deb-sign/README.md

51 lines
1.0 KiB
Markdown
Raw Normal View History

2018-08-12 17:01:40 +00:00
# deb-sign
[![Build Status](https://drone.libreschool.org/api/badges/libreschool-automation/deb-sign/status.svg)](https://drone.libreschool.org/libreschool-automation/deb-sign)
Ubuntu docker image with some packages preinstalled.
This is used to sign .deb packages.
## Build
```
docker build . -t libreschool-automation/deb-sign:latest
```
## How NOT to use
```yml
pipeline:
pkg_sign:
image: libreschool-automation/deb-sign:latest
files: my_package.deb
sign_type: origin
gpg_key: []
passphrase: supersecretpassword
```
## How to use
Seriously, don't put the GPG key or the passphrase in .drone.yml.
```yml
pipeline:
pkg_sign:
image: libreschool-automation/deb-sign:latest
files: my_package.deb
sign_type: origin
secrets: [gpg_key, passphrase]
```
## Parameters
- `files` - .deb packages to sign; defaults to `*.deb`
- `sign_type` - can be 'origin', 'maint' or 'archive'; defaults to `origin`
- `gpg_key` - the gpg key (public and private)
- `passphrase` - passphrase to unlock the gpg key