github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-06-30 16:42:14 +00:00
Code Issues Projects Releases Wiki Activity

chore(ci): small refactor.

Browse Source 
Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

Co-authored-by: Vicente J. Jiménez Miras <vjjmiras@gmail.com>
This commit is contained in:
Federico Di Pierro 2022-06-16 11:41:04 +02:00 committed by poiana
parent a3c8fa85d4
commit 99784874eb
1 changed files with 6 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
.circleci/config.yml
View File

@ -221,10 +221,6 @@ jobs:
echo "%_signature gpg" > ~/.rpmmacros echo "%_signature gpg" > ~/.rpmmacros
echo "%_gpg_name Falcosecurity Package Signing" >> ~/.rpmmacros echo "%_gpg_name Falcosecurity Package Signing" >> ~/.rpmmacros
echo "%__gpg_sign_cmd %{__gpg} --force-v3-sigs --batch --no-armor --passphrase-fd 3 --no-secmem-warning -u \"%{_gpg_name}\" -sb --digest-algo sha256 %{__plaintext_filename}'" >> ~/.rpmmacros echo "%__gpg_sign_cmd %{__gpg} --force-v3-sigs --batch --no-armor --passphrase-fd 3 --no-secmem-warning -u \"%{_gpg_name}\" -sb --digest-algo sha256 %{__plaintext_filename}'" >> ~/.rpmmacros
- run:
name: Sign rpm x86_64
command: |
cd /build/release/
echo '#!/usr/bin/expect -f' > sign echo '#!/usr/bin/expect -f' > sign
echo 'spawn rpmsign --addsign {*}$argv' >> sign echo 'spawn rpmsign --addsign {*}$argv' >> sign
echo 'expect -exact "Enter pass phrase: "' >> sign echo 'expect -exact "Enter pass phrase: "' >> sign
@ -232,20 +228,17 @@ jobs:
echo 'expect eof' >> sign echo 'expect eof' >> sign
chmod +x sign chmod +x sign
echo $GPG_KEY | base64 -d | gpg --import echo $GPG_KEY | base64 -d | gpg --import
./sign *.rpm - run:
name: Sign rpm x86_64
command: |
cd /build/release/
~/sign *.rpm
test "$(rpm -qpi *.rpm | awk '/Signature/' | grep -i none | wc -l)" -eq 0 test "$(rpm -qpi *.rpm | awk '/Signature/' | grep -i none | wc -l)" -eq 0
- run: - run:
name: Sign rpm arm64 name: Sign rpm arm64
command: | command: |
cd /build-arm64/release/ cd /build-arm64/release/
echo '#!/usr/bin/expect -f' > sign ~/sign *.rpm
echo 'spawn rpmsign --addsign {*}$argv' >> sign
echo 'expect -exact "Enter pass phrase: "' >> sign
echo 'send -- "\n"' >> sign
echo 'expect eof' >> sign
chmod +x sign
echo $GPG_KEY | base64 -d | gpg --import
./sign *.rpm
test "$(rpm -qpi *.rpm | awk '/Signature/' | grep -i none | wc -l)" -eq 0 test "$(rpm -qpi *.rpm | awk '/Signature/' | grep -i none | wc -l)" -eq 0
- persist_to_workspace: - persist_to_workspace:
root: / root: /