arch_boxes_sync: Pull the artifacts from GitLab's package registry

arch-boxes has decided to use GitLab's package registry instead of job artifacts[1].

[1] arch-boxes@d04c8274

roles/arch_boxes_sync/files/arch-boxes-sync.sh

@@ -6,7 +6,7 @@ readonly ARCH_BOXES_PATH="/srv/ftp/images"
 readonly LASTUPDATE_PATH="/srv/ftp/lastupdate"
 readonly MAX_RELEASES="6" # 3 months
 
-PACKAGES="$(curl --silent --show-error --fail "https://gitlab.archlinux.org/api/v4/projects/${PROJECT_ID}/packages")"
+PACKAGES="$(curl --silent --show-error --fail "https://gitlab.archlinux.org/api/v4/projects/${PROJECT_ID}/packages?per_page=1&sort=desc")"
 LATEST_VERSION="$(jq -r .[0].version <<< "${PACKAGES}")"
 
 if [[ -d ${ARCH_BOXES_PATH}/${LATEST_VERSION} ]]; then
@@ -42,8 +42,8 @@ while IFS= read -r FILE; do
   fi
 
   curl --silent --show-error --fail --output "${LATEST_VERSION}/${FILE_NAME}" "https://gitlab.archlinux.org/api/v4/projects/${PROJECT_ID}/packages/generic/${PACKAGE_NAME}/${LATEST_VERSION}/${FILE_NAME}"
-  sha256sum --quiet -c <<< "${FILE_SHA256} files/${FILE_NAME}"
-  touch --no-create --date="@$(date -d "${FILE_CREATED_AT}" +%s)" "files/${FILE_NAME}"
+  sha256sum --quiet -c <<< "${FILE_SHA256} ${LATEST_VERSION}/${FILE_NAME}"
+  touch --no-create --date="@$(date -d "${FILE_CREATED_AT}" +%s)" "${LATEST_VERSION}/${FILE_NAME}"
 done < <(jq -c .[] <<< "${PACKAGE_FILES}")
 
 for FILE in "${LATEST_VERSION}"/*; do