From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6717330766855929856 X-Received: by 2002:a50:d1c6:: with SMTP id i6mr74159587edg.110.1564037533132; Wed, 24 Jul 2019 23:52:13 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a17:907:420c:: with SMTP id oh20ls9342756ejb.12.gmail; Wed, 24 Jul 2019 23:52:12 -0700 (PDT) X-Google-Smtp-Source: APXvYqzDtQvD77aJUDL1dFwTIw59aymygW+Yo0K+J6tsVpfkxLF6NO6Aj1uJOz5K7AnRbX0EWwuj X-Received: by 2002:a17:906:c459:: with SMTP id ck25mr65405294ejb.32.1564037532533; Wed, 24 Jul 2019 23:52:12 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1564037532; cv=none; d=google.com; s=arc-20160816; b=YQ0EEdNluDOrgZh3nZ86cNlKmOCvnUKK0vxzPmKQ74O0dwcJacsgqonPTas8xReXBx YS9rN7gNPHThQMW3VTwAJi0cIeuq/lzFwAn0Xo9R+yhgGCcWsGGi3M0HPmxbcThRYfhc YJIu3KiAxMS+dd4mvOHBxuuHc40IFlqJSCjDaOMHiRxk6rtMEF4GLmU/2IbUdd8cXp8C Xqp63EOHp7UQ5yQiwRR7yqVhYZdhq1tOJNfpA9muJfI/tgKMlJ8jrW7TTSja1IxXlWeV Us0z3W3NkvrZZ0gzSnBeW2pvCUTwfCCmpc7TQVBFttRpGpZKL4AAMw1Iv4TcoDyfVor4 gcAA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:subject:cc:to:from:date; bh=Z7Zgtez8eA/8+oXTDsvRqoqRPErvlxgzoF4kscBm+BY=; b=L01+C79rDB97VcxA2uO6G7vJ5jGIC+ikGN0jBTZN+/EjhyO/FhB5UwEkV/O8D7y76Q fUYQvoUbk8TEu9WtGuKyOKBAqNiCM4kUKbrnGpviHrAjTGCpAnOpaOlD4CEQjFsVc/8X HLAyIwAF+S30T7CYzrdtyg7Vxrfu6aDjeMCNJ/UTSav1piIjxRfFo7Wr2Bd0kPXcGTTd iri7ZAZwl9GrJVxBAfPzTBqUOUBcrOLiunLauWvmnygYD0iv53n4IDB6ZNxc+iHnBA7s ZzpjmNiZXaWDAyAMs4jb9tB4OmUz6cj1bVyKF/WRv8BFNHatLALMqFR33F5Y9ffe8RDm dbPg== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of henning.schild@siemens.com designates 194.138.37.39 as permitted sender) smtp.mailfrom=henning.schild@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Return-Path: Received: from lizzard.sbs.de (lizzard.sbs.de. [194.138.37.39]) by gmr-mx.google.com with ESMTPS id a41si2581396edc.5.2019.07.24.23.52.12 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 24 Jul 2019 23:52:12 -0700 (PDT) Received-SPF: pass (google.com: domain of henning.schild@siemens.com designates 194.138.37.39 as permitted sender) client-ip=194.138.37.39; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of henning.schild@siemens.com designates 194.138.37.39 as permitted sender) smtp.mailfrom=henning.schild@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Received: from mail2.sbs.de (mail2.sbs.de [192.129.41.66]) by lizzard.sbs.de (8.15.2/8.15.2) with ESMTPS id x6P6qB84018389 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Thu, 25 Jul 2019 08:52:12 +0200 Received: from md1za8fc.ad001.siemens.net ([139.25.68.184]) by mail2.sbs.de (8.15.2/8.15.2) with ESMTP id x6P6qBYa007238; Thu, 25 Jul 2019 08:52:11 +0200 Date: Thu, 25 Jul 2019 08:52:10 +0200 From: Henning Schild To: "Maxim Yu. Osipov" Cc: Subject: Re: [PATCH 1/2] ci_build: Add signing cached repo test Message-ID: <20190725085210.441f52c4@md1za8fc.ad001.siemens.net> In-Reply-To: <20190724203303.11549-1-mosipov@ilbers.de> References: <20190724203303.11549-1-mosipov@ilbers.de> X-Mailer: Claws Mail 3.17.3 (GTK+ 2.24.32; x86_64-pc-linux-gnu) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-TUID: frY/EvLsIRU3 Hi, testing is always good but i guess we first need an implementation that deals with passphrase protected keys and gpg-agent. On Wed, 24 Jul 2019 22:33:02 +0200 "Maxim Yu. Osipov" wrote: > Signed-off-by: Maxim Yu. Osipov > --- > scripts/ci_build.sh | 11 +++++++++++ > 1 file changed, 11 insertions(+) > > diff --git a/scripts/ci_build.sh b/scripts/ci_build.sh > index 01f09b6..fcec14d 100755 > --- a/scripts/ci_build.sh > +++ b/scripts/ci_build.sh > @@ -50,6 +50,7 @@ REPRO_TARGETS_SET="\ > multiconfig:qemuamd64-stretch:isar-image-base \ > multiconfig:qemuarm-buster:isar-image-base" > > +GPG_PUB_KEY_FILE="$HOME/.gnupg/my_pub.key" This will not work. The test keys have to be part of the repo. Henning > show_help() { > echo "This script builds the default Isar images." > @@ -103,6 +104,9 @@ do > ;; > -r|--repro) > REPRO_BUILD="1" > + case "$2" in > + -s|--sign) SIGN_REPO='1'; shift ;; > + esac > ;; > *) > echo "error: invalid parameter '$key', please try '--help' > to get list of supported parameters" @@ -113,6 +117,7 @@ do > shift > done > > + > # Setup build folder for the current build > if [ ! -d "$BUILD_DIR" ]; then > mkdir -p "$BUILD_DIR" > @@ -124,6 +129,9 @@ if [ -n "$CROSS_BUILD" ]; then > fi > > if [ -n "$REPRO_BUILD" ]; then > + if [ -n "$SIGN_REPO" ]; then > + echo BASE_REPO_KEY=\"file://$GPG_PUB_KEY_FILE\" >> > conf/local.conf > + fi > # Enable use of cached base repository > bitbake $BB_ARGS -c cache_base_repo $REPRO_TARGETS_SET > while [ -e bitbake.sock ]; do sleep 1; done > @@ -134,6 +142,9 @@ if [ -n "$REPRO_BUILD" ]; then > # Cleanup and disable use of cached base repository > sudo rm -rf tmp > sed -i -e 's/ISAR_USE_CACHED_BASE_REPO ?= > "1"/#ISAR_USE_CACHED_BASE_REPO ?= "1"/g' conf/local.conf > + if [ -n "$SIGN_REPO" ]; then > + sed -i -e 's/BASE_REPO_KEY/#BASE_REPO_KEY/g' conf/local.conf > + fi > fi > > # Start cross build for the defined set of configurations