Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
* goreleaser: added signatures to RPM binaries Currently goreleaser does not support it, so we're overriding signing script and signing all RPMs that it produces. Also changed goreleaser parameters to only publish binaries when running on linux/amd64. * build: added automatic publishing of RPMs to a YUM repository Also fixed RPM file names to match local conventions.
- Loading branch information
Showing
5 changed files
with
160 additions
and
15 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,91 @@ | ||
| #!/bin/bash | ||
| set -e | ||
| GS_PREFIX=gs://packages.kopia.io/rpm | ||
| PKGDIR=$1 | ||
|
|
||
| if [ -z "$PKGDIR" ]; then | ||
| echo usage $0: /path/to/dist | ||
| exit 1 | ||
| fi | ||
|
|
||
| if [ ! -d "$PKGDIR" ]; then | ||
| echo $PKGDIR must be a directory containing '*.rpm' files | ||
| exit 1 | ||
| fi | ||
|
|
||
| architectures="x86_64 aarch64 armhfp" | ||
| distributions="stable testing unstable" | ||
|
|
||
| WORK_DIR=/tmp/rpm-publish | ||
| #rm -rf "$WORK_DIR" | ||
| mkdir -p "$WORK_DIR" | ||
|
|
||
| echo Downloading packages... | ||
|
|
||
| for a in $architectures; do | ||
| for d in $distributions; do | ||
| mkdir -p $WORK_DIR/$d/$a | ||
| done | ||
| done | ||
|
|
||
| gsutil rsync $GS_PREFIX/ $WORK_DIR/ | ||
|
|
||
| rpm_files=$(find $1 -name '*.rpm') | ||
|
|
||
| # sort all files into appropriate binary directories | ||
| for f in $rpm_files; do | ||
| bn=$(basename $f) | ||
| if [[ "$bn" =~ ^([^0-9]+)(.*)\.([^\.]+).rpm$ ]]; then | ||
| ver=${BASH_REMATCH[2]} | ||
| arch=${BASH_REMATCH[3]} | ||
| dists="" | ||
|
|
||
| if [[ $ver =~ "next" ]]; then | ||
| # ignore -next versions which are from goreleaser snapshots | ||
| continue | ||
| fi | ||
|
|
||
| # x.y.z | ||
| if [[ $ver =~ [0-9]+\.[0-9]+\.[0-9]+$ ]]; then | ||
| dists="stable testing" | ||
| fi | ||
|
|
||
| # x.y.z-prerelease | ||
| if [[ $ver =~ [0-9]+\.[0-9]+\.[0-9]+\-.*$ ]]; then | ||
| dists="testing" | ||
| fi | ||
|
|
||
| # yyyymmdd.0.hhmmss starts with 20 | ||
| if [[ $ver =~ 20[0-9]+\.[0-9]+\.[0-9]+ ]]; then | ||
| dists="unstable" | ||
| fi | ||
|
|
||
| echo "f: $f arch: $arch dists: $dists" | ||
|
|
||
| bn=$(basename $f) | ||
| for d in $dists; do | ||
| packages_dir=$WORK_DIR/$d/$arch | ||
| cp -av $f $packages_dir | ||
| rpm --define "%_gpg_name Kopia Builder" --addsign "$packages_dir/$bn" | ||
| done | ||
| fi | ||
| done | ||
|
|
||
| # regenerate indexes | ||
| for a in $architectures; do | ||
| for d in $distributions; do | ||
| docker run -it -e verbose=true -v $WORK_DIR/$d/$a:/data sark/createrepo:latest | ||
| done | ||
| done | ||
|
|
||
| echo Synchronizing... | ||
| gsutil -m rsync -r $WORK_DIR/ $GS_PREFIX/ | ||
|
|
||
| for a in $architectures; do | ||
| for d in $distributions; do | ||
| gsutil -m setmeta -h "Cache-Control:no-cache, max-age=0" -r $GS_PREFIX/$d/$a/repodata/ | ||
| done | ||
| done | ||
|
|
||
|
|
||
| echo Done. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,16 @@ | ||
| #!/bin/bash | ||
| set -e | ||
| input=$1 | ||
| signature=$2 | ||
|
|
||
| # add signature to RPMs | ||
| if [ ${input: -4} == ".rpm" ]; then | ||
| rpm --define "%_gpg_name Kopia Builder" --addsign $input | ||
| fi | ||
|
|
||
| if [ $input == "dist/checksums.txt" ]; then | ||
| # before signing checksums.txt, regenerate it since we've just signed some RPMs. | ||
| filenames=$(cut -f 2- -d " " dist/checksums.txt) | ||
| (cd dist && sha256sum $filenames > checksums.txt) | ||
| gpg --output dist/checksums.txt.sig --detach-sig dist/checksums.txt | ||
| fi |