trying to implement code signing support

This commit is contained in:
Jonas Heinrich 2020-11-30 15:46:15 +01:00
parent 587549223f
commit b37b96c6fc

View File

@ -24,12 +24,9 @@ packaging:
- wget https://github.com/ChristophWurst/krankerl/releases/download/v0.12.3/krankerl_0.12.3_amd64.deb - wget https://github.com/ChristophWurst/krankerl/releases/download/v0.12.3/krankerl_0.12.3_amd64.deb
- sudo dpkg -i libssl1.0.0_1.0.1t-1+deb8u12_amd64.deb krankerl_0.12.3_amd64.deb - sudo dpkg -i libssl1.0.0_1.0.1t-1+deb8u12_amd64.deb krankerl_0.12.3_amd64.deb
- krankerl package - krankerl package
- echo CI_PACKAGING_JOBID="${CI_JOB_ID}" > $CI_PROJECT_DIR/variables.env
artifacts: artifacts:
paths: paths:
- build/artifacts/radio.tar.gz - build/artifacts/radio.tar.gz
reports:
dotenv: variables.env
signing: signing:
stage: signing stage: signing
@ -48,15 +45,18 @@ signing:
- echo "-----BEGIN CERTIFICATE-----" > sign.crt - echo "-----BEGIN CERTIFICATE-----" > sign.crt
- echo $SIGN_CRT | tr " " "\n" >> sign.crt - echo $SIGN_CRT | tr " " "\n" >> sign.crt
- echo "-----END CERTIFICATE-----" >> sign.crt - echo "-----END CERTIFICATE-----" >> sign.crt
- php nextcloud/occ
- tar xvf build/artifacts/radio.tar.gz - tar xvf build/artifacts/radio.tar.gz
- php nextcloud/occ integrity:sign-app --path=$(pwd)/radio --privateKey=$(pwd)/sign.key --certificate=$(pwd)/sign.crt - php nextcloud/occ integrity:sign-app --path=$(pwd)/radio --privateKey=$(pwd)/sign.key --certificate=$(pwd)/sign.crt
- rm sign.key sign.crt
- ls $(pwd)/radio/appinfo - ls $(pwd)/radio/appinfo
- tar -czvf build/artifacts/radio.tar.gz radio
- rm -r sign.key sign.crt radio
- echo CI_PACKAGING_JOBID="${CI_JOB_ID}" > $CI_PROJECT_DIR/variables.env
artifacts: artifacts:
paths: paths:
- build/artifacts/radio.tar.gz - build/artifacts/radio.tar.gz
expire_in: never expire_in: never
reports:
dotenv: variables.env
publishing: publishing:
stage: publishing stage: publishing