more

BUILD

@@ -1,5 +1,10 @@
 load("@bazel_gazelle//:def.bzl", "gazelle")
 
+exports_files([
+    ".aptly",
+    "envoy-maintainers-public.key",
+])
+
 # gazelle:prefix github.com/aptly-dev/aptly
 gazelle(name = "gazelle")
 

build-repository.sh

@@ -5,6 +5,12 @@ set -e -o pipefail
 REPOS=(focal jammy bullseye bookworm)
 declare -A REPO_PACKAGES
 
+ls /opt/build/cache/repository | (grep -E '^v[0-9]+\.[0-9]+\.[0-9]+' || echo '') | sort -u > debs/custom-excludes.txt
+
+bazel run --config=debs-ci //debs:publish
+
+exit 0
+
 
 import_public_key () {
     gpg --import envoy-maintainers-public.key

debs/BUILD

@@ -142,6 +142,21 @@ genrule(
 
 sh_binary(
     name = "publish",
-    srcs = ["publish.sh"]
-    env = {},
+    srcs = ["publish.sh"],
+    env = {
+        "APTLY_BIN": "$(location @aptly)",
+        "MAINTAINER_KEY": "$(location //:envoy-maintainers-public.key)",
+        # "DEBS": "$(location :debs)",
+        "APTLY_CONF": "$(location //:.aptly)",
+        "APTLY_ROOT_DEFAULT": "/opt/build/cache/aptly",
+        "DEBS_ROOT_DEFAULT": "/opt/build/cache/repository",
+        # "UNPACK_BIN": "$(location //tools/tarball:unpack)",
+    },
+    data = [
+        "@aptly",
+        "//:.aptly",
+        "//:envoy-maintainers-public.key",
+        # "//tools/tarball:unpack",
+        # ":debs"
+    ],
 )