1 files changed, 10 insertions(+), 9 deletions(-)

M .builds/guix.yml

@@ 11,9 11,16 @@ artifacts:
 - cheogram.nar.lz
 tasks:
 - pull: |
-    curl -O https://cheogram.com/cheogram.nar
-    guix archive --import < cheogram.nar
-    guix pull --commmit=3455a004ec78a8c8a579b74da8039fbcd36cea73
+    if [ -e signing-key.sec ]; then
+      sudo mv signing-key.pub /etc/guix/
+      sudo mv signing-key.sec /etc/guix/
+      sudo chown root:root /etc/guix/signing-key.sec
+      sudo chmod 0400 /etc/guix/signing-key.sec
+      sudo guix archive --authorize < /etc/guix/signing-key.pub
+      curl -O https://cheogram.com/cheogram.nar
+      guix archive --import < cheogram.nar
+      guix pull --allow-downgrades --commit=3455a004ec78a8c8a579b74da8039fbcd36cea73
+    fi
 - bake: |
     printf "(define-module (cheogram))\n" >> cheogram.scm
     sed '/^;;;;$/q' cheogram/guix.scm >> cheogram.scm


@@ 28,11 35,5 @@ tasks:
     if [ "$BUILD_REASON" = patchset ]; then with_source="--with-source=$PWD/cheogram"; fi
     guix build $with_source --no-grafts -r out -L. cheogram
 - archive: |
-    if [ -e signing-key.sec ]; then
-      sudo mv signing-key.pub /etc/guix/
-      sudo mv signing-key.sec /etc/guix/
-      sudo chown root:root /etc/guix/signing-key.sec
-      sudo chmod 0400 /etc/guix/signing-key.sec
-    fi
     guix archive --export -r --no-grafts $(readlink -f out-*) > cheogram.nar
     plzip cheogram.nar