Create makefile and pipeline to generate signed debian packages. (#2068) (#2071)

* Integrate GitLab Pipeline to Build Signed Packages

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix Ci Pipeline Location

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Implement gitlabci and Makefile to build linux packages

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Improve makefile and pipeline to support customizable package action

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix variable definition

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix variable definition

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix makefile formatting

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix SSH key problem

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix extended echo

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix makefile for ssh keys issue

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Parameterize sign artifacts

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Change artifact directory

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix package make command

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Add Sign step to pipeline

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix pipeline code for version

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix makefile for version

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix pipeline code

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix Makefile for fast package-linux action

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix Makefile for version

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Create Sign Action

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Move dependency installations to container

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Add jq dependency check

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Implement sign debian artifacts step

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix Makefile spacing

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix Makefile spacing

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* FIx artifacts for debian only

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix artifacts directory

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Implement signing via Makefile way

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Modify Makefile for aptly packaging

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix pipeline for aptly

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix foreach loop in Makefile

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix repo gpg key

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix Repo Public Key issue

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Get PGP key with wget

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Change gpg implementation

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Configure aptly

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix missing release variable

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix Frozen Makefile

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Publish packages to apt repository

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Configure variables for pipeline

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Configure Package Linux Job

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix Pipeline Code

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Create rules for pipeline

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* COnfigure nightly branch

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* FIx broken branch name

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Improve makefile to use build type variable

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix nightly branch

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix makefile

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix Makefile

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Install JQ

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Remove need of version dedection

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Fix sign operation

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Create files to prepare signed artifacts

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Create gitlab pipeline to use for desktop builds

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Remove aptly conf

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>

* Sort makefile commands

Signed-off-by: Mustafa Kara <mkara@pinchflat.dev>
(cherry picked from commit 78b4bbf357)

Co-authored-by: Mustafa Kara <mkara@pinchflat.dev>
This commit is contained in:
Mattermost Build 2022-04-25 15:43:40 +02:00 committed by GitHub
parent 690aa01564
commit b881eb61c6
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 64 additions and 0 deletions

8
.gitlab-ci.yml Normal file
View file

@ -0,0 +1,8 @@
---
include:
- project: mattermost/ci/desktop
ref: main
file: private.yml

56
Makefile Normal file
View file

@ -0,0 +1,56 @@
SIGNER?="origin"
GPG=$(shell command which gpg || echo "N/A")
DPKG_SIG=$(shell command which dpkg-sig || echo "N/A")
define sign_debian_package
dpkg-sig -k ${GPG_KEY_ID} --sign ${SIGNER} $1
dpkg-sig --verify $1
endef
.PHONY: check-sign-linux-deb
check-sign-linux-deb: ##Check running environment to sign debian packages
ifeq ("$(GPG)","N/A")
@echo "Path does not contain gpg executable. Consider install!"
@exit 128
else
@echo "gpg Found in path!"
endif
ifeq ("$(DPKG_SIG)","N/A")
@echo "Path does not contain dpkg_sig executable. Consider install!"
@exit 128
else
@echo "dpkg_sig Found in path!"
endif
ifndef GPG_KEY_ID
@echo "Please define GPG_KEY_ID environment variable!"
@exit 128
else
@echo "GPG_KEY_ID is defined"
endif
.PHONY: npm-ci
npm-ci: ## Install all npm dependencies
PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1 npm ci
.PHONY: package
package: package-linux-deb ## Generates packages for all environments
.PHONY: package-linux-deb
package-linux-deb: npm-ci ## Generates linux packages under build/linux folder
npm run package:linux-deb
mkdir -p artifacts
find ./release -name '*.deb' -exec cp "{}" artifacts/ \;
.PHONY: sign
sign: sign-linux-deb ## Sign packages in artifacts directory
.PHONY: sign-linux-deb
sign-linux-deb: check-sign-linux-deb ## Sign debian packages
$(foreach file, $(wildcard artifacts/*.deb), $(call sign_debian_package,${file});)
## Help documentation à la https://marmelab.com/blog/2016/02/29/auto-documented-makefile.html
help:
@grep -E '^[0-9a-zA-Z_-]+:.*?## .*$$' ./Makefile | sort | awk 'BEGIN {FS = ":.*?## "}; {printf "\033[36m%-30s\033[0m %s\n", $$1, $$2}'