blob: 9e8fd661a172fc3d404e06d26d721dbb36f8de8a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
|
#!/bin/bash
# Copyright 2010-2015 Gentoo Authors; Distributed under the GPL v2
# might be earlier copyright, no history available
# Keep this variable in sync in both sign-autobuilds.sh & sync-autobuilds.sh
_ARCHES="alpha amd64 arm64 arm hppa ia64 loong m68k mips ppc riscv s390 sh sparc x86"
#alpha amd64 arm64 arm hppa ia64 loong m68k mips ppc riscv s390 sh sparc x86
ARCHES=${ARCHES:-${_ARCHES}}
RELEASES=/var/tmp/gmirror-releases/releases/
[[ $HOSTNAME == TODO ]] && RELEASES=/var/tmp/gmirror/releases/
DEBUG=''
VERBOSE=''
GPG='gpg --homedir /home/gmirror/.gnupg-releng/ --batch --no-tty'
# Do not change
DEBUGP=
VERBOSEP=false
[ -n "$DEBUG" ] && DEBUGP=echo
[ -n "$VERBOSE" ] && VERBOSEP=
[ -n "$DEBUG" ] && RSYNC_OPTS="${RSYNC_OPTS} -n"
[ -n "$VERBOSE" ] && RSYNC_OPTS="${RSYNC_OPTS} -v"
# needs more debugging
# set -e
signone() {
f="$1"
$DEBUGP ${GPG} --armor --detach-sign "${f}"
}
signone_clearsign() {
# only for text files!
f="$1"
$DEBUGP ${GPG} --armor --clearsign "${f}"
$DEBUGP mv "${f}".asc "${f}"
}
gpgconf --kill all
for a in $ARCHES ; do
pushd $RELEASES/$a >/dev/null || continue
[[ -d autobuilds ]] || exit
#echo "Release files:"
files="$(find autobuilds -name '*.tar.xz' -or -name '*.iso' -or -name '*.tar.bz2' -or -name '*.lif')"
sigs="$(find autobuilds -name '*.asc' )"
unsigned="$(comm -23 <(echo "$files" |sort) <(echo "$sigs" | sed -e 's,.asc$,,g' |sort))"
#$VERBOSEP echo "=== ARCH: $a"
for dgst in $unsigned ; do
if [ ! -f ${dgst}.asc ]; then
$VERBOSEP echo "Signing $dgst"
signone $dgst
fi
done
for dgst in $digests ; do
if [ -f ${dgst}.asc -a ${dgst} -nt ${dgst}.asc ]; then
$VERBOSEP echo "Resigning $dgst"
rm -f ${dgst}.asc
signone $dgst
fi
done
#echo "Text helper files:"
files="$(find autobuilds -name '*.sha256' -or -name '*.DIGESTS')"
unsigned=""
for dgst in $files ; do
grep -sq "BEGIN PGP SIGNED MESSAGE-----" $dgst || unsigned="${unsigned} ${dgst}"
done
for dgst in $unsigned ; do
$VERBOSEP echo "Signing (inline/cleartext) $dgst"
signone_clearsign $dgst
done
popd >/dev/null
done
|
GitWeb