Document preserving Gitea Alpine key filename

README.md

@@ -21,10 +21,14 @@ https://code.factoring.digital/api/packages/public/alpine/v3.23/alpine-packages
 Install the registry signing key on each Alpine node:
 
 ```sh
-curl -fsSLo /etc/apk/keys/public-alpine.rsa.pub \
-  https://code.factoring.digital/api/packages/public/alpine/key
+cd /etc/apk/keys
+curl -fsSLOJ https://code.factoring.digital/api/packages/public/alpine/key
 ```
 
+Keep the filename returned by Gitea. Alpine matches repository signatures by key
+filename, so saving the key under another name makes `apk update` report
+`UNTRUSTED signature`.
+
 Add the stable package repository:
 
 ```sh

scripts/apk/publish-gitea.sh

@@ -46,9 +46,23 @@ if [[ "${#apks[@]}" -eq 0 ]]; then
   exit 1
 fi
 
-printf 'Publishing %d APK files to %s\n' "${#apks[@]}" "${upload_url}"
-
+declare -A published_filenames=()
+unique_apks=()
 for apk in "${apks[@]}"; do
+  filename="$(basename "${apk}")"
+  if [[ -n "${published_filenames[${filename}]:-}" ]]; then
+    continue
+  fi
+  published_filenames["${filename}"]=1
+  unique_apks+=("${apk}")
+done
+
+printf 'Publishing %d APK files to %s\n' "${#unique_apks[@]}" "${upload_url}"
+if [[ "${#unique_apks[@]}" -ne "${#apks[@]}" ]]; then
+  printf 'Skipping %d duplicate local APK filename(s)\n' "$((${#apks[@]} - ${#unique_apks[@]}))"
+fi
+
+for apk in "${unique_apks[@]}"; do
   filename="$(basename "${apk}")"
   status="$(
     curl --silent --show-error --location \