WIP: try to push packages to noble-40-dev and use them

Author: antobinary

.github/actions/install-bbb/action.yml

@@ -157,11 +157,11 @@ runs:
         sudo -i <<'EOF'
         set -e
         cd /root/
-        wget -nv https://raw.githubusercontent.com/bigbluebutton/bbb-install/v3.0.x-release/bbb-install.sh -O bbb-install.sh
+        wget -nv https://raw.githubusercontent.com/bigbluebutton/bbb-install/v4.0.x-release-ubuntu-24/bbb-install.sh -O bbb-install.sh
         sed -i "s|> /etc/apt/sources.list.d/bigbluebutton.list||g" bbb-install.sh
         chmod +x bbb-install.sh
 
-        ./bbb-install.sh -v noble-40-dev -s bbb-ci.test -j -d /certs/
+        ./bbb-install.sh -v noble-40-dev -s bbb-ci.test -j -d /certs/ -r packages.bigbluebutton.org
 
         bbb-conf --salt bbbci
         sed -i "s/\"minify\": true,/\"minify\": false,/" /usr/share/etherpad-lite/settings.json

.github/workflows/automated-tests.yml

@@ -387,6 +387,39 @@ jobs:
         with:
           path: /var/cache/apt/archives
           key: ${{ runner.os }}-apt-${{ hashFiles('bigbluebutton-config/bigbluebutton-release') }}-${{ steps.apt-manifest.outputs.hash }}
+  push-debs-to-package-repo:
+    needs: unify-artifacts
+    # if: github.event_name == 'push'
+    if: github.event_name == 'push' || github.event_name == 'pull_request' # TODO revert to 'push' only
+    runs-on: ubuntu-24.04
+    environment: apt-repo
+    steps:
+      - name: Download unified artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: all-bbb-artifacts
+          path: all-artifacts
+      - name: Add repo host to known_hosts
+        env:
+          REPO_HOST: ${{ secrets.PKG_REPO_HOST }}
+        run: |
+          mkdir -p ~/.ssh
+          [ -n "$REPO_HOST" ] && ssh-keyscan -H "$REPO_HOST" >> ~/.ssh/known_hosts || echo "PKG_REPO_HOST not set, skipping"
+      - name: Push .deb to package repo
+        env:
+          SSH_KEY: ${{ secrets.PKG_REPO_SSH_KEY }}
+          REPO_HOST: ${{ secrets.PKG_REPO_HOST }}
+          REPO_USER: ${{ secrets.PKG_REPO_USER }}
+        run: |
+          eval $(ssh-agent -s)
+          trap 'ssh-agent -k' EXIT
+          echo "$SSH_KEY" | tr -d '\r' | ssh-add -
+          rsync -avz -e "ssh -o ServerAliveInterval=60 -o ServerAliveCountMax=10" \
+            all-artifacts/*.deb ${REPO_USER}@${REPO_HOST}:/srv/apt-incoming/
+          # Trigger processing for the target codename (e.g. jammy)
+          ssh -o ServerAliveInterval=60 -o ServerAliveCountMax=10 \
+            ${REPO_USER}@${REPO_HOST} \
+            "sudo -u aptrepo /usr/local/bin/repo-process-incoming noble-40-dev"
   install-and-run-plugin-tests:
     needs:
       - unify-artifacts