Cloud packaging

[t3chguy]

Goal: Move Element Desktop packaging into Github Actions

• Build, Sign & Notarise macOS builds
• Build & EV Sign Windows builds
• Build Linux builds and include in a signed debian repository
• Move reprepro task into its own job and protect database via concurrency
• Test the above on packages-element-io.element.io
  • Linux updates
  • macOS updates
  • Windows updates
  • R2 file structure
• Add tests
  • Assert macOS package is signed and notarised
  • Assert Windows installer is EV signed
  • Assert apt is happy with debian repo
• Switch packages over to R2
• Fix deb changelogs
• Keyring package and update gpg keys
  • Keyring package
  • Deploy keyring package
  • Recommend keyring from desktop & nightly debs
  • Update public gpg keyring with extended expiry
  • Update reprepro config
  • Update keyring package
  • Run release with new keys & test it works
• Switch to final SSL.com credentials
  • Enable CI to assert valid signature
  • Re-test Windows updates
• RETEST EVERYTHING
  • Windows
  • Linux
  • macOS
• Switch from athena + mac mini to the above
  • Stop mac mini operation
  • Sync mac mini's reprepro database
  • Switch workflows over to live r2 bucket
• Remove afterSign and winSign scripts
• ARM64 builds
• Update documentation
• Wipe Mac Mini
• Return Mac Mini to the office
• Announcement/docs about GPG expiry and how to update if you are caught out #24907

Internal references

myhours: https://app.myhours.com/#/projects/1994679/overview