2018-08-12 17:01:40 +00:00
|
|
|
# deb-sign
|
|
|
|
|
|
|
|
[![Build Status](https://drone.libreschool.org/api/badges/libreschool-automation/deb-sign/status.svg)](https://drone.libreschool.org/libreschool-automation/deb-sign)
|
|
|
|
|
2019-04-25 10:08:30 +00:00
|
|
|
Ubuntu 18.04 docker image with some packages preinstalled.
|
2018-08-12 17:01:40 +00:00
|
|
|
This is used to sign .deb packages.
|
|
|
|
|
|
|
|
|
|
|
|
## Build
|
|
|
|
|
|
|
|
```
|
|
|
|
docker build . -t libreschool-automation/deb-sign:latest
|
|
|
|
```
|
|
|
|
|
|
|
|
## How NOT to use
|
|
|
|
|
|
|
|
```yml
|
2019-04-25 10:08:30 +00:00
|
|
|
kind: pipeline
|
|
|
|
name: default
|
|
|
|
|
|
|
|
steps:
|
|
|
|
- name: pkg_sign
|
|
|
|
image: registry.libreschool.org/libreschool-automation/rpm-sign:latest
|
|
|
|
pull: always
|
|
|
|
settings:
|
|
|
|
files: my_package.deb
|
|
|
|
sign_type: origin
|
|
|
|
gpg_key: []
|
|
|
|
passphrase: supersecretpassword
|
2018-08-12 17:01:40 +00:00
|
|
|
```
|
|
|
|
|
|
|
|
## How to use
|
|
|
|
|
|
|
|
Seriously, don't put the GPG key or the passphrase in .drone.yml.
|
|
|
|
|
|
|
|
|
|
|
|
```yml
|
2019-04-25 10:08:30 +00:00
|
|
|
kind: pipeline
|
|
|
|
name: default
|
|
|
|
|
|
|
|
steps:
|
|
|
|
- name: pkg_sign
|
|
|
|
image: registry.libreschool.org/libreschool-automation/deb-sign:latest
|
|
|
|
pull: always
|
|
|
|
settings:
|
|
|
|
files: my_package.deb
|
|
|
|
sign_type: origin
|
|
|
|
gpg_key:
|
|
|
|
from_secret: gpg_key
|
|
|
|
passphrase:
|
|
|
|
from_secret: gpg_passphrase
|
2018-08-12 17:01:40 +00:00
|
|
|
```
|
|
|
|
|
|
|
|
## Parameters
|
|
|
|
|
|
|
|
|
|
|
|
- `files` - .deb packages to sign; defaults to `*.deb`
|
|
|
|
- `sign_type` - can be 'origin', 'maint' or 'archive'; defaults to `origin`
|
|
|
|
- `gpg_key` - the gpg key (public and private)
|
|
|
|
- `passphrase` - passphrase to unlock the gpg key
|
|
|
|
|