ci: added seperate steps for sign and checksum (#964)

* ci: added seperate steps for sign and checksum * ci: fix removing v char Co-authored-by: Mohammad Abudayyeh <47318409+moabu@users.noreply.github.com>
JanssenProject · Mar 4, 2022 · 48d6df1 · 48d6df1
1 parent a2944c1
commit 48d6df1
Showing 1 changed file with 27 additions and 12 deletions.
diff --git a/.github/workflows/build-packages.yml b/.github/workflows/build-packages.yml
@@ -20,16 +20,19 @@ jobs:
             build_files: deb/focal
             asset_prefix: '_'
             asset_path: jans
+            sign_cmd: dpkg-sig -s builder -k DE92BEF14A1A4E542F678B64DC3C790386C73900
           - name: el8
             asset_suffix: .el8.x86_64.rpm
             build_files: rpm/el8
             asset_prefix: '-'
             asset_path: jans/rpmbuild/RPMS/x86_64
+            sign_cmd: rpm --addsign
           - name: suse15
             asset_suffix: .suse15.x86_64.rpm
             build_files: rpm/suse15
             asset_prefix: '-'
             asset_path: jans/rpmbuild/RPMS/x86_64
+            sign_cmd: rpm --addsign
 
     steps:
     - name: Getting build dependencies
@@ -72,6 +75,17 @@ jobs:
          sed -i "s/%VERSION%/${{ steps.previoustag.outputs.version }}/g" run-build.sh
          cat run-build.sh
          sudo ./run-build.sh
+    - name: Sign package
+      id: sign_package
+      run : |
+        echo '%_gpg_name moauto (automation) <54212639+mo-auto@users.noreply.github.com>' >> ~/.rpmmacros      
+        ${{ matrix.sign_cmd }} ${{github.workspace}}/${{ matrix.asset_path }}/jans${{ matrix.asset_prefix }}${{ steps.previoustag.outputs.version }}${{ matrix.asset_suffix }}
+    - name: Create checksum
+      id: create_checksum
+      run: |
+        cd jans/
+        sed -i "s/%VERSION%/${{ steps.previoustag.outputs.version }}/g" checksum.sh
+        sudo ./checksum.sh      
     - name: Upload binaries to release
       id: upload_binaries
       uses: svenstaro/upload-release-action@v2
@@ -116,6 +130,7 @@ jobs:
           make zipapp 
           mv jans-cli.pyz jans-cli-linux-suse-X86-64.pyz
           sha256sum jans-cli-linux-suse-X86-64.pyz > jans-cli-linux-suse-X86-64.pyz.sha256sum
+    # To be removed once we get SUSE build working
     - uses: addnab/docker-run-action@v3
       name: Build with CentOS7
       continue-on-error: true
@@ -138,12 +153,12 @@ jobs:
           cd /centos/jans-linux-setup
           pip install shiv
           make zipapp
-          mv jans-linux-setup.pyz jans-linux-centos-X86-64-setup.pyz
-          sha256sum jans-linux-centos-X86-64-setup.pyz > jans-linux-centos-X86-64-setup.pyz.sha256sum
+          mv jans-linux-setup.pyz jans-linux-X86-64-setup.pyz
+          sha256sum jans-linux-X86-64-setup.pyz > jans-linux-X86-64-setup.pyz.sha256sum
           cd ../jans-cli
           make zipapp 
-          mv jans-cli.pyz jans-cli-linux-centos-X86-64.pyz
-          sha256sum jans-cli-linux-centos-X86-64.pyz > jans-cli-linux-centos-X86-64.pyz.sha256sum
+          mv jans-cli.pyz jans-cli-linux-X86-64.pyz
+          sha256sum jans-cli-linux-X86-64.pyz > jans-cli-linux-X86-64.pyz.sha256sum
     - name: Set up Python 3.6
       uses: actions/setup-python@v3
       with:
@@ -168,14 +183,14 @@ jobs:
       id: cache-installers
       with:
         path: |
-          ${{github.workspace}}/jans-linux-setup/jans-linux-centos-X86-64-setup.pyz
-          ${{github.workspace}}/jans-linux-setup/jans-linux-centos-X86-64-setup.pyz.sha256sum
+          ${{github.workspace}}/jans-linux-setup/jans-linux-X86-64-setup.pyz
+          ${{github.workspace}}/jans-linux-setup/jans-linux-X86-64-setup.pyz.sha256sum
           ${{github.workspace}}/jans-linux-setup/jans-linux-suse-X86-64-setup.pyz
           ${{github.workspace}}/jans-linux-setup/jans-linux-suse-X86-64-setup.pyz.sha256sum
           ${{github.workspace}}/jans-linux-setup/jans-linux-ubuntu-X86-64-setup.pyz
           ${{github.workspace}}/jans-linux-setup/jans-linux-ubuntu-X86-64-setup.pyz.sha256sum
-          ${{github.workspace}}/jans-cli/jans-cli-linux-centos-X86-64.pyz
-          ${{github.workspace}}/jans-cli/jans-cli-linux-centos-X86-64.pyz.sha256sum
+          ${{github.workspace}}/jans-cli/jans-cli-linux-X86-64.pyz
+          ${{github.workspace}}/jans-cli/jans-cli-linux-X86-64.pyz.sha256sum
           ${{github.workspace}}/jans-cli/jans-cli-linux-suse-X86-64.pyz
           ${{github.workspace}}/jans-cli/jans-cli-linux-suse-X86-64.pyz.sha256sum
           ${{github.workspace}}/jans-cli/jans-cli-linux-ubuntu-X86-64.pyz
@@ -195,14 +210,14 @@ jobs:
       id: cache-installers
       with:
         path: |
-          ${{github.workspace}}/jans-linux-setup/jans-linux-centos-X86-64-setup.pyz
-          ${{github.workspace}}/jans-linux-setup/jans-linux-centos-X86-64-setup.pyz.sha256sum
+          ${{github.workspace}}/jans-linux-setup/jans-linux-X86-64-setup.pyz
+          ${{github.workspace}}/jans-linux-setup/jans-linux-X86-64-setup.pyz.sha256sum
           ${{github.workspace}}/jans-linux-setup/jans-linux-suse-X86-64-setup.pyz
           ${{github.workspace}}/jans-linux-setup/jans-linux-suse-X86-64-setup.pyz.sha256sum
           ${{github.workspace}}/jans-linux-setup/jans-linux-ubuntu-X86-64-setup.pyz
           ${{github.workspace}}/jans-linux-setup/jans-linux-ubuntu-X86-64-setup.pyz.sha256sum
-          ${{github.workspace}}/jans-cli/jans-cli-linux-centos-X86-64.pyz
-          ${{github.workspace}}/jans-cli/jans-cli-linux-centos-X86-64.pyz.sha256sum
+          ${{github.workspace}}/jans-cli/jans-cli-linux-X86-64.pyz
+          ${{github.workspace}}/jans-cli/jans-cli-linux-X86-64.pyz.sha256sum
           ${{github.workspace}}/jans-cli/jans-cli-linux-suse-X86-64.pyz
           ${{github.workspace}}/jans-cli/jans-cli-linux-suse-X86-64.pyz.sha256sum
           ${{github.workspace}}/jans-cli/jans-cli-linux-ubuntu-X86-64.pyz