abuild: sign index with abuild-sign

abuild.in

@@ -239,7 +239,6 @@ cleanpkg() {
 			"$apkcache"/$p.apk
 	done
 	# remove given packages from index
-
 }
 
 # clean all packages except current
@@ -474,7 +473,18 @@ apkcache() {
 
 	# update the apkcache cache here
 	msg "Updating the cached abuild repository index..."
-	apk index -o "$apkcache"/APKINDEX.tar.gz "$apkcache"/*.apk
+	(
+	local sign=".SIGN.RSA.${SIGN_PUBLIC_KEY##*/}"
+	local oldindex=
+	cd "$apkcache"
+	if [ -f APKINDEX.tar.gz ]; then
+		oldindex="--index APKINDEX.tar.gz"
+	fi
+	apk index $oldindex --output APKINDEX.tar.gz.unsigned *.apk || exit 1
+	msg "Signing the index..."
+	abuild-sign -q APKINDEX.tar.gz.unsigned || exit 1
+	mv APKINDEX.tar.gz.unsigned APKINDEX.tar.gz
+	)
 }
 
 # predefined splitfunc doc