foster/bitcoin-bitcoin-core
0
0
Fork 0
mirror of https://github.com/bitcoin/bitcoin.git synced 2025-02-09 10:43:19 -05:00
Code Issues Activity

guix-attest: Allow skipping GPG signing with NO_SIGN

Browse source
This commit is contained in:
Carl Dong 2021-04-12 12:29:34 -04:00
parent 0e1c2e448c
commit c83c4fa5b7
1 changed files with 19 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

23
contrib/guix/guix-attest
View file

@ -18,7 +18,10 @@ source "$(dirname "${BASH_SOURCE[0]}")/libexec/prelude.bash"
# Required non-builtin commands should be invokable # Required non-builtin commands should be invokable
################ ################
check_tools cat env basename mkdir xargs find gpg check_tools cat env basename mkdir xargs find
if [ -z "$NO_SIGN" ]; then
check_tools gpg
fi
################ ################
# Required env vars should be non-empty # Required env vars should be non-empty
@ -30,6 +33,7 @@ Synopsis:
env GUIX_SIGS_REPO=<path/to/guix.sigs> \\ env GUIX_SIGS_REPO=<path/to/guix.sigs> \\
SIGNER=GPG_KEY_NAME[=SIGNER_NAME] \\ SIGNER=GPG_KEY_NAME[=SIGNER_NAME] \\
[ NO_SIGN=1 ]
./contrib/guix/guix-attest ./contrib/guix/guix-attest
Example w/o overriding signing name: Example w/o overriding signing name:
@ -44,6 +48,13 @@ Example overriding signing name:
SIGNER=0x96AB007F1A7ED999=dongcarl \\ SIGNER=0x96AB007F1A7ED999=dongcarl \\
./contrib/guix/guix-attest ./contrib/guix/guix-attest
Example w/o signing, just creating SHA256SUMS:
env GUIX_SIGS_REPO=/home/achow101/guix.sigs \\
SIGNER=achow101 \\
NO_SIGN=1 \\
./contrib/guix/guix-attest
EOF EOF
} }
@ -79,7 +90,7 @@ if [ -z "${signer_name}" ]; then
signer_name="$gpg_key_name" signer_name="$gpg_key_name"
fi fi
if ! gpg --dry-run --list-secret-keys "${gpg_key_name}" >/dev/null 2>&1; then if [ -z "$NO_SIGN" ] && ! gpg --dry-run --list-secret-keys "${gpg_key_name}" >/dev/null 2>&1; then
echo "ERR: GPG can't seem to find any key named '${gpg_key_name}'" echo "ERR: GPG can't seem to find any key named '${gpg_key_name}'"
exit 1 exit 1
fi fi
@ -153,8 +164,12 @@ for outdir in "${OUTDIRS[@]}"; do
exit 1 exit 1
fi fi
) )
echo "${outname}: Signing SHA256SUMS to produce SHA256SUMS.asc" if [ -z "$NO_SIGN" ]; then
gpg --detach-sign --local-user "$gpg_key_name" --armor --output "$outsigdir"/SHA256SUMS.asc "$outsigdir"/SHA256SUMS echo "${outname}: Signing SHA256SUMS to produce SHA256SUMS.asc"
gpg --detach-sign --local-user "$gpg_key_name" --armor --output "$outsigdir"/SHA256SUMS.asc "$outsigdir"/SHA256SUMS
else
echo "${outname}: Not signing SHA256SUMS as \$NO_SIGN is not empty"
fi
echo "" echo ""
fi fi
done done