feat: upload to ghcr using oras

[inffy]

Closes #78

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[inffy]

seems to be working

oras pull ghcr.io/get-aurora-dev/iso/aurora:stable
✓ Pulled      aurora-stable-x86_64.iso-CHECKSUM                                                                                                                  91/91  B 100.00%  907µs
  └─ sha256:750f40ce5c00cbf9879c3a5ce14a8a28aebc149fa1dade917c9dcd93ac956cda                                                                                                            
✓ Pulled      aurora-stable-x86_64.iso                                                                                                                       6.69/6.69 GB 100.00%  5m29s
  └─ sha256:702e5ce9ce67d9d83f3ae00a15ecd6d717be43316d32a8531de51f3a1838e321                                                                                                            
✓ Pulled      application/vnd.oci.image.manifest.v1+json                                                                                                       844/844  B 100.00%   64µs
  └─ sha256:0680bbee0afb50d24658bf442b1cb4e94e6892aa96cead9e569849a51ac75e4d                                                                                                            
Pulled [registry] ghcr.io/get-aurora-dev/iso/aurora:stable
Digest: sha256:0680bbee0afb50d24658bf442b1cb4e94e6892aa96cead9e569849a51ac75e4d

[renner0e]

they need to be set public first I think

❯ oras pull ghcr.io/get-aurora-dev/iso/aurora:pr-98-testing
Error response from registry: unauthorized: authentication required

~
❯ oras pull ghcr.io/get-aurora-dev/iso/aurora:stable
Error response from registry: unauthorized: authentication required

~
❯ oras pull ghcr.io/get-aurora-dev/iso/aurora:stable
Error response from registry: unauthorized: authentication required

[inffy]

forgot to do that, they are now set to public

[renner0e]

let's see if this actually helps with download speeds, in the future I feel like we shouldn't introduce any more complexity until #94 is done

[renner0e]

the key is called SIGNING_SECRET

[inffy]

sorry not relaly understanding this. We have (just like in aurora) this:
COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}

[renner0e]

accidentally approved

[inffy]

let's see if this actually helps with download speeds, in the future I feel like we shouldn't introduce any more complexity until #94 is done

Its not that importatn, we can easily draft this until #94 is done and look at it at that time.