Skip to content

feat(packaging): centralize package repositories by package manager#124

Merged
vmvarela merged 1 commit intomasterfrom
issue-122/centralize-package-repos
May 1, 2026
Merged

feat(packaging): centralize package repositories by package manager#124
vmvarela merged 1 commit intomasterfrom
issue-122/centralize-package-repos

Conversation

@vmvarela
Copy link
Copy Markdown
Owner

@vmvarela vmvarela commented May 1, 2026

Summary

Closes #122

Centralizes all package distribution under one repository per package manager, following the model already used by vmvarela/homebrew-tap.

What changed

New external repositories

Repository System Pages
vmvarela/scoop-bucket Scoop
vmvarela/nix-packages Nix
vmvarela/apt-packages APT ✅ enabled
vmvarela/rpm-packages RPM ✅ enabled
vmvarela/apk-packages APK ✅ enabled

Each repo ships with an auto-update workflow triggered by repository_dispatch from the release pipeline.

release.yml changes

Job Before After
update-scoop pushes to vmvarela/scoop-sql-pipe (root) pushes to vmvarela/scoop-bucket/bucket/
update-nix opens a PR on this repo pushes directly to vmvarela/nix-packages
update-apt (new) dispatches to vmvarela/apt-packages after package-deb
update-rpm (new) dispatches to vmvarela/rpm-packages after package-rpm
update-apk (new) dispatches to vmvarela/apk-packages after package-apk

README

  • APT/RPM/APK sections updated to show repo-based installation as the primary method (with direct .deb/.rpm/.apk download as fallback)
  • Nix updated to github:vmvarela/nix-packages#sql-pipe
  • Scoop updated to scoop bucket add vmvarela https://github.com/vmvarela/scoop-bucket

Secrets required

Add these to vmvarela/sql-pipe before the next release:

Secret Purpose
NIX_PACKAGES_TOKEN PAT with contents:write on vmvarela/nix-packages
APT_PACKAGES_TOKEN PAT with contents:write on vmvarela/apt-packages
RPM_PACKAGES_TOKEN PAT with contents:write on vmvarela/rpm-packages
APK_PACKAGES_TOKEN PAT with contents:write on vmvarela/apk-packages

Add these to each package repo for signed indices:

Repo Secret Description
apt-packages, rpm-packages GPG_SIGNING_KEY Armored GPG private key
apt-packages, rpm-packages GPG_KEY_ID Key ID / fingerprint
apk-packages APK_SIGNING_KEY RSA private key (PEM)
apk-packages APK_SIGNING_KEY_PUB RSA public key (PEM)

All new jobs degrade gracefully — if a secret is absent the job is skipped (Scoop/Nix) or the index is built unsigned with a warning (APT/RPM/APK).

Post-merge

  • Archive vmvarela/scoop-sql-pipe with a deprecation notice
  • Add the secrets listed above
  • Trigger a test release to validate the full pipeline

- update-scoop: redirect to vmvarela/scoop-bucket (bucket/sql-pipe.json)
  instead of per-app vmvarela/scoop-sql-pipe
- update-nix: push directly to vmvarela/nix-packages instead of
  opening an internal PR; requires NIX_PACKAGES_TOKEN secret
- add update-apt job: dispatches to vmvarela/apt-packages after package-deb;
  requires APT_PACKAGES_TOKEN secret
- add update-rpm job: dispatches to vmvarela/rpm-packages after package-rpm;
  requires RPM_PACKAGES_TOKEN secret
- add update-apk job: dispatches to vmvarela/apk-packages after package-apk;
  requires APK_PACKAGES_TOKEN secret
- README: update APT/RPM/APK installation to show repo-based commands;
  update Nix to github:vmvarela/nix-packages#sql-pipe;
  update Scoop to vmvarela/scoop-bucket

Closes #122
@vmvarela vmvarela added this to the Sprint 7 milestone May 1, 2026
@vmvarela vmvarela added the type:feature New functionality label May 1, 2026
@github-actions github-actions Bot removed the type:feature New functionality label May 1, 2026
@vmvarela vmvarela merged commit 19e0d55 into master May 1, 2026
5 checks passed
@vmvarela vmvarela deleted the issue-122/centralize-package-repos branch May 1, 2026 14:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Centralize package repositories by package manager

1 participant