claude-noether 09d8813507 ci: fix duplicate run: key in build.yml wipe-secrets step
PR #79 (6ee8f2748, mesa-panvk-bifrost-video) added a second `run:`
mapping key on the next line of the same step:

    - name: wipe secrets
      if: always()
      run: rm -f /root/repo_pass /root/.ssh/id_ed25519
      run: rm -f /root/.ssh/id_ed25519_hertz    ← duplicate `run:` key

YAML doesn't allow two mappings with the same key in one node, so
Gitea's workflow parser rejected the entire file:

  actions/workflows.go:124:DetectWorkflows() [W]
    ignore invalid workflow "build.yml": yaml: unmarshal errors:
      line 1423: mapping key "run" already defined at line 1422

Result: every push to main since 6ee8f2748 (2026-05-21 23:14 CEST)
silently failed to enqueue ANY action run.  PR #80's "re-trigger by
README touch" had no chance — workflow file was invalid before #80
even existed.  Runs #161-163 do not exist; #160 (pre-#79) is the
last successful enqueue.

Fix: merge the two single-line `run:` invocations into one literal
block.  Functionally identical, YAML-valid.

Post-merge: workflow file becomes valid again, new push to main
triggers a fresh build run covering the backlog (#79's
mesa-panvk-bifrost-video build that #80 wanted re-triggered).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-22 09:15:18 +02:00

marfrit-packages

Overlay package repository for the reauktion.de infrastructure.

Published at: https://packages.reauktion.de/

Scope

Tree Arches Notes
Arch Linux ARM (ALARM) aarch64 primary target — Pi 5, Rock 5, ampere, KU-1255 test rigs
Arch Linux x86_64 for nuccies / workstations
Debian arm64, amd64 for non-Arch hosts

MIPS is intentionally unsupported. The Fritz!Box is sacred.

Layout (served at packages.reauktion.de)

packages.reauktion.de/
├── arch/
│   ├── aarch64/{marfrit.db,marfrit.files,*.pkg.tar.{xz,zst}{,.sig}}
│   └── x86_64/...
├── debian/
│   ├── dists/
│   │   ├── bookworm/{Release,InRelease,Release.gpg,main/binary-{arm64,amd64}/...}
│   │   └── trixie/...
│   └── pool/main/...
└── marfrit.gpg      # public signing key

Adding the repo (Arch / ALARM)

curl -sO https://packages.reauktion.de/marfrit.gpg
sudo pacman-key --add marfrit.gpg
sudo pacman-key --lsign-key 92D5E96D8F63C75E4116AA1FF5C8C4603D0D250C

# Paste at the end of /etc/pacman.conf:
[marfrit]
Server = https://packages.reauktion.de/arch/$arch
SigLevel = Required DatabaseRequired

sudo pacman -Sy

Adding the repo (Debian)

sudo install -m 755 -d /etc/apt/keyrings
curl -s https://packages.reauktion.de/marfrit.gpg | \
    sudo gpg --dearmor -o /etc/apt/keyrings/marfrit.gpg

echo "deb [signed-by=/etc/apt/keyrings/marfrit.gpg] https://packages.reauktion.de/debian $(lsb_release -cs) main" | \
    sudo tee /etc/apt/sources.list.d/marfrit.list

sudo apt update

Signing key

  • Fingerprint: 92D5E96D8F63C75E4116AA1FF5C8C4603D0D250C
  • UID: Markus Fritsche (marfrit-repo signing) <mfritsche@reauktion.de>
  • Expires: 2030-04-13

Key management procedures (renewal, rotation, revocation) live in DokuWiki at private:reauktion:marfrit_repo_key (admin-only).

Layout in this Git repo

marfrit-packages/
├── README.md
├── arch/
│   └── distcc-avahi/                # ALARM distcc with --with-avahi
├── debian/                          # (future) Debian source packages
└── .gitea/
    └── workflows/
        └── build.yml                # CI pipeline stub

Mail

mfritsche@reauktion.de.

S
Description
ALARM aarch64 + Arch x86_64 + Debian arm64/amd64 overlay repo — published at packages.reauktion.de
Readme 256 MiB
Languages
Shell 99.3%
JavaScript 0.7%