https://github.com/freifunkmuc/gluon-signing-issueops
Automated Gluon Firmware Manifest signing via GitHub issues - clone and see README for setup
https://github.com/freifunkmuc/gluon-signing-issueops
ffmuc freifunk gluon
Last synced: 4 months ago
JSON representation
Automated Gluon Firmware Manifest signing via GitHub issues - clone and see README for setup
- Host: GitHub
- URL: https://github.com/freifunkmuc/gluon-signing-issueops
- Owner: freifunkMUC
- Created: 2025-06-01T13:38:03.000Z (about 1 year ago)
- Default Branch: main
- Last Pushed: 2026-04-03T11:37:08.000Z (4 months ago)
- Last Synced: 2026-04-03T16:33:23.319Z (4 months ago)
- Topics: ffmuc, freifunk, gluon
- Language: Shell
- Homepage:
- Size: 26.4 KB
- Stars: 0
- Watchers: 0
- Forks: 3
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Gluon Firmware Manifest Signing IssueOps
This repository provides an automated GitHub IssueOps workflow for signing Gluon firmware sysupgrade manifests. It enables maintainers to request and approve firmware manifest signatures via GitHub Issues, with signatures generated and posted automatically after approval from the repository owner.
## Usage
### 1. Requesting a Signature
- Open a new issue using the "Request firmware signature" issue form.
- Fill in the required fields:
- **Version**: The firmware version (letters, numbers, dot, underscore, dash only)
- **Release channel**: Select one of `stable`, `testing`, or `experimental`
### 2. Approving a Signature
- The repository owner reviews the issue and, if appropriate, comments:
> Approve signature
- The workflow will:
- Download the manifest from the configured firmware URL
- Sign the manifest using the private key
- Post the signature as a comment
- Close the issue
## Setup
### Required Secrets
- `FIRMWARE_SIGNING_KEY`: The private key (in PEM format) used for signing manifests. Add this as a repository secret.
### Repository Variables
- `FIRMWARE_BASE_URL`: The base URL for firmware downloads. E.g.: `https://firmware.ffmuc.net`
### Required Labels
- `signing-request`: Add this label to your repository to categorize signature request issues.