From 587549223f0c79043e9464b77bdf6f8c673f17f8 Mon Sep 17 00:00:00 2001
From: Jonas Heinrich <onny@project-insanity.org>
Date: Mon, 30 Nov 2020 15:39:20 +0100
Subject: [PATCH] trying to implement code signing support

---
 .gitlab-ci.yml | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 269c69a..42b9299 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -30,7 +30,6 @@ packaging:
       - build/artifacts/radio.tar.gz
     reports:
       dotenv: variables.env
-    expire_in: never
 
 signing:
   stage: signing
@@ -40,7 +39,7 @@ signing:
     - wget -q -O- https://packages.sury.org/php/apt.gpg | apt-key add -
     - echo "deb https://packages.sury.org/php/ stretch main" | tee /etc/apt/sources.list.d/php.list
     - apt-get update
-    - apt-get install php7.2
+    - DEBIAN_FRONTEND="noninteractive" apt install -y php7.2
     - wget https://download.nextcloud.com/server/releases/nextcloud-20.0.2.tar.bz2
     - tar xvf nextcloud-20.0.2.tar.bz2
     - echo "-----BEGIN PRIVATE KEY-----" > sign.key
@@ -50,9 +49,14 @@ signing:
     - echo $SIGN_CRT | tr " " "\n" >> sign.crt
     - echo "-----END CERTIFICATE-----" >> sign.crt
     - php nextcloud/occ
-    - ls build/artifacts/
-    #- /usr/src/nextcloud/occ integrity:sign-app --path=$(pwd)/passwords --privateKey=$(pwd)/sign.key --certificate=$(pwd)/sign.crt
-    #- rm sign.key sign.crt
+    - tar xvf build/artifacts/radio.tar.gz
+    - php nextcloud/occ integrity:sign-app --path=$(pwd)/radio --privateKey=$(pwd)/sign.key --certificate=$(pwd)/sign.crt
+    - rm sign.key sign.crt
+    - ls $(pwd)/radio/appinfo
+  artifacts:
+    paths:
+      - build/artifacts/radio.tar.gz
+    expire_in: never
 
 publishing:
   stage: publishing