steps:
  build:
    image: git.balsys.eu.org/tomas/mkosi
    privileged: true
    secrets: [ signing_key ]
    commands:
      - echo "$SIGNING_KEY" | gpg --import 
      - gpg --list-keys --fingerprint --with-colons | sed -E -n -e 's/^fpr:::::::::([0-9A-F]+):$/\1:6:/p' | gpg --import-ownertrust
      - mkosi build

  publish:
    image: woodpeckerci/plugin-gitea-release
    settings:
      base_url: ${CI_FORGE_URL}
      files: [ "*.xz", "*.SHA256SUMS", "*.gpg" ]
      api_key:
        from_secret: release_token 
    when:
      - event: tag