Skip to content

feat(packaging): centralize package repositories by package manager#124

Merged
vmvarela merged 1 commit intomasterfrom
issue-122/centralize-package-repos
May 1, 2026
Merged

feat(packaging): centralize package repositories by package manager#124
vmvarela merged 1 commit intomasterfrom
issue-122/centralize-package-repos

Conversation

@vmvarela
Copy link
Copy Markdown
Owner

@vmvarela vmvarela commented May 1, 2026

Summary

Closes #122

Centralizes all package distribution under one repository per package manager, following the model already used by vmvarela/homebrew-tap.

What changed

New external repositories

Repository System Pages
vmvarela/scoop-bucket Scoop
vmvarela/nix-packages Nix
vmvarela/apt-packages APT ✅ enabled
vmvarela/rpm-packages RPM ✅ enabled
vmvarela/apk-packages APK ✅ enabled

Each repo ships with an auto-update workflow triggered by repository_dispatch from the release pipeline.

release.yml changes

Job Before After
update-scoop pushes to vmvarela/scoop-sql-pipe (root) pushes to vmvarela/scoop-bucket/bucket/
update-nix opens a PR on this repo pushes directly to vmvarela/nix-packages
update-apt (new) dispatches to vmvarela/apt-packages after package-deb
update-rpm (new) dispatches to vmvarela/rpm-packages after package-rpm
update-apk (new) dispatches to vmvarela/apk-packages after package-apk

README

  • APT/RPM/APK sections updated to show repo-based installation as the primary method (with direct .deb/.rpm/.apk download as fallback)
  • Nix updated to github:vmvarela/nix-packages#sql-pipe
  • Scoop updated to scoop bucket add vmvarela https://github.com/vmvarela/scoop-bucket

Secrets required

Add these to vmvarela/sql-pipe before the next release:

Secret Purpose
NIX_PACKAGES_TOKEN PAT with contents:write on vmvarela/nix-packages
APT_PACKAGES_TOKEN PAT with contents:write on vmvarela/apt-packages
RPM_PACKAGES_TOKEN PAT with contents:write on vmvarela/rpm-packages
APK_PACKAGES_TOKEN PAT with contents:write on vmvarela/apk-packages

Add these to each package repo for signed indices:

Repo Secret Description
apt-packages, rpm-packages GPG_SIGNING_KEY Armored GPG private key
apt-packages, rpm-packages GPG_KEY_ID Key ID / fingerprint
apk-packages APK_SIGNING_KEY RSA private key (PEM)
apk-packages APK_SIGNING_KEY_PUB RSA public key (PEM)

All new jobs degrade gracefully — if a secret is absent the job is skipped (Scoop/Nix) or the index is built unsigned with a warning (APT/RPM/APK).

Post-merge

  • Archive vmvarela/scoop-sql-pipe with a deprecation notice
  • Add the secrets listed above
  • Trigger a test release to validate the full pipeline

- update-scoop: redirect to vmvarela/scoop-bucket (bucket/sql-pipe.json)
  instead of per-app vmvarela/scoop-sql-pipe
- update-nix: push directly to vmvarela/nix-packages instead of
  opening an internal PR; requires NIX_PACKAGES_TOKEN secret
- add update-apt job: dispatches to vmvarela/apt-packages after package-deb;
  requires APT_PACKAGES_TOKEN secret
- add update-rpm job: dispatches to vmvarela/rpm-packages after package-rpm;
  requires RPM_PACKAGES_TOKEN secret
- add update-apk job: dispatches to vmvarela/apk-packages after package-apk;
  requires APK_PACKAGES_TOKEN secret
- README: update APT/RPM/APK installation to show repo-based commands;
  update Nix to github:vmvarela/nix-packages#sql-pipe;
  update Scoop to vmvarela/scoop-bucket

Closes #122
@vmvarela vmvarela added this to the Sprint 7 milestone May 1, 2026
@vmvarela vmvarela added the type:feature New functionality label May 1, 2026
@github-actions github-actions Bot removed the type:feature New functionality label May 1, 2026
@vmvarela vmvarela merged commit 19e0d55 into master May 1, 2026
5 checks passed
@vmvarela vmvarela deleted the issue-122/centralize-package-repos branch May 1, 2026 14:40
@vmvarela vmvarela added the type:chore Maintenance, refactoring, tooling label May 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type:chore Maintenance, refactoring, tooling

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Centralize package repositories by package manager

1 participant