steps:
  build:
    image: git.balsys.eu.org/tomas/mkosi
    privileged: true
    secrets: [ signing_key ]
    commands:
      - echo "$SIGNING_KEY" | gpg --import 
      - gpg --list-keys --fingerprint --with-colons | sed -E -n -e 's/^fpr:::::::::([0-9A-F]+):$/\1:6:/p' | gpg --import-ownertrust
      - mkosi build
      - mv *.SHA256SUMS SHA256SUMS
      - mv *.SHA256SUMS.gpg SHA256SUMS.gpg

  publish:
    image: woodpeckerci/plugin-gitea-release
    settings:
      base_url: ${CI_FORGE_URL}
      files: [ "*.xz", "*.nspawn", SHA256SUMS, SHA256SUMS.gpg ]
      api_key:
        from_secret: release_token 
    when:
      - event: tag