rpm-sign/README.md
2019-04-25 11:48:58 +02:00

58 lines
1.1 KiB
Markdown

# rpm-sign
[![Build Status](https://drone.libreschool.org/api/badges/libreschool-automation/rpm-sign/status.svg)](https://drone.libreschool.org/libreschool-automation/rpm-sign)
Fedora docker image with some packages preinstalled.
This is used to sign .rpm packages.
## Build
```
docker build . -t libreschool-automation/rpm-sign:latest
```
## How NOT to use
```yml
kind: pipeline
name: default
steps:
- name: pkg_sign
image: registry.libreschool.org/libreschool-automation/rpm-sign:latest
pull: always
settings:
gpg_key: []
passphrase: supersecretpassword
```
## How to use
Seriously, don't put the GPG key or the passphrase in .drone.yml.
```yml
kind: pipeline
name: default
steps:
- name: pkg_sign
image: registry.libreschool.org/libreschool-automation/rpm-sign:latest
pull: always
settings:
files: my_package.rpm
gpg_key:
from_secret: gpg_key
passphrase:
from_secret: gpg_passphrase
```
## Parameters
- `files` - .rpm packages to sign; defaults to `*.rpm`
- `gpg_key` - the gpg key (public and private)
- `passphrase` - passphrase to unlock the gpg key