mirror of
https://github.com/Xahau/xahaud.git
synced 2025-11-04 02:35:48 +00:00
9e1ccb900e
* adding package signing steps for rpm and deb * first spike at GPG signing with CI and containers * refine ubuntu portion * get correct gpg package version * adding CentOS support * fixing errors in installing gpg on ubuntu * base64 decode the GPG key * fixing line continuations * revised package signing, looking for package artifacts * add dpkg-sig to ubuntu image * sign all deb packges * add passphrase to GPG process * repeat yo slef on dpkg * sign all the rpm packages too * install rpm-sign in the CentOS docker image * loop through rpm files * no need for PIN on GPG signing
39 lines
953 B
Bash
39 lines
953 B
Bash
#!/usr/bin/env bash
|
|
|
|
set -eo pipefail
|
|
|
|
sign_dpkg() {
|
|
if [ -n "${GPG_KEYID}" ]; then
|
|
dpkg-sig \
|
|
-g "--no-tty --digest-algo 'sha512' --passphrase '${GPG_PASSPHRASE}' --pinentry-mode=loopback" \
|
|
-k "${GPG_KEYID}" \
|
|
--sign builder \
|
|
"build/dpkg/packages/*.deb"
|
|
fi
|
|
}
|
|
|
|
sign_rpm() {
|
|
if [ -n "${GPG_KEYID}" ] ; then
|
|
find build/rpm/packages -name "*.rpm" -exec bash -c '
|
|
echo "yes" | setsid rpm \
|
|
--define "_gpg_name ${GPG_KEYID}" \
|
|
--define "_signature gpg" \
|
|
--define "__gpg_check_password_cmd /bin/true" \
|
|
--define "__gpg_sign_cmd %{__gpg} gpg --batch --no-armor --digest-algo 'sha512' --passphrase '${GPG_PASSPHRASE}' --no-secmem-warning -u '%{_gpg_name}' --sign --detach-sign --output %{__signature_filename} %{__plaintext_filename}" \
|
|
--addsign '{} \;
|
|
fi
|
|
}
|
|
|
|
case "${1}" in
|
|
dpkg)
|
|
sign_dpkg
|
|
;;
|
|
rpm)
|
|
sign_rpm
|
|
;;
|
|
*)
|
|
echo "Usage: ${0} (dpkg|rpm)"
|
|
;;
|
|
esac
|
|
|