Go to file
Paolo Asperti 6955273956
continuous-integration/drone/tag Build is passing Details
updated drone pipeline
2023-05-13 08:36:26 +02:00
.drone.yml updated drone pipeline 2023-05-13 08:36:26 +02:00
Dockerfile drone upgrade 2019-04-25 12:08:30 +02:00
LICENSE initial import 2018-08-12 19:01:40 +02:00
README.md changed registry 2023-05-13 08:33:17 +02:00
run.sh initial import 2018-08-12 19:01:40 +02:00

README.md

deb-sign

Build Status

Ubuntu 18.04 docker image with some packages preinstalled. This is used to sign .deb packages.

Build

docker build . -t libreschool-automation/deb-sign:latest

How NOT to use

kind: pipeline
name: default

steps:
  - name: pkg_sign
    image: git.libreschool.org/libreschool-automation/rpm-sign:latest
    pull: always
    settings:
      files: my_package.deb
      sign_type: origin
      gpg_key: []
      passphrase: supersecretpassword    

How to use

Seriously, don't put the GPG key or the passphrase in .drone.yml.

kind: pipeline
name: default

steps:
  - name: pkg_sign
    image: git.libreschool.org/libreschool-automation/deb-sign:latest
    pull: always
    settings:
      files: my_package.deb
      sign_type: origin
      gpg_key:
        from_secret: gpg_key
      passphrase: 
        from_secret: gpg_passphrase    

Parameters

  • files - .deb packages to sign; defaults to *.deb
  • sign_type - can be 'origin', 'maint' or 'archive'; defaults to origin
  • gpg_key - the gpg key (public and private)
  • passphrase - passphrase to unlock the gpg key