From a830104238a0582acfe27e67354fe1b5d4e463bf Mon Sep 17 00:00:00 2001
From: Vladimir Dubrovin <3proxy@3proxy.ru>
Date: Fri, 21 Aug 2026 13:01:47 +0300
Subject: [PATCH] Fix rpm signing: point %__gpg at the real gpg binary

rpm on Debian/Ubuntu defaults %__gpg to /usr/bin/gpg2, which does not exist,
so rpm --addsign failed with 'Could not exec gpg' and packages were left
unsigned.
---
 .github/workflows/build-rpm-arm64.yml  | 4 +++-
 .github/workflows/build-rpm-armhf.yml  | 4 +++-
 .github/workflows/build-rpm-x86-64.yml | 4 +++-
 3 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build-rpm-arm64.yml b/.github/workflows/build-rpm-arm64.yml
index 7a56621..fc3fd72 100644
--- a/.github/workflows/build-rpm-arm64.yml
+++ b/.github/workflows/build-rpm-arm64.yml
@@ -93,7 +93,9 @@ jobs:
     - name: Sign rpm
       if: github.event_name == 'release'
       run: |
-       echo "%_gpg_name $GPG_KEYID" > ~/.rpmmacros
+       GPGBIN=$(command -v gpg)
+       if [ -z "$GPGBIN" ]; then echo "gpg not found"; exit 1; fi
+       { echo "%_gpg_name $GPG_KEYID"; echo "%__gpg $GPGBIN"; } > ~/.rpmmacros
        rpm --addsign *.rpm
        for f in *.rpm; do
          sig=$(rpm -qp --qf '%{RSAHEADER:pgpsig}' "$f" 2>/dev/null)
diff --git a/.github/workflows/build-rpm-armhf.yml b/.github/workflows/build-rpm-armhf.yml
index 28668ae..0a3b4f6 100644
--- a/.github/workflows/build-rpm-armhf.yml
+++ b/.github/workflows/build-rpm-armhf.yml
@@ -126,7 +126,9 @@ jobs:
     - name: Sign rpm
       if: github.event_name == 'release'
       run: |
-       echo "%_gpg_name $GPG_KEYID" > ~/.rpmmacros
+       GPGBIN=$(command -v gpg)
+       if [ -z "$GPGBIN" ]; then echo "gpg not found"; exit 1; fi
+       { echo "%_gpg_name $GPG_KEYID"; echo "%__gpg $GPGBIN"; } > ~/.rpmmacros
        rpm --addsign *.rpm
        for f in *.rpm; do
          sig=$(rpm -qp --qf '%{RSAHEADER:pgpsig}' "$f" 2>/dev/null)
diff --git a/.github/workflows/build-rpm-x86-64.yml b/.github/workflows/build-rpm-x86-64.yml
index 24a9fa3..fbf0d85 100644
--- a/.github/workflows/build-rpm-x86-64.yml
+++ b/.github/workflows/build-rpm-x86-64.yml
@@ -94,7 +94,9 @@ jobs:
     - name: Sign rpm
       if: github.event_name == 'release'
       run: |
-       echo "%_gpg_name $GPG_KEYID" > ~/.rpmmacros
+       GPGBIN=$(command -v gpg)
+       if [ -z "$GPGBIN" ]; then echo "gpg not found"; exit 1; fi
+       { echo "%_gpg_name $GPG_KEYID"; echo "%__gpg $GPGBIN"; } > ~/.rpmmacros
        rpm --addsign *.rpm
        for f in *.rpm; do
          sig=$(rpm -qp --qf '%{RSAHEADER:pgpsig}' "$f" 2>/dev/null)