Implement APT release process

Signed-off-by: Jan-Otto Kröpke <[email protected]>

Author: jkroepke

.github/workflows/ci.yaml

@@ -121,11 +121,21 @@ jobs:
         with:
           go-version-file: 'go.mod'
 
-      - name: Write gpg sign key
+      - name: GPG configuration
         run: echo "$GPG_KEY" > "$GPG_KEY_PATH"
+          mkdir -p "$HOME/.gnupg"
+          chmod 0700 "$HOME/.gnupg"
+          echo "use-agent" > "$HOME/.gnupg/gpg.conf"
+          echo "pinentry-program $GITHUB_WORKSPACE/.github/scripts/pinentry.sh" > "$HOME/.gnupg/gpg-agent.conf"
+          echo "$GPG_PASSPHRASE" > "$HOME/.gnupg/passphrase"
+          gpgconf --launch gpg-agent
+          gpg --import "$GPG_KEY_PATH"
+          echo "1F34F95B4F30BC5B06E0D7CC3F619F17002790D8:6:" | gpg --import-ownertrust
         env:
-          GPG_KEY_PATH: "${{ secrets.GPG_KEY_PATH }}"
+          GPG_KEY_ID: ${{ vars.GPG_KEY_ID }}
           GPG_KEY: ${{ secrets.GPG_KEY }}
+          GPG_PASSPHRASE: ${{ secrets.NFPM_PASSPHRASE }}
+          GPG_KEY_PATH: "${{ secrets.GPG_KEY_PATH }}"
 
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@90a3faa9d0182683851fbfa97ca1a2cb983bfca3 # v6.2.1
@@ -139,21 +149,6 @@ jobs:
           NFPM_OPENVPN-AUTH-OAUTH2_PASSPHRASE: ${{ secrets.NFPM_PASSPHRASE }}
           GPG_KEY_PATH: ${{ secrets.GPG_KEY_PATH }}
 
-      - name: GPG configuration
-        run: |
-          mkdir -p "$HOME/.gnupg"
-          chmod 0700 "$HOME/.gnupg"
-          echo "use-agent" > "$HOME/.gnupg/gpg.conf"
-          echo "pinentry-program $GITHUB_WORKSPACE/.github/scripts/pinentry.sh" > "$HOME/.gnupg/gpg-agent.conf"
-          echo "$GPG_PASSPHRASE" > "$HOME/.gnupg/passphrase"
-          gpgconf --launch gpg-agent
-          gpg --import "$GPG_KEY_PATH"
-          echo "$GPG_KEY_ID:6:" | gpg --import-ownertrust
-        env:
-          GPG_KEY_ID: ${{ vars.GPG_KEY_ID }}
-          GPG_PASSPHRASE: ${{ secrets.NFPM_PASSPHRASE }}
-          GPG_KEY_PATH: "${{ secrets.GPG_KEY_PATH }}"
-
       - name: Release APT repository
         run: |
           set -x