerm
+              echo "systemctl disable ${{ env.PROJECT }}.service" >> ${BUILD_NAME}/DEBIAN/prerm
+              chmod +x ${BUILD_NAME}/DEBIAN/prerm
+
+              # Build the .deb file
+              dpkg-deb --build ${BUILD_NAME}
+
+              # Move the .deb file to a known directory
+              mkdir -p ./debian/pool/main/${{ env.PROJECT }}
+              mv ${BUILD_NAME}.deb ./debian/pool/main/${{ env.PROJECT }}/
+
+              # Sign the .deb file (if necessary)
+              rm -f ./debian/pool/main/${{ env.PROJECT }}/${BUILD_NAME}.deb.sig
+              gpg --armor --detach-sign --output ./debian/pool/main/${{ env.PROJECT }}/${BUILD_NAME}.deb.sig ./debian/pool/main/${{ env.PROJECT }}/${BUILD_NAME}.deb
             done
 
-            # Delete artifacts folder
-            rm -rf ./artifacts
+            # Initialize repository directory for reprepro
+            mkdir -p conf
+            echo "Codename: stable" > conf/distributions
+            echo "Architectures: amd64 arm64 source" >> conf/distributions
+            echo "Components: main" >> conf/distributions
+            echo "Description: $DESCRIPTION" >> conf/distributions
+            echo "SignWith: yes" >> conf/distributions
 
-            # Create a config file for apt-ftparchive
-            echo "APT::FTPArchive::Release::Origin \"Sia Foundation\";" > ./release.conf
-            echo "APT::FTPArchive::Release::Label \"Sia Foundation Debian Repository\";" >> ./release.conf
-            echo "APT::FTPArchive::Release::Suite \"stable\";" >> ./release.conf
-            echo "APT::FTPArchive::Release::Codename \"stable\";" >> ./release.conf
-            echo "APT::FTPArchive::Release::Version \"1.0\";" >> ./release.conf
-            echo "APT::FTPArchive::Release::Architectures \"amd64 arm64\";" >> ./release.conf
-            echo "APT::FTPArchive::Release::Components \"main\";" >> ./release.conf
-            echo "APT::FTPArchive::Release::Description \"Sia Foundation Debian Repository\";" >> ./release.conf
-            echo "APT::FTPArchive::Release::BasePath \"debian\";" >> ./release.conf
-
-            # Create the Release file
-            apt-ftparchive -c release.conf release debian/ > debian/dists/stable/Release
-            rm release.conf
-
-            # Sign the Release file
-            rm -f debian/dists/stable/Release.gpg
-            gpg --armor --detach-sign --output debian/dists/stable/Release.gpg debian/dists/stable/Release
+            # Add packages to the repository with reprepro
+            reprepro -Vb . includedeb stable ./debian/pool/main/${{ env.PROJECT }}/*.deb
+
+            # Clean up artifacts and temporary configuration
+            rm -rf ./artifacts
+            rm -rf ./conf
 
         - name: Create Pull Request
           uses: peter-evans/create-pull-request@v5

From e87187431f194ccc0a37caffdb00df563894fcdc Mon Sep 17 00:00:00 2001
From: Chris Schinnerl <chris@sia.tech>
Date: Tue, 6 Feb 2024 11:54:46 +0100
Subject: [PATCH 13/21] ci: add section

---
 .github/workflows/build.yml | 20 +++++++-------------
 1 file changed, 7 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 13c8c3ea..daab03e1 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -62,16 +62,7 @@ jobs:
             run_id: ${{ env.WORKFLOW_ID }}
             workflow_conclusion: success
         
-        - name: Prepare repository with reprepro
-          run: |
-            mkdir -p conf
-            echo "Codename: stable" > conf/distributions
-            echo "Architectures: amd64 arm64 source" >> conf/distributions
-            echo "Components: main" >> conf/distributions
-            echo "Description: $DESCRIPTION" >> conf/distributions
-            echo "SignWith: yes" >> conf/distributions
-
-        - name: Build .deb Package and Add to Repository
+        - name: Build .deb packages
           shell: bash
           run: |
             TAG=${{ env.RELEASE_TAG }}
@@ -94,6 +85,7 @@ jobs:
               echo "Version: $VERSION" >> ${BUILD_NAME}/DEBIAN/control
               echo "Architecture: ${arch}" >> ${BUILD_NAME}/DEBIAN/control
               echo "Maintainer: The Sia Foundation <hello@sia.tech>" >> ${BUILD_NAME}/DEBIAN/control
+              echo "Section: net" >> ${BUILD_NAME}/DEBIAN/control
               echo "Description: ${DESCRIPTION}" >> ${BUILD_NAME}/DEBIAN/control
               echo "Homepage: https://github.com/SiaFoundation/${{ env.PROJECT }}" >> ${BUILD_NAME}/DEBIAN/control
 
@@ -121,6 +113,7 @@ jobs:
               chmod +x ${BUILD_NAME}/DEBIAN/prerm
 
               # Build the .deb file
+              echo "Building ${BUILD_NAME}.deb"
               dpkg-deb --build ${BUILD_NAME}
 
               # Move the .deb file to a known directory
@@ -132,6 +125,8 @@ jobs:
               gpg --armor --detach-sign --output ./debian/pool/main/${{ env.PROJECT }}/${BUILD_NAME}.deb.sig ./debian/pool/main/${{ env.PROJECT }}/${BUILD_NAME}.deb
             done
 
+        - name: Add packages to repository
+          run: |
             # Initialize repository directory for reprepro
             mkdir -p conf
             echo "Codename: stable" > conf/distributions
@@ -139,11 +134,10 @@ jobs:
             echo "Components: main" >> conf/distributions
             echo "Description: $DESCRIPTION" >> conf/distributions
             echo "SignWith: yes" >> conf/distributions
-
-            # Add packages to the repository with reprepro
             reprepro -Vb . includedeb stable ./debian/pool/main/${{ env.PROJECT }}/*.deb
 
-            # Clean up artifacts and temporary configuration
+        - name: Clean up
+          run: |
             rm -rf ./artifacts
             rm -rf ./conf
 

From 9b7655505423e47334e0142e340ca6f10b2aa495 Mon Sep 17 00:00:00 2001
From: Chris Schinnerl <chris@sia.tech>
Date: Tue, 6 Feb 2024 11:58:10 +0100
Subject: [PATCH 14/21] ci: add priority

---
 .github/workflows/build.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index daab03e1..8cc96d4e 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -85,6 +85,7 @@ jobs:
               echo "Version: $VERSION" >> ${BUILD_NAME}/DEBIAN/control
               echo "Architecture: ${arch}" >> ${BUILD_NAME}/DEBIAN/control
               echo "Maintainer: The Sia Foundation <hello@sia.tech>" >> ${BUILD_NAME}/DEBIAN/control
+              echo "Priority: optional" >> ${BUILD_NAME}/DEBIAN/control
               echo "Section: net" >> ${BUILD_NAME}/DEBIAN/control
               echo "Description: ${DESCRIPTION}" >> ${BUILD_NAME}/DEBIAN/control
               echo "Homepage: https://github.com/SiaFoundation/${{ env.PROJECT }}" >> ${BUILD_NAME}/DEBIAN/control

From f6c1fc7647efbba5454cd2df3b41c66495541361 Mon Sep 17 00:00:00 2001
From: Chris Schinnerl <chris@sia.tech>
Date: Tue, 6 Feb 2024 12:51:11 +0100
Subject: [PATCH 15/21] ci: fix base dir

---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 8cc96d4e..7b755927 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -135,7 +135,7 @@ jobs:
             echo "Components: main" >> conf/distributions
             echo "Description: $DESCRIPTION" >> conf/distributions
             echo "SignWith: yes" >> conf/distributions
-            reprepro -Vb . includedeb stable ./debian/pool/main/${{ env.PROJECT }}/*.deb
+            reprepro -Vb ./debian includedeb stable ./debian/pool/main/${{ env.PROJECT }}/*.deb
 
         - name: Clean up
           run: |

From 62a087af0c66778bc8438ef4153affe21caf88ea Mon Sep 17 00:00:00 2001
From: Chris Schinnerl <chris@sia.tech>
Date: Tue, 6 Feb 2024 12:55:10 +0100
Subject: [PATCH 16/21] ci: fix conf location

---
 .github/workflows/build.yml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 7b755927..b149fb95 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -129,18 +129,18 @@ jobs:
         - name: Add packages to repository
           run: |
             # Initialize repository directory for reprepro
-            mkdir -p conf
-            echo "Codename: stable" > conf/distributions
-            echo "Architectures: amd64 arm64 source" >> conf/distributions
-            echo "Components: main" >> conf/distributions
-            echo "Description: $DESCRIPTION" >> conf/distributions
-            echo "SignWith: yes" >> conf/distributions
+            mkdir -p ./debian/conf
+            echo "Codename: stable" > ./debian/conf/distributions
+            echo "Architectures: amd64 arm64 source" >> ./debian/conf/distributions
+            echo "Components: main" >> ./debian/conf/distributions
+            echo "Description: $DESCRIPTION" >> ./debian/conf/distributions
+            echo "SignWith: yes" >> ./debian/conf/distributions
             reprepro -Vb ./debian includedeb stable ./debian/pool/main/${{ env.PROJECT }}/*.deb
 
         - name: Clean up
           run: |
             rm -rf ./artifacts
-            rm -rf ./conf
+            rm -rf ./debian/conf
 
         - name: Create Pull Request
           uses: peter-evans/create-pull-request@v5

From 20e88d9b638d9cfd618aa9166c414421ace9bcd7 Mon Sep 17 00:00:00 2001
From: Chris Schinnerl <chris@sia.tech>
Date: Tue, 6 Feb 2024 13:00:43 +0100
Subject: [PATCH 17/21] ci: cleanup deb and deb sig

---
 .github/workflows/build.yml | 12 +++++-------
 1 file changed, 5 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index b149fb95..f30cb621 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -117,13 +117,9 @@ jobs:
               echo "Building ${BUILD_NAME}.deb"
               dpkg-deb --build ${BUILD_NAME}
 
-              # Move the .deb file to a known directory
-              mkdir -p ./debian/pool/main/${{ env.PROJECT }}
-              mv ${BUILD_NAME}.deb ./debian/pool/main/${{ env.PROJECT }}/
-
-              # Sign the .deb file (if necessary)
-              rm -f ./debian/pool/main/${{ env.PROJECT }}/${BUILD_NAME}.deb.sig
-              gpg --armor --detach-sign --output ./debian/pool/main/${{ env.PROJECT }}/${BUILD_NAME}.deb.sig ./debian/pool/main/${{ env.PROJECT }}/${BUILD_NAME}.deb
+              # Sign the .deb file
+              rm -f ${BUILD_NAME}.deb.sig
+              gpg --armor --detach-sign --output ${BUILD_NAME}.deb.sig ${BUILD_NAME}.deb
             done
 
         - name: Add packages to repository
@@ -139,6 +135,8 @@ jobs:
 
         - name: Clean up
           run: |
+            rm *.deb
+            rm *.deb.sig
             rm -rf ./artifacts
             rm -rf ./debian/conf
 

From 5b6be60b256d700f6fb22499979b7eacc8ca9aea Mon Sep 17 00:00:00 2001
From: Chris Schinnerl <chris@sia.tech>
Date: Tue, 6 Feb 2024 13:06:10 +0100
Subject: [PATCH 18/21] ci: don't sign deb files

---
 .github/workflows/build.yml | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index f30cb621..a4676191 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -116,10 +116,6 @@ jobs:
               # Build the .deb file
               echo "Building ${BUILD_NAME}.deb"
               dpkg-deb --build ${BUILD_NAME}
-
-              # Sign the .deb file
-              rm -f ${BUILD_NAME}.deb.sig
-              gpg --armor --detach-sign --output ${BUILD_NAME}.deb.sig ${BUILD_NAME}.deb
             done
 
         - name: Add packages to repository
@@ -131,12 +127,11 @@ jobs:
             echo "Components: main" >> ./debian/conf/distributions
             echo "Description: $DESCRIPTION" >> ./debian/conf/distributions
             echo "SignWith: yes" >> ./debian/conf/distributions
-            reprepro -Vb ./debian includedeb stable ./debian/pool/main/${{ env.PROJECT }}/*.deb
+            reprepro -Vb ./debian includedeb stable *.deb
 
         - name: Clean up
           run: |
             rm *.deb
-            rm *.deb.sig
             rm -rf ./artifacts
             rm -rf ./debian/conf
 

From baad5f4af010de75faf691e78e1be94268881ccc Mon Sep 17 00:00:00 2001
From: Chris Schinnerl <chris@sia.tech>
Date: Tue, 6 Feb 2024 13:13:14 +0100
Subject: [PATCH 19/21] ci: remove deb dir

---
 .github/workflows/build.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a4676191..0c7f2641 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -116,6 +116,9 @@ jobs:
               # Build the .deb file
               echo "Building ${BUILD_NAME}.deb"
               dpkg-deb --build ${BUILD_NAME}
+
+              # Remove the folder
+              rm -rf ${BUILD_NAME}
             done
 
         - name: Add packages to repository

From 7b024f794f227970307fec01ec8691b532ae3e10 Mon Sep 17 00:00:00 2001
From: Chris Schinnerl <chris@sia.tech>
Date: Tue, 6 Feb 2024 13:18:43 +0100
Subject: [PATCH 20/21] ci: don't include source

---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 0c7f2641..55d28fbd 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -126,7 +126,7 @@ jobs:
             # Initialize repository directory for reprepro
             mkdir -p ./debian/conf
             echo "Codename: stable" > ./debian/conf/distributions
-            echo "Architectures: amd64 arm64 source" >> ./debian/conf/distributions
+            echo "Architectures: amd64 arm64" >> ./debian/conf/distributions
             echo "Components: main" >> ./debian/conf/distributions
             echo "Description: $DESCRIPTION" >> ./debian/conf/distributions
             echo "SignWith: yes" >> ./debian/conf/distributions

From 256d7ce97b7c031997ec2283f1b24ef50b8cbea8 Mon Sep 17 00:00:00 2001
From: Chris Schinnerl <chris@sia.tech>
Date: Tue, 6 Feb 2024 13:27:40 +0100
Subject: [PATCH 21/21] ci: create separate conf folder

---
 .github/workflows/build.yml | 8 --------
 debian/conf/distributions   | 5 +++++
 2 files changed, 5 insertions(+), 8 deletions(-)
 create mode 100644 debian/conf/distributions

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 55d28fbd..0bbe1d6b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -123,20 +123,12 @@ jobs:
 
         - name: Add packages to repository
           run: |
-            # Initialize repository directory for reprepro
-            mkdir -p ./debian/conf
-            echo "Codename: stable" > ./debian/conf/distributions
-            echo "Architectures: amd64 arm64" >> ./debian/conf/distributions
-            echo "Components: main" >> ./debian/conf/distributions
-            echo "Description: $DESCRIPTION" >> ./debian/conf/distributions
-            echo "SignWith: yes" >> ./debian/conf/distributions
             reprepro -Vb ./debian includedeb stable *.deb
 
         - name: Clean up
           run: |
             rm *.deb
             rm -rf ./artifacts
-            rm -rf ./debian/conf
 
         - name: Create Pull Request
           uses: peter-evans/create-pull-request@v5
diff --git a/debian/conf/distributions b/debian/conf/distributions
new file mode 100644
index 00000000..00c4b786
--- /dev/null
+++ b/debian/conf/distributions
@@ -0,0 +1,5 @@
+Codename: stable
+Architectures: amd64 arm64
+Components: main
+Description: The official home of Sia's Debian packages
+SignWith: yes
\ No newline at end of file