steps:
  build:
    image: git.balsys.eu.org/tomas/mkosi
    privileged: true
    secrets: [ signing_key ]
    commands:
      - echo "$SIGNING_KEY" | gpg --import 
      - printf "5\ny\n" | sudo gpg --command-fd 0 --edit-key no-reply@ci.balsys.eu.org trust
      - mkosi build
      - mv *.SHA256SUMS SHA256SUMS
      - mv *.SHA256SUMS.gpg SHA256SUMS.gpg

  publish:
    image: woodpeckerci/plugin-gitea-release
    settings:
      base_url: ${CI_FORGE_URL}
      files: [ "*.xz", "*.nspawn", SHA256SUMS, SHA256SUMS.gpg ]
      api_key:
        from_secret: release_token 
    when:
      - event: tag