trying to implement code signing support

.gitlab-ci.yml

@@ -30,7 +30,6 @@ packaging:
       - build/artifacts/radio.tar.gz
     reports:
       dotenv: variables.env
-    expire_in: never
 
 signing:
   stage: signing
@@ -40,7 +39,7 @@ signing:
     - wget -q -O- https://packages.sury.org/php/apt.gpg | apt-key add -
     - echo "deb https://packages.sury.org/php/ stretch main" | tee /etc/apt/sources.list.d/php.list
     - apt-get update
-    - apt-get install php7.2
+    - DEBIAN_FRONTEND="noninteractive" apt install -y php7.2
     - wget https://download.nextcloud.com/server/releases/nextcloud-20.0.2.tar.bz2
     - tar xvf nextcloud-20.0.2.tar.bz2
     - echo "-----BEGIN PRIVATE KEY-----" > sign.key
@@ -50,9 +49,14 @@ signing:
     - echo $SIGN_CRT | tr " " "\n" >> sign.crt
     - echo "-----END CERTIFICATE-----" >> sign.crt
     - php nextcloud/occ
-    - ls build/artifacts/
-    #- /usr/src/nextcloud/occ integrity:sign-app --path=$(pwd)/passwords --privateKey=$(pwd)/sign.key --certificate=$(pwd)/sign.crt
-    #- rm sign.key sign.crt
+    - tar xvf build/artifacts/radio.tar.gz
+    - php nextcloud/occ integrity:sign-app --path=$(pwd)/radio --privateKey=$(pwd)/sign.key --certificate=$(pwd)/sign.crt
+    - rm sign.key sign.crt
+    - ls $(pwd)/radio/appinfo
+  artifacts:
+    paths:
+      - build/artifacts/radio.tar.gz
+    expire_in: never
 
 publishing:
   stage: publishing