deb-sign/README.md
Paolo Asperti afea52af09
All checks were successful
continuous-integration/drone/tag Build is passing
continuous-integration/drone/push Build is passing
drone upgrade
2019-04-25 12:08:30 +02:00

62 lines
1.3 KiB
Markdown

# deb-sign
[![Build Status](https://drone.libreschool.org/api/badges/libreschool-automation/deb-sign/status.svg)](https://drone.libreschool.org/libreschool-automation/deb-sign)
Ubuntu 18.04 docker image with some packages preinstalled.
This is used to sign .deb packages.
## Build
```
docker build . -t libreschool-automation/deb-sign:latest
```
## How NOT to use
```yml
kind: pipeline
name: default
steps:
- name: pkg_sign
image: registry.libreschool.org/libreschool-automation/rpm-sign:latest
pull: always
settings:
files: my_package.deb
sign_type: origin
gpg_key: []
passphrase: supersecretpassword
```
## How to use
Seriously, don't put the GPG key or the passphrase in .drone.yml.
```yml
kind: pipeline
name: default
steps:
- name: pkg_sign
image: registry.libreschool.org/libreschool-automation/deb-sign:latest
pull: always
settings:
files: my_package.deb
sign_type: origin
gpg_key:
from_secret: gpg_key
passphrase:
from_secret: gpg_passphrase
```
## Parameters
- `files` - .deb packages to sign; defaults to `*.deb`
- `sign_type` - can be 'origin', 'maint' or 'archive'; defaults to `origin`
- `gpg_key` - the gpg key (public and private)
- `passphrase` - passphrase to unlock the gpg key