Skip to content
This repository has been archived by the owner on Dec 11, 2019. It is now read-only.

Add option to presign rpm before upload_to_rpm_repo script #10193

Merged
merged 1 commit into from
Jul 31, 2017
Merged

Add option to presign rpm before upload_to_rpm_repo script #10193

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 12 additions & 5 deletions tools/upload_to_rpm_repo
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,8 +1,9 @@
#!/bin/sh
#!/bin/bash
set -exu

BUCKET=${1:-brave-rpm-nightly}
GPG_KEY=${2:-4A1B4360}
GPG_KEY_ID=${2:-4A1B4360}
GPG_KEY_SHORT_ID=${GPG_KEY_ID:(-8)}
KEY_NAME=keys.asc
KEY_FILE=/tmp/${KEY_NAME}
TMP_REPO=/tmp/rpm_repo
Expand All @@ -14,7 +15,14 @@ echo "%_signature gpg

rm -rf $TMP_REPO
mkdir -pv $TMP_REPO/x86_64
env GPG_PASS=$PASSPHRASE ./tools/auto_rpm_sign
if !rpm --checksig dist/*.rpm | grep pgp; then
env GPG_PASS=$PASSPHRASE ./tools/auto_rpm_sign
rpm --checksig dist/*.rpm | grep pgp
fi
# Ensure the rpm has the correct signature before continuing
# NOTE: rpm displays the short key id, all lower case
rpm -v -K dist/*.rpm | grep "key ID ${GPG_KEY_SHORT_ID,,}: OK"

cp dist/*.rpm $TMP_REPO/x86_64/

for arch in $TMP_REPO/x86_64 ; do
Expand All @@ -24,8 +32,7 @@ for arch in $TMP_REPO/x86_64 ; do
createrepo -v --update --deltas $arch/
done

gpg --export --armor ${GPG_KEY} > ${KEY_FILE}
gpg --export --armor ${GPG_KEY_ID} > ${KEY_FILE}
aws s3 cp ${KEY_FILE} s3://${BUCKET}/keys.asc
aws s3api put-object-acl --acl public-read --bucket ${BUCKET} --key ${KEY_NAME}
aws s3 sync --acl public-read $TMP_REPO/ s3://$BUCKET/
rpm --checksig ./dist/*.rpm