parent
388a21d35d
commit
3712df64d9
GPG Key ID:
818A8B35E9F1CE10
@ -1,43 +0,0 @@ |
||||
#!/bin/sh |
||||
|
||||
set -e |
||||
|
||||
if [ $# -eq 0 ]; then |
||||
echo "No arguments provided. Aborting..." |
||||
exit 1 |
||||
fi |
||||
|
||||
if [ "$1" = "-h" ] || [ "$1" = "--help" ]; then |
||||
echo "usage: ./movedebs.sh [-h] [MAIN_DIR INCOMING_DIR READY_SUFFIX] |
||||
|
||||
Deploys packages for you. |
||||
|
||||
Possible values for the arguments: |
||||
|
||||
MAIN_DIR path of the directory inside the repository where the packages will be storaged |
||||
INCOMING_DIR local path of the 'incoming' directory |
||||
READY_SUFFIX suffix used to flag a complete transfer of a file |
||||
|
||||
Dependencies: - |
||||
" |
||||
exit 0 |
||||
fi |
||||
|
||||
if [ $# -lt 3 ]; then |
||||
echo "Mandatory arguments: 'MAIN_DIR', 'INCOMING_DIR', 'INCOMING_DIR'. Aborting..." |
||||
exit 1 |
||||
fi |
||||
|
||||
MAIN_DIR="${1}" |
||||
INCOMING_DIR="${2}" |
||||
READY_SUFFIX="${3}" |
||||
|
||||
for ENTRY in "${INCOMING_DIR}"/*"${READY_SUFFIX}"; do |
||||
# If is not a file skip |
||||
if [ -f "${ENTRY}" ]; then |
||||
FILENAME_DEB=$(basename --suffix="${READY_SUFFIX}" "${ENTRY}") |
||||
BASEDIRPATH=$(dirname "${ENTRY}") |
||||
mv "${BASEDIRPATH}/${FILENAME_DEB}" "${MAIN_DIR}/${FILENAME_DEB}" |
||||
rm "${ENTRY}" |
||||
fi |
||||
done |
||||
@ -1,75 +0,0 @@ |
||||
#!/bin/sh |
||||
|
||||
set -e |
||||
|
||||
if [ $# -eq 0 ]; then |
||||
echo "No arguments provided. Aborting..." |
||||
exit 1 |
||||
fi |
||||
|
||||
if [ "$1" = "-h" ] || [ "$1" = "--help" ]; then |
||||
echo "usage: ./repo-main.sh [-h] [MAIN_DIR INCOMING_DIR READY_SUFFIX] |
||||
|
||||
Wrapper script for the repository. |
||||
|
||||
Possible values for the arguments: |
||||
|
||||
MAIN_DIR path of the directory inside the repository where the packages will be storaged |
||||
INCOMING_DIR local path of the 'incoming' directory |
||||
READY_SUFFIX suffix used to flag a complete transfer of a file |
||||
|
||||
Dependencies: - |
||||
" |
||||
exit 0 |
||||
fi |
||||
|
||||
if [ $# -lt 3 ]; then |
||||
echo "Mandatory arguments: 'MAIN_DIR', 'INCOMING_DIR', 'INCOMING_DIR'. Aborting..." |
||||
exit 1 |
||||
fi |
||||
|
||||
MAIN_DIR="${1}" |
||||
INCOMING_DIR="${2}" |
||||
READY_SUFFIX="${3}" |
||||
|
||||
echo "Checking if there are packages to add..." |
||||
for f in "${INCOMING_DIR}"/*"${READY_SUFFIX}"; do |
||||
## From: https://stackoverflow.com/a/6364244 |
||||
## Check if the glob gets expanded to existing files. |
||||
## If not, f here will be exactly the pattern above |
||||
## and the exists test will evaluate to false. |
||||
if [ -e "$f" ]; then |
||||
echo "Found packages to add." |
||||
else |
||||
echo "Not found packages to add. Exiting..." |
||||
exit 0 |
||||
fi |
||||
## This is all we needed to know, so we can break after the first iteration |
||||
break |
||||
done |
||||
|
||||
echo "Moving package(s) to the repo..." |
||||
mkdir -p "${MAIN_DIR}" |
||||
./movedebs.sh "${MAIN_DIR}" "${INCOMING_DIR}" "${READY_SUFFIX}" |
||||
|
||||
#echo "Installing repository build dependencies (apt)..." |
||||
#apt-get -qq -y --no-install-recommends install apt-utils > /dev/null |
||||
|
||||
echo "Updating the repo..." |
||||
REPO_PATH="repo" |
||||
TEMP_DIR="$(mktemp -d)" |
||||
./repo-update.sh "${REPO_PATH}" "${TEMP_DIR}" |
||||
|
||||
#apt-get -qq -y --no-install-recommends install gpg gpg-agent |
||||
|
||||
echo "Checking if is possible to sign the repo..." |
||||
mkdir -p keys |
||||
chmod 600 keys |
||||
export GNUPGHOME="${PWD}/keys" |
||||
|
||||
./repo-sign.sh "${TEMP_DIR}" "${REPO_PATH}"/key.pub.asc |
||||
|
||||
echo "Committing changes..." |
||||
mv "${TEMP_DIR}"/* "${REPO_PATH}"/ |
||||
echo "Done." |
||||
#echo "deb file:/repo /" > /etc/apt/sources.list.d/custom-repo.list |
||||
@ -1,83 +0,0 @@ |
||||
#!/bin/sh |
||||
|
||||
set -e |
||||
|
||||
if [ $# -eq 0 ]; then |
||||
echo "No arguments provided. Aborting..." |
||||
exit 1 |
||||
fi |
||||
|
||||
if [ "$1" = "-h" ] || [ "$1" = "--help" ]; then |
||||
echo "usage: ./repo-sign.sh [-h] [REPO_PATH PUB_KEY_FULLPATH GPG_SUBKEY_ID] |
||||
|
||||
Deploys packages for you. |
||||
|
||||
Possible values for the arguments: |
||||
|
||||
REPO_PATH path of the repositpry |
||||
GPG_SUBKEY_ID fingerprint of the (sub)key to use to sign |
||||
|
||||
Dependencies: - |
||||
" |
||||
exit 0 |
||||
fi |
||||
|
||||
if [ $# -lt 2 ]; then |
||||
echo "Mandatory arguments: 'REPO_PATH', 'PUB_KEY_FULLPATH'. Aborting..." |
||||
exit 1 |
||||
fi |
||||
|
||||
REPO_PATH="${1}" |
||||
PUB_KEY_FULLPATH="${1}" |
||||
[ -n "${3+x}" ] && GPG_SUBKEY_ID="${3}" |
||||
|
||||
if [ ! -f "${GNUPGHOME}/pubring.kbx" ]; then |
||||
echo "The file 'pubring.kbx' file has not been found. Generating automatically a new one with a new set of keys..." |
||||
KEY_NAME="Joe Tester" |
||||
KEY_PASSPHRASE="over-the-lazy-dog" |
||||
cat >foo_keys <<EOF |
||||
%echo Generating a basic OpenPGP key |
||||
Key-Type: RSA |
||||
Key-Usage: sign |
||||
Key-Length: 4096 |
||||
Subkey-Type: RSA |
||||
Subkey-Usage: sign |
||||
Subkey-Length: 4096 |
||||
Name-Real: ${KEY_NAME} |
||||
Name-Comment: with stupid passphrase |
||||
Name-Email: joe@foo.bar |
||||
Expire-Date: 0 |
||||
Passphrase: ${KEY_PASSPHRASE} |
||||
# Do a commit here, so that we can later print "done" :-) |
||||
%commit |
||||
%echo done |
||||
EOF |
||||
gpg --batch --generate-key foo_keys |
||||
echo "${KEY_PASSPHRASE}" > "${GNUPGHOME}/passphrase" |
||||
fi |
||||
|
||||
if [ -z "${GPG_SUBKEY_ID+x}" ]; then |
||||
echo "A GPG key id has not been defined. Automatically selecting a fingerprint..." |
||||
# List key and its subkey with their respective fingerprints | filter fingerprints of both keys | pick fingerprint of the second row |
||||
# (the subkey seems to be listed always after its respective subkey) |
||||
GPG_SUBKEY_ID="$(gpg --list-secret-key --with-subkey-fingerprint --with-colons | awk -F: '$1 == "fpr" {print $10;}' | sed -n '2 p')" |
||||
fi |
||||
|
||||
# - Generate the armored pub key (NEW_KEY) that has to be published; |
||||
# - If the key does not exists in PUB_KEY_FULLPATH, place NEW_KEY; |
||||
# - If PUB_KEY_FULLPATH exixts but is not identical to NEW_KEY, then backup |
||||
# the old key (PUB_KEY_FULLPATH) and replace it with the new one (NEW_KEY). |
||||
# - Else do nothing. |
||||
NEW_KEY="$(mktemp)" |
||||
gpg --armor --export "${GPG_SUBKEY_ID}" > "${NEW_KEY}" |
||||
if [ ! -f "${PUB_KEY_FULLPATH}" ];then |
||||
echo "Public key not published. Generating and publishing it..." |
||||
mv "${NEW_KEY}" "${PUB_KEY_FULLPATH}" |
||||
elif [ -f "${PUB_KEY_FULLPATH}" ] && ! cmp --silent "${PUB_KEY_FULLPATH}" "${NEW_KEY}"; then |
||||
mv "${PUB_KEY_FULLPATH}" "${PUB_KEY_FULLPATH}".bak |
||||
mv "${NEW_KEY}" "${PUB_KEY_FULLPATH}" |
||||
fi |
||||
|
||||
echo "Signing the repo..." |
||||
gpg --passphrase-file "${GNUPGHOME}/passphrase" --pinentry-mode loopback --default-key "${GPG_SUBKEY_ID}" -abs -o - "${REPO_PATH}/Release" > "${REPO_PATH}/Release.gpg" |
||||
gpg --passphrase-file "${GNUPGHOME}/passphrase" --pinentry-mode loopback --default-key "${GPG_SUBKEY_ID}" --clearsign -o - "${REPO_PATH}/Release" > "${REPO_PATH}/InRelease" |
||||
@ -1,38 +0,0 @@ |
||||
#!/bin/sh |
||||
|
||||
set -e |
||||
|
||||
if [ $# -eq 0 ]; then |
||||
echo "No arguments provided. Aborting..." |
||||
exit 1 |
||||
fi |
||||
|
||||
if [ "$1" = "-h" ] || [ "$1" = "--help" ]; then |
||||
echo "usage: ./repo-update.sh [-h] [REPO_PATH TEMP_DIR] |
||||
|
||||
Deploys packages for you. |
||||
|
||||
Possible values for the arguments: |
||||
|
||||
REPO_PATH path of the repositpry |
||||
TEMP_DIR path of the temporary folder |
||||
|
||||
Dependencies: - |
||||
" |
||||
exit 0 |
||||
fi |
||||
|
||||
if [ $# -lt 2 ]; then |
||||
echo "Mandatory arguments: 'REPO_PATH', 'TEMP_DIR'. Aborting..." |
||||
exit 1 |
||||
fi |
||||
|
||||
REPO_PATH="${1}" |
||||
TEMP_DIR="${2}" |
||||
|
||||
initial_position="$(pwd)" |
||||
cd "${REPO_PATH}" |
||||
apt-ftparchive packages . > "${TEMP_DIR}/Packages" |
||||
cd "${initial_position}" |
||||
gzip -k -f "${TEMP_DIR}/Packages" --to-stdout > "${TEMP_DIR}/Packages.gz" |
||||
apt-ftparchive release "${TEMP_DIR}" > "${TEMP_DIR}/Release" |
||||
Loading…
Reference in new issue