backports.init.sls.yml

/etc/apt/sources.list.d/squeeze-backports.list:
  file.managed:
    - source: salt://backports/etc/apt/sources.list.d/squeeze-backports.list
    - mode: 0644

/etc/apt/sources.list.d/salt-uppercase-backports.list:
  file.managed:
    - source: salt://backports/etc/apt/sources.list.d/salt-uppercase-backports.list
    - mode: 0644
  cmd.run:
    - unless: apt-key list | grep B27B7D22
    - name: wget -q -O - http://repo.uppercase.no/debian/conf/uppercase.key |  apt-key add -

backports.repo.sls.yml

hosted-pkgs:
  pkg.installed:
    - names:
      - fakeroot
      - build-essential
      - python-argparse
      - python-zmq
      - debhelper
      - python-sphinx
      - reprepro
      - dpkg-sig

/srv/www/repo.uppercase.no/debian:
  file.directory:
    - user: www-data
    - group: www-data
    - mode: 755
    - makedirs: True

/srv/www/repo.uppercase.no/debian/conf:
  file.directory:
    - user: www-data
    - group: www-data
    - mode: 755
    - makedirs: True

/srv/www/repo.uppercase.no/debian/conf/distributions:
  file.managed:
    - source: salt://backports/reprepro/conf/distributions
    - user: www-data
    - group: www-data
    - mode: 0644

/srv/www/repo.uppercase.no/debian/conf/override.squeeze:
  file.managed:
    - source: salt://backports/reprepro/conf/override.squeeze
    - user: www-data
    - group: www-data
    - mode: 0644

/srv/www/repo.uppercase.no/debian/conf/uppercase.key:
  file.managed:
    - source: salt://backports/reprepro/conf/uppercase.key
    - user: www-data
    - group: www-data
    - mode: 0644

/etc/repo.uppercase.priv.key:
  file.managed:
    - source: salt://backports/reprepro/uppercase.priv.key
    - user: www-data
    - group: www-data
    - mode: 0644
    - require_in:
      - cmd: install-repo-private-key

install-repo-private-key:
  cmd.run:
    - unless: gpg --list-secret-keys | grep B27B7D22
    - name: gpg --import /etc/repo.uppercase.priv.key

build.sh

#!/bin/bash
# TODO: parameterized build?
TAG=v0.13.2
WORKSPACE=/home/oc/build

#

cd $WORKSPACE/salt
git checkout master
git clean -fdx
git pull
git checkout $TAG

echo "Building tag $(git describe --tags) ($TAG)"
for f in ../*.deb; do rm $f; done # incase run with sh -xe

fakeroot debian/rules binary

for f in ../*.deb; do
    dpkg-sig -k B27B7D22 --sign builder $f # sign
    sudo reprepro -Vb /var/www/repo.uppercase.no/debian includedeb squeeze $f # deploy
done

distributions

Origin: Salt Stack
Label: Salt Stack
Codename: squeeze
Architectures: i386 amd64
Components: main
Description: Apt repository for Salt Stack
DebOverride: override.squeeze
DscOverride: override.squeeze
SignWith: B27B7D22

foo

foo