rpm-sign/README.md
Paolo Asperti ca52c1594a
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/tag Build is passing
changed registry and updated drone pipeline format
2023-05-13 10:17:56 +02:00

1.1 KiB

rpm-sign

Build Status

Fedora docker image with some packages preinstalled. This is used to sign .rpm packages.

Build

docker build . -t libreschool-automation/rpm-sign:latest

How NOT to use

kind: pipeline
name: default

steps:
  - name: pkg_sign
    image: git.libreschool.org/libreschool-automation/rpm-sign:latest
    pull: always
    settings:
      gpg_key: []
      passphrase: supersecretpassword

How to use

Seriously, don't put the GPG key or the passphrase in .drone.yml.

kind: pipeline
name: default

steps:
  - name: pkg_sign
    image: git.libreschool.org/libreschool-automation/rpm-sign:latest
    pull: always
    settings:
      files: my_package.rpm
      gpg_key:
        from_secret: gpg_key
      passphrase: 
        from_secret: gpg_passphrase    

Parameters

  • files - .rpm packages to sign; defaults to *.rpm
  • gpg_key - the gpg key (public and private)
  • passphrase - passphrase to unlock the gpg key