Update-APT-Source GitHub Action

A GitHub Action for managing Debian/Ubuntu APT repositories, parsing .deb packages and publishing them to cloud storage services.

Features

• Parse and process Debian package (.deb) files
• Support various compression formats (gz, xz, zst) for control files
• Generate complete APT repository structure (Packages, Release files)
• Calculate and verify checksums (MD5, SHA1, SHA256, SHA512)
• Implement GPG signing to ensure repository security
• Support multiple architectures (amd64, arm64, etc.)
• Support multiple Ubuntu distributions (bionic, focal, jammy, noble, etc.)
• Integration with cloud storage service(aliyun oss and aws s3 was supported)

Usage in GitHub Workflow

Create a workflow file in your GitHub repository (e.g.: .github/workflows/update-apt.yml):

name: Update APT Repository
on:
  push:
    tags:
      - 'v*'

jobs:
  update-apt-repo:
  runs-on: ubuntu-latest
  steps:
    - name: Update APT Source (OSS)
      uses: coscene-io/update-apt-source@test
      with:
        ubuntu_distro: foxy
        deb_paths: /workspace/myapp_1.0.0_amd64.deb,/workspace/myapp_1.0.0_arm64.deb
        architectures: amd64,arm64
        storage_type: oss
        endpoint: https://oss-***.aliyuncs.com
        region: cn-***
        bucket_name: *******
        access_key_id: key
        access_key_secret: secret
        gpg_private_key: private_key

Inputs

Input Name	Description	Required
ubuntu_distro	Ubuntu distribution codename (e.g., focal, jammy, or all)	Yes
deb_paths	Paths to .deb packages, separated by newlines	Yes
architectures	Architectures for each .deb package, separated by newlines, in the same order as deb-paths, with the same number of entries as deb-paths	Yes
storage_type	Cloud storage type, aws or oss for now	Yes
endpoint	Cloud storage endpoint	Yes
region	Cloud storage region	Yes
bucket_name	Cloud storage bucket name	Yes
access_key_id	Cloud storage access key ID	Yes
access_key_secret	Cloud storage access key secret	Yes
gpg_private_key	GPG private key for signing	Yes

How It Works

1. Parse specified .deb packages and extract metadata
2. Generate APT repository structure based on specified Ubuntu distribution and architecture
3. Create Packages file containing detailed information of all packages
4. Generate and sign Release file to ensure repository integrity
5. Upload packages and metadata files to cloud storage(aliyun oss and aws s3 was supported)

Security Note

Always use GitHub repository Secrets to store sensitive information like keys and tokens. Never expose these values directly in your workflow files.