51 lines
1.0 KiB
Markdown
51 lines
1.0 KiB
Markdown
|
# deb-sign
|
||
|
|
||
|
[![Build Status](https://drone.libreschool.org/api/badges/libreschool-automation/deb-sign/status.svg)](https://drone.libreschool.org/libreschool-automation/deb-sign)
|
||
|
|
||
|
Ubuntu docker image with some packages preinstalled.
|
||
|
This is used to sign .deb packages.
|
||
|
|
||
|
|
||
|
## Build
|
||
|
|
||
|
```
|
||
|
docker build . -t libreschool-automation/deb-sign:latest
|
||
|
```
|
||
|
|
||
|
## How NOT to use
|
||
|
|
||
|
```yml
|
||
|
pipeline:
|
||
|
pkg_sign:
|
||
|
image: libreschool-automation/deb-sign:latest
|
||
|
files: my_package.deb
|
||
|
sign_type: origin
|
||
|
gpg_key: []
|
||
|
passphrase: supersecretpassword
|
||
|
|
||
|
```
|
||
|
|
||
|
## How to use
|
||
|
|
||
|
Seriously, don't put the GPG key or the passphrase in .drone.yml.
|
||
|
|
||
|
|
||
|
```yml
|
||
|
pipeline:
|
||
|
pkg_sign:
|
||
|
image: libreschool-automation/deb-sign:latest
|
||
|
files: my_package.deb
|
||
|
sign_type: origin
|
||
|
secrets: [gpg_key, passphrase]
|
||
|
|
||
|
```
|
||
|
|
||
|
## Parameters
|
||
|
|
||
|
|
||
|
- `files` - .deb packages to sign; defaults to `*.deb`
|
||
|
- `sign_type` - can be 'origin', 'maint' or 'archive'; defaults to `origin`
|
||
|
- `gpg_key` - the gpg key (public and private)
|
||
|
- `passphrase` - passphrase to unlock the gpg key
|
||
|
|