#!/usr/bin/env bash
set -euo pipefail
apt-get update -qq
apt-get install -y --no-install-recommends curl ca-certificates gnupg unzip wget

# goreleaser repo → nfpm
curl -fsSL https://repo.goreleaser.com/apt/gpg.key | gpg --dearmor -o /usr/share/keyrings/goreleaser.gpg
echo "deb [signed-by=/usr/share/keyrings/goreleaser.gpg] https://repo.goreleaser.com/apt/ stable main" \
  > /etc/apt/sources.list.d/goreleaser.list

apt-get update -qq
apt-get install -y nfpm
echo "✓ nfpm $(nfpm --version)"