ci: release deb repository

.github/actions/publish_repository/action.yml

@@ -0,0 +1,55 @@
+name: Publish Repository
+description: Publish repository for debian/ubuntu
+inputs:
+  version:
+    description: "Release version"
+    required: true
+  repo_role_arn:
+    description: "Repo Role Arn"
+    required: true
+  gpg_signing_key:
+    description: "GPG signing key"
+    required: true
+
+runs:
+  using: "composite"
+  steps:
+    - name: Install Depencencies
+      shell: bash
+      run: |
+        sudo apt-get update
+        sudo apt-get install -y wget gnupg reprepro
+
+    - name: Import GPG Key
+      shell: bash
+      env:
+        GPG_SIGNING_KEY: ${{ inputs.gpg_signing_key }}
+      run: |
+        echo -n "$GPG_SIGNING_KEY" | gpg --import
+        gpg -k
+
+    - name: Add Packages
+      shell: bash
+      working-directory: scripts/deb
+      run: |
+        version=${{ inputs.version }}
+        deb_version=${version/-/.}
+        deb_version=${deb_version/v/}
+        wget -q https://github.com/datafuselabs/databend/releases/download/${version}/databend_${deb_version}_amd64.deb
+        wget -q https://github.com/datafuselabs/databend/releases/download/${version}/databend_${deb_version}_arm64.deb
+        reprepro includedeb stable databend_${deb_version}_amd64.deb
+        reprepro includedeb stable databend_${deb_version}_arm64.deb
+
+    - name: Configure AWS credentials
+      uses: aws-actions/configure-aws-credentials@v1
+      with:
+        role-duration-seconds: 900
+        role-to-assume: ${{ inputs.repo_role_arn }}
+        aws-region: us-east-2
+
+    - name: Publish to S3
+      shell: bash
+      working-directory: scripts/deb
+      run: |
+        aws s3 sync --delete --no-progress dists s3://repo.databend.rs/deb/dists
+        aws s3 sync --delete --no-progress pool s3://repo.databend.rs/deb/pool

.github/workflows/release.yml

@@ -499,6 +499,18 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
+  publish_packages:
+    name: publish packages
+    runs-on: ubuntu-latest
+    needs: [create_release, release_packages]
+    steps:
+      - uses: actions/checkout@v3
+      - uses: ./.github/actions/publish_repository
+        with:
+          version: ${{ needs.create_release.outputs.version }}
+          repo_role_arn: ${{ secrets.REPO_ROLE_ARN }}
+          gpg_signing_key: ${{ secrets.GPG_KEY_DEB }}
+
   upload-sha256sums-plugin:
     needs: [create_release, publish_linux, publish_macos, release_packages]
     runs-on: ubuntu-latest

scripts/deb/conf/distributions

@@ -0,0 +1,7 @@
+Origin: Databend
+Label: databend
+Codename: stable
+Architectures: arm64 amd64
+Components: main
+Description: Apt repository for databend
+SignWith: CB9E5FC23EF2F28E79C6A5ECF1BC0F3013DAF193