Skip to content

chore: migrate APT repo domain to meta.telcochisel.com - #14

Merged
rfs-telco merged 1 commit into
mainfrom
chore/apt-domain-migration
Oct 19, 2026
Merged

rfs-telco merged 1 commit into
mainfrom
chore/apt-domain-migration

Conversation

@rfs-telco

Copy link
Copy Markdown
Contributor

URL-only migration of the APT repository domain: meta.telcosec.net → meta.telcochisel.com. Same GPG key, same fingerprint (6326A34C…), same repo contents — just the serving domain.

Changed (22 files)

  • Repo URLs — 00-install-all-packages.sh, install-telcochisel-repo.sh, install-apt-key.sh, lib/packages.sh, telcosec-pkg, Go CLI (OfficialRepoURL + its test assertion).
  • APT pinning origin (origin meta.telcochisel.com) — 99-telcochisel.pref, enrollment script, operations.go. Critical: must match the serving host or pinning silently fails.
  • Cloudflare Pages CNAME in deploy-apt.yml → meta.telcochisel.com — the change that makes the new domain actually serve.
  • Docs/history (README, RELEASES, SECURITY, CHANGELOG, man page, completions) for consistency.

Deliberately NOT changed

  • GPG fingerprint + key filename (same key).
  • The key UID email repo@telcosec.net in deploy-apt.yml — it's part of the key identity, not the domain; changing it would change the fingerprint.

Verified

  • Go test passes (OfficialRepoURL constant and its assertion moved together).
  • All 10 metapackages rebuild cleanly.
  • Shell scripts parse; deploy-apt.yml actionlint-clean.

⚠️ Infra prerequisite (outside this repo)

The new domain must be live before the next ISO build / enrollment, or the key fetch + apt update will fail:

  1. Point meta.telcochisel.com DNS at the Cloudflare Pages project.
  2. Add it as a custom domain in Cloudflare Pages (the deploy workflow writes the CNAME, but the domain must be configured/verified in Cloudflare).
  3. Confirm https://meta.telcochisel.com/public.gpg serves the key with fingerprint 6326A34C… before relying on it.

🤖 Generated with Claude Code

URL-only move — same GPG signing key, same fingerprint
(6326A34C15FEF05FBD63518B4325182E2F0D9DB9), same key filename and repo
contents, now served from the new domain.

Updated across all 22 tracked files:
- Repo URLs in 00-install-all-packages.sh, install-telcochisel-repo.sh,
  install-apt-key.sh, lib/packages.sh, telcosec-pkg, and the Go CLI
  (operations.go OfficialRepoURL + its test assertion).
- APT pinning origin (origin meta.telcochisel.com) in 99-telcochisel.pref,
  the enrollment script, and operations.go — these MUST match the serving
  host or pinning silently fails.
- deploy-apt.yml Cloudflare Pages CNAME -> meta.telcochisel.com (the change
  that makes the new domain actually serve). The GPG key UID email
  (repo@telcosec.net) is deliberately left — it is part of the key identity,
  not the domain.
- Docs/history (README, RELEASES, SECURITY, CHANGELOG, changelog, man page,
  completions) updated for consistency.

Verified: Go test passes (constant/assertion in sync), all 10 metapackages
rebuild, shell scripts parse, deploy workflow actionlint-clean.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@rfs-telco
rfs-telco merged commit 13f403d into main Oct 19, 2026
1 check passed
@rfs-telco
rfs-telco deleted the chore/apt-domain-migration branch October 19, 2026 00:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant