Create makefile and pipeline to generate signed debian packages. (#2068)
* Integrate GitLab Pipeline to Build Signed Packages Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix Ci Pipeline Location Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Implement gitlabci and Makefile to build linux packages Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Improve makefile and pipeline to support customizable package action Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix variable definition Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix variable definition Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix makefile formatting Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix SSH key problem Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix extended echo Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix makefile for ssh keys issue Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Parameterize sign artifacts Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Change artifact directory Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix package make command Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Add Sign step to pipeline Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix pipeline code for version Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix makefile for version Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix pipeline code Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix Makefile for fast package-linux action Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix Makefile for version Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Create Sign Action Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Move dependency installations to container Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Add jq dependency check Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Implement sign debian artifacts step Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix Makefile spacing Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix Makefile spacing Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * FIx artifacts for debian only Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix artifacts directory Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Implement signing via Makefile way Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Modify Makefile for aptly packaging Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix pipeline for aptly Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix foreach loop in Makefile Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix repo gpg key Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix Repo Public Key issue Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Get PGP key with wget Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Change gpg implementation Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Configure aptly Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix missing release variable Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix Frozen Makefile Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Publish packages to apt repository Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Configure variables for pipeline Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Configure Package Linux Job Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix Pipeline Code Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Create rules for pipeline Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * COnfigure nightly branch Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * FIx broken branch name Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Improve makefile to use build type variable Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix nightly branch Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix makefile Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix Makefile Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Install JQ Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Remove need of version dedection Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Fix sign operation Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Create files to prepare signed artifacts Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Create gitlab pipeline to use for desktop builds Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Remove aptly conf Signed-off-by: Mustafa Kara <mkara@pinchflat.dev> * Sort makefile commands Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>
This commit is contained in:
parent
073fef83ae
commit
78b4bbf357
8
.gitlab-ci.yml
Normal file
8
.gitlab-ci.yml
Normal file
|
@ -0,0 +1,8 @@
|
|||
---
|
||||
|
||||
include:
|
||||
- project: mattermost/ci/desktop
|
||||
ref: main
|
||||
file: private.yml
|
||||
|
||||
|
56
Makefile
Normal file
56
Makefile
Normal file
|
@ -0,0 +1,56 @@
|
|||
SIGNER?="origin"
|
||||
|
||||
GPG=$(shell command which gpg || echo "N/A")
|
||||
DPKG_SIG=$(shell command which dpkg-sig || echo "N/A")
|
||||
|
||||
define sign_debian_package
|
||||
dpkg-sig -k ${GPG_KEY_ID} --sign ${SIGNER} $1
|
||||
dpkg-sig --verify $1
|
||||
endef
|
||||
|
||||
.PHONY: check-sign-linux-deb
|
||||
check-sign-linux-deb: ##Check running environment to sign debian packages
|
||||
ifeq ("$(GPG)","N/A")
|
||||
@echo "Path does not contain gpg executable. Consider install!"
|
||||
@exit 128
|
||||
else
|
||||
@echo "gpg Found in path!"
|
||||
endif
|
||||
ifeq ("$(DPKG_SIG)","N/A")
|
||||
@echo "Path does not contain dpkg_sig executable. Consider install!"
|
||||
@exit 128
|
||||
else
|
||||
@echo "dpkg_sig Found in path!"
|
||||
endif
|
||||
ifndef GPG_KEY_ID
|
||||
@echo "Please define GPG_KEY_ID environment variable!"
|
||||
@exit 128
|
||||
else
|
||||
@echo "GPG_KEY_ID is defined"
|
||||
endif
|
||||
|
||||
.PHONY: npm-ci
|
||||
npm-ci: ## Install all npm dependencies
|
||||
PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1 npm ci
|
||||
|
||||
.PHONY: package
|
||||
package: package-linux-deb ## Generates packages for all environments
|
||||
|
||||
.PHONY: package-linux-deb
|
||||
package-linux-deb: npm-ci ## Generates linux packages under build/linux folder
|
||||
npm run package:linux-deb
|
||||
mkdir -p artifacts
|
||||
find ./release -name '*.deb' -exec cp "{}" artifacts/ \;
|
||||
|
||||
|
||||
.PHONY: sign
|
||||
sign: sign-linux-deb ## Sign packages in artifacts directory
|
||||
|
||||
.PHONY: sign-linux-deb
|
||||
sign-linux-deb: check-sign-linux-deb ## Sign debian packages
|
||||
$(foreach file, $(wildcard artifacts/*.deb), $(call sign_debian_package,${file});)
|
||||
|
||||
## Help documentation à la https://marmelab.com/blog/2016/02/29/auto-documented-makefile.html
|
||||
help:
|
||||
@grep -E '^[0-9a-zA-Z_-]+:.*?## .*$$' ./Makefile | sort | awk 'BEGIN {FS = ":.*?## "}; {printf "\033[36m%-30s\033[0m %s\n", $$1, $$2}'
|
||||
|
Loading…
Reference in a new issue