From 7d7c7f5f13b7ea354460801c3a5dc96d208f4e4f Mon Sep 17 00:00:00 2001
From: Fabio Massimo Ercoli <fabiomassimo.ercoli@gmail.com>
Date: Wed, 19 Jan 2022 17:09:31 +0100
Subject: [PATCH 1/4] HSEARCH-4415 Define maven gpg plugin for public artifacts

---
 build-config/pom.xml                          |  7 ++++
 distribution/pom.xml                          |  1 +
 documentation/pom.xml                         |  1 +
 integrationtest/elasticsearch/pom.xml         |  7 ++++
 integrationtest/jdk9-modules/pom.xml          |  7 ++++
 integrationtest/jms/pom.xml                   |  7 ++++
 integrationtest/jsr352/pom.xml                |  7 ++++
 integrationtest/narayana/pom.xml              |  7 ++++
 integrationtest/osgi/karaf-features/pom.xml   |  7 ++++
 integrationtest/osgi/karaf-it/pom.xml         |  7 ++++
 .../performance/engine-elasticsearch/pom.xml  |  7 ++++
 .../performance/engine-lucene/pom.xml         |  7 ++++
 integrationtest/performance/orm/pom.xml       |  7 ++++
 integrationtest/performance/sandbox/pom.xml   |  7 ++++
 integrationtest/spring/pom.xml                |  7 ++++
 integrationtest/wildfly/pom.xml               |  7 ++++
 jbossmodules/testing/pom.xml                  |  7 ++++
 pom.xml                                       | 33 +++++++++++++++++++
 reports/pom.xml                               |  1 +
 sharedtestresources/pom.xml                   |  7 ++++
 20 files changed, 148 insertions(+)

diff --git a/build-config/pom.xml b/build-config/pom.xml
index 96b4a3c3370..8abdbef8688 100644
--- a/build-config/pom.xml
+++ b/build-config/pom.xml
@@ -34,6 +34,13 @@
                     <skip>true</skip>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-gpg-plugin</artifactId>
+                <configuration>
+                    <skip>true</skip>
+                </configuration>
+            </plugin>
             <plugin>
                 <artifactId>maven-javadoc-plugin</artifactId>
                 <configuration>
diff --git a/distribution/pom.xml b/distribution/pom.xml
index df410129673..1ab9e1ae3db 100644
--- a/distribution/pom.xml
+++ b/distribution/pom.xml
@@ -24,6 +24,7 @@
     <properties>
         <!-- Skip artifact deployment -->
         <maven.deploy.skip>true</maven.deploy.skip>
+        <gpg.skip>true</gpg.skip>
     </properties>
 
     <dependencies>
diff --git a/documentation/pom.xml b/documentation/pom.xml
index 66a90782c4e..40481d0ae9d 100644
--- a/documentation/pom.xml
+++ b/documentation/pom.xml
@@ -36,6 +36,7 @@
 
         <!-- Skip artifact deployment -->
         <maven.deploy.skip>true</maven.deploy.skip>
+        <gpg.skip>true</gpg.skip>
         <!-- Skip javadoc generation -->
         <maven.javadoc.skip>true</maven.javadoc.skip>
     </properties>
diff --git a/integrationtest/elasticsearch/pom.xml b/integrationtest/elasticsearch/pom.xml
index a251da196ca..322ec9d126c 100755
--- a/integrationtest/elasticsearch/pom.xml
+++ b/integrationtest/elasticsearch/pom.xml
@@ -210,6 +210,13 @@
                     <skip>true</skip>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-gpg-plugin</artifactId>
+                <configuration>
+                    <skip>true</skip>
+                </configuration>
+            </plugin>
             <plugin>
                 <artifactId>maven-javadoc-plugin</artifactId>
                 <configuration>
diff --git a/integrationtest/jdk9-modules/pom.xml b/integrationtest/jdk9-modules/pom.xml
index bae47550c06..20ff0cc9333 100644
--- a/integrationtest/jdk9-modules/pom.xml
+++ b/integrationtest/jdk9-modules/pom.xml
@@ -100,6 +100,13 @@
                     <skip>true</skip>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-gpg-plugin</artifactId>
+                <configuration>
+                    <skip>true</skip>
+                </configuration>
+            </plugin>
 
             <plugin>
                 <artifactId>maven-javadoc-plugin</artifactId>
diff --git a/integrationtest/jms/pom.xml b/integrationtest/jms/pom.xml
index f7fb5b17ea6..d90c8bfa0dd 100644
--- a/integrationtest/jms/pom.xml
+++ b/integrationtest/jms/pom.xml
@@ -109,6 +109,13 @@
                     <skip>true</skip>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-gpg-plugin</artifactId>
+                <configuration>
+                    <skip>true</skip>
+                </configuration>
+            </plugin>
             <plugin>
                 <artifactId>maven-javadoc-plugin</artifactId>
                 <configuration>
diff --git a/integrationtest/jsr352/pom.xml b/integrationtest/jsr352/pom.xml
index 4c72860910e..a76033443d2 100755
--- a/integrationtest/jsr352/pom.xml
+++ b/integrationtest/jsr352/pom.xml
@@ -153,6 +153,13 @@
                     <skip>true</skip>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-gpg-plugin</artifactId>
+                <configuration>
+                    <skip>true</skip>
+                </configuration>
+            </plugin>
             <plugin>
                 <artifactId>maven-javadoc-plugin</artifactId>
                 <configuration>
diff --git a/integrationtest/narayana/pom.xml b/integrationtest/narayana/pom.xml
index 5c08db6b5d6..e4d8117a6c9 100755
--- a/integrationtest/narayana/pom.xml
+++ b/integrationtest/narayana/pom.xml
@@ -71,6 +71,13 @@
                     <skip>true</skip>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-gpg-plugin</artifactId>
+                <configuration>
+                    <skip>true</skip>
+                </configuration>
+            </plugin>
             <plugin>
                 <artifactId>maven-javadoc-plugin</artifactId>
                 <configuration>
diff --git a/integrationtest/osgi/karaf-features/pom.xml b/integrationtest/osgi/karaf-features/pom.xml
index af0fa460752..36f99ddd145 100644
--- a/integrationtest/osgi/karaf-features/pom.xml
+++ b/integrationtest/osgi/karaf-features/pom.xml
@@ -82,6 +82,13 @@
                     <skip>true</skip>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-gpg-plugin</artifactId>
+                <configuration>
+                    <skip>true</skip>
+                </configuration>
+            </plugin>
 
             <plugin>
                 <artifactId>maven-javadoc-plugin</artifactId>
diff --git a/integrationtest/osgi/karaf-it/pom.xml b/integrationtest/osgi/karaf-it/pom.xml
index 58a9e6d016d..ea1f3c08a26 100644
--- a/integrationtest/osgi/karaf-it/pom.xml
+++ b/integrationtest/osgi/karaf-it/pom.xml
@@ -211,6 +211,13 @@
                     <skip>true</skip>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-gpg-plugin</artifactId>
+                <configuration>
+                    <skip>true</skip>
+                </configuration>
+            </plugin>
 
             <plugin>
                 <artifactId>maven-javadoc-plugin</artifactId>
diff --git a/integrationtest/performance/engine-elasticsearch/pom.xml b/integrationtest/performance/engine-elasticsearch/pom.xml
index 030def9e0c4..f7451d09d0a 100644
--- a/integrationtest/performance/engine-elasticsearch/pom.xml
+++ b/integrationtest/performance/engine-elasticsearch/pom.xml
@@ -90,6 +90,13 @@
                     <skip>true</skip>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-gpg-plugin</artifactId>
+                <configuration>
+                    <skip>true</skip>
+                </configuration>
+            </plugin>
             <plugin>
                 <artifactId>maven-javadoc-plugin</artifactId>
                 <configuration>
diff --git a/integrationtest/performance/engine-lucene/pom.xml b/integrationtest/performance/engine-lucene/pom.xml
index bbfac7aa70d..bb93bcfafe8 100644
--- a/integrationtest/performance/engine-lucene/pom.xml
+++ b/integrationtest/performance/engine-lucene/pom.xml
@@ -82,6 +82,13 @@
                     <skip>true</skip>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-gpg-plugin</artifactId>
+                <configuration>
+                    <skip>true</skip>
+                </configuration>
+            </plugin>
             <plugin>
                 <artifactId>maven-javadoc-plugin</artifactId>
                 <configuration>
diff --git a/integrationtest/performance/orm/pom.xml b/integrationtest/performance/orm/pom.xml
index 8fb2a1da0b3..4713ed284df 100755
--- a/integrationtest/performance/orm/pom.xml
+++ b/integrationtest/performance/orm/pom.xml
@@ -224,6 +224,13 @@
                     <skip>true</skip>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-gpg-plugin</artifactId>
+                <configuration>
+                    <skip>true</skip>
+                </configuration>
+            </plugin>
             <plugin>
                 <artifactId>maven-javadoc-plugin</artifactId>
                 <configuration>
diff --git a/integrationtest/performance/sandbox/pom.xml b/integrationtest/performance/sandbox/pom.xml
index af36634563e..03f2a972abf 100755
--- a/integrationtest/performance/sandbox/pom.xml
+++ b/integrationtest/performance/sandbox/pom.xml
@@ -69,6 +69,13 @@
                     <skip>true</skip>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-gpg-plugin</artifactId>
+                <configuration>
+                    <skip>true</skip>
+                </configuration>
+            </plugin>
             <plugin>
                 <artifactId>maven-javadoc-plugin</artifactId>
                 <configuration>
diff --git a/integrationtest/spring/pom.xml b/integrationtest/spring/pom.xml
index 51506259c14..b77c8cb42b0 100755
--- a/integrationtest/spring/pom.xml
+++ b/integrationtest/spring/pom.xml
@@ -146,6 +146,13 @@
                     <skip>true</skip>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-gpg-plugin</artifactId>
+                <configuration>
+                    <skip>true</skip>
+                </configuration>
+            </plugin>
             <plugin>
                 <artifactId>maven-javadoc-plugin</artifactId>
                 <configuration>
diff --git a/integrationtest/wildfly/pom.xml b/integrationtest/wildfly/pom.xml
index 0d1d390caf2..e4cca8393df 100755
--- a/integrationtest/wildfly/pom.xml
+++ b/integrationtest/wildfly/pom.xml
@@ -255,6 +255,13 @@
                     <skip>true</skip>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-gpg-plugin</artifactId>
+                <configuration>
+                    <skip>true</skip>
+                </configuration>
+            </plugin>
             <plugin>
                 <artifactId>maven-javadoc-plugin</artifactId>
                 <configuration>
diff --git a/jbossmodules/testing/pom.xml b/jbossmodules/testing/pom.xml
index 84748af8987..d50444dc69e 100644
--- a/jbossmodules/testing/pom.xml
+++ b/jbossmodules/testing/pom.xml
@@ -66,6 +66,13 @@
                     <skip>true</skip>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-gpg-plugin</artifactId>
+                <configuration>
+                    <skip>true</skip>
+                </configuration>
+            </plugin>
             <plugin>
                 <artifactId>maven-resources-plugin</artifactId>
                 <executions>
diff --git a/pom.xml b/pom.xml
index 046a06838e8..46f433e8658 100644
--- a/pom.xml
+++ b/pom.xml
@@ -335,6 +335,7 @@
         <version.jacoco.plugin>0.8.3</version.jacoco.plugin>
         <version.coveralls.plugin>4.3.0</version.coveralls.plugin>
         <version.org.jboss.bridger.plugin>1.5.Final</version.org.jboss.bridger.plugin>
+        <version.gpg.plugin>3.0.1</version.gpg.plugin>
 
         <!--
             Please don't change the name of this property, it may be used and
@@ -1858,6 +1859,11 @@
                     <artifactId>bridger</artifactId>
                     <version>${version.org.jboss.bridger.plugin}</version>
                 </plugin>
+                <plugin>
+                    <groupId>org.apache.maven.plugins</groupId>
+                    <artifactId>maven-gpg-plugin</artifactId>
+                    <version>${version.gpg.plugin}</version>
+                </plugin>
             </plugins>
         </pluginManagement>
     </build>
@@ -1999,6 +2005,33 @@
             </build>
         </profile>
 
+        <profile>
+            <id>release</id>
+            <activation>
+                <property>
+                    <name>performRelease</name>
+                    <value>true</value>
+                </property>
+            </activation>
+            <build>
+                <plugins>
+                    <plugin>
+                        <groupId>org.apache.maven.plugins</groupId>
+                        <artifactId>maven-gpg-plugin</artifactId>
+                        <executions>
+                            <execution>
+                                <id>sign-artifacts</id>
+                                <phase>verify</phase>
+                                <goals>
+                                    <goal>sign</goal>
+                                </goals>
+                            </execution>
+                        </executions>
+                    </plugin>
+                </plugins>
+            </build>
+        </profile>
+
         <profile>
             <id>jdk8</id>
             <activation>
diff --git a/reports/pom.xml b/reports/pom.xml
index 83a5830ce5d..fb21b146b46 100644
--- a/reports/pom.xml
+++ b/reports/pom.xml
@@ -23,6 +23,7 @@
 
     <properties>
         <maven.deploy.skip>true</maven.deploy.skip>
+        <gpg.skip>true</gpg.skip>
         <maven.javadoc.skip>true</maven.javadoc.skip>
         <!--
         Disable the dependency convergence rule, because the dependencies of various integration tests do not converge
diff --git a/sharedtestresources/pom.xml b/sharedtestresources/pom.xml
index 7b0ea9197e4..80877251a6c 100644
--- a/sharedtestresources/pom.xml
+++ b/sharedtestresources/pom.xml
@@ -26,6 +26,13 @@
                     <skip>true</skip>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-gpg-plugin</artifactId>
+                <configuration>
+                    <skip>true</skip>
+                </configuration>
+            </plugin>
             <plugin>
                 <artifactId>maven-javadoc-plugin</artifactId>
                 <configuration>

From 389a8456e3ffdb2eb7dfed7bb3b5869a33a99bb2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Yoann=20Rodi=C3=A8re?= <yoann@hibernate.org>
Date: Thu, 20 Jan 2022 13:37:23 +0100
Subject: [PATCH 2/4] HSEARCH-4415 Sign artifacts in Jenkinsfile releases

---
 Jenkinsfile | 18 +++++++++++++++++-
 pom.xml     |  4 ++++
 2 files changed, 21 insertions(+), 1 deletion(-)

diff --git a/Jenkinsfile b/Jenkinsfile
index 6664e1f9d36..cf91a898c86 100644
--- a/Jenkinsfile
+++ b/Jenkinsfile
@@ -522,9 +522,15 @@ stage('Deploy') {
 		runBuildOnNode {
 			helper.withMavenWorkspace(mavenSettingsConfig: params.RELEASE_DRY_RUN ? null : helper.configuration.file.deployment.maven.settingsId) {
 				configFileProvider([configFile(fileId: 'release.config.ssh', targetLocation: env.HOME + '/.ssh/config')]) {
-					sshagent(['ed25519.Hibernate-CI.github.com', 'hibernate.filemgmt.jboss.org', 'hibernate-ci.frs.sourceforge.net']) {
+				withCredentials([file(credentialsId: 'release.gpg.private-key', variable: 'RELEASE_GPG_PRIVATE_KEY_PATH'),
+						string(credentialsId: 'release.gpg.passphrase', variable: 'RELEASE_GPG_PASSPHRASE')]) {
+				sshagent(['ed25519.Hibernate-CI.github.com', 'hibernate.filemgmt.jboss.org', 'hibernate-ci.frs.sourceforge.net']) {
+					try {
 						sh 'cat $HOME/.ssh/config'
 						sh "git clone https://github.com/hibernate/hibernate-noorm-release-scripts.git"
+
+						env.RELEASE_GPG_HOMEDIR = env.WORKSPACE_TMP + '/.gpg'
+						sh "bash -xe hibernate-noorm-release-scripts/setup.sh"
 						sh "bash -xe hibernate-noorm-release-scripts/prepare-release.sh search ${releaseVersion.toString()}"
 
 						String deployCommand = "bash -xe hibernate-noorm-release-scripts/deploy.sh search"
@@ -550,6 +556,16 @@ stage('Deploy') {
 						sh "bash -xe hibernate-noorm-release-scripts/update-version.sh search ${afterReleaseDevelopmentVersion.toString()}"
 						sh "bash -xe hibernate-noorm-release-scripts/push-upstream.sh search ${releaseVersion.toString()} ${helper.scmSource.branch.name} ${!params.RELEASE_DRY_RUN}"
 					}
+					finally {
+						try {
+							sh "bash -xe hibernate-noorm-release-scripts/cleanup.sh"
+						}
+						catch (Throwable t) {
+							echo 'Error cleaning up after release: ' + t.toString()
+						}
+					}
+				}
+				}
 				}
 			}
 		}
diff --git a/pom.xml b/pom.xml
index 46f433e8658..c580c4058df 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1863,6 +1863,10 @@
                     <groupId>org.apache.maven.plugins</groupId>
                     <artifactId>maven-gpg-plugin</artifactId>
                     <version>${version.gpg.plugin}</version>
+                    <configuration>
+                        <homedir>${env.RELEASE_GPG_HOMEDIR}</homedir>
+                        <passphrase>${env.RELEASE_GPG_PASSPHRASE}</passphrase>
+                    </configuration>
                 </plugin>
             </plugins>
         </pluginManagement>

From 73a068e110513b20c4ff8fb69f3f32b44cd70530 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Yoann=20Rodi=C3=A8re?= <yoann@hibernate.org>
Date: Thu, 20 Jan 2022 18:32:55 +0100
Subject: [PATCH 3/4] HSEARCH-4415 Switch to simpler release.sh for releases

---
 Jenkinsfile | 42 +++---------------------------------------
 1 file changed, 3 insertions(+), 39 deletions(-)

diff --git a/Jenkinsfile b/Jenkinsfile
index cf91a898c86..44cc546c2f3 100644
--- a/Jenkinsfile
+++ b/Jenkinsfile
@@ -525,45 +525,9 @@ stage('Deploy') {
 				withCredentials([file(credentialsId: 'release.gpg.private-key', variable: 'RELEASE_GPG_PRIVATE_KEY_PATH'),
 						string(credentialsId: 'release.gpg.passphrase', variable: 'RELEASE_GPG_PASSPHRASE')]) {
 				sshagent(['ed25519.Hibernate-CI.github.com', 'hibernate.filemgmt.jboss.org', 'hibernate-ci.frs.sourceforge.net']) {
-					try {
-						sh 'cat $HOME/.ssh/config'
-						sh "git clone https://github.com/hibernate/hibernate-noorm-release-scripts.git"
-
-						env.RELEASE_GPG_HOMEDIR = env.WORKSPACE_TMP + '/.gpg'
-						sh "bash -xe hibernate-noorm-release-scripts/setup.sh"
-						sh "bash -xe hibernate-noorm-release-scripts/prepare-release.sh search ${releaseVersion.toString()}"
-
-						String deployCommand = "bash -xe hibernate-noorm-release-scripts/deploy.sh search"
-						if (!params.RELEASE_DRY_RUN) {
-							sh deployCommand
-						} else {
-							echo "WARNING: Not deploying. Would have executed:"
-							echo deployCommand
-						}
-
-						String uploadDistributionCommand = "bash -xe hibernate-noorm-release-scripts/upload-distribution.sh search ${releaseVersion.toString()}"
-						String uploadDocumentationCommand = "bash -xe hibernate-noorm-release-scripts/upload-documentation.sh search ${releaseVersion.toString()} ${releaseVersion.family}"
-						if (!params.RELEASE_DRY_RUN) {
-							sh uploadDistributionCommand
-							sh uploadDocumentationCommand
-						}
-						else {
-							echo "WARNING: Not uploading anything. Would have executed:"
-							echo uploadDistributionCommand
-							echo uploadDocumentationCommand
-						}
-
-						sh "bash -xe hibernate-noorm-release-scripts/update-version.sh search ${afterReleaseDevelopmentVersion.toString()}"
-						sh "bash -xe hibernate-noorm-release-scripts/push-upstream.sh search ${releaseVersion.toString()} ${helper.scmSource.branch.name} ${!params.RELEASE_DRY_RUN}"
-					}
-					finally {
-						try {
-							sh "bash -xe hibernate-noorm-release-scripts/cleanup.sh"
-						}
-						catch (Throwable t) {
-							echo 'Error cleaning up after release: ' + t.toString()
-						}
-					}
+					sh 'cat $HOME/.ssh/config'
+					sh "git clone https://github.com/hibernate/hibernate-noorm-release-scripts.git"
+					sh "bash -xe hibernate-noorm-release-scripts/release.sh search ${releaseVersion.toString()} ${afterReleaseDevelopmentVersion.toString()}"
 				}
 				}
 				}

From 066b8a42e42aa637754794e60c018c36b9be7854 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Yoann=20Rodi=C3=A8re?= <yoann@hibernate.org>
Date: Tue, 25 Jan 2022 13:16:03 +0100
Subject: [PATCH 4/4] HSEARCH-4415 Correctly set RELEASE_GPG_HOMEDIR during
 releases

---
 Jenkinsfile | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Jenkinsfile b/Jenkinsfile
index 44cc546c2f3..2dd368c50ea 100644
--- a/Jenkinsfile
+++ b/Jenkinsfile
@@ -527,6 +527,7 @@ stage('Deploy') {
 				sshagent(['ed25519.Hibernate-CI.github.com', 'hibernate.filemgmt.jboss.org', 'hibernate-ci.frs.sourceforge.net']) {
 					sh 'cat $HOME/.ssh/config'
 					sh "git clone https://github.com/hibernate/hibernate-noorm-release-scripts.git"
+					env.RELEASE_GPG_HOMEDIR = env.WORKSPACE_TMP + '/.gpg'
 					sh "bash -xe hibernate-noorm-release-scripts/release.sh search ${releaseVersion.toString()} ${afterReleaseDevelopmentVersion.toString()}"
 				}
 				}