forked from bitcoinafterlife/bal-server
feat(release): add ASCII-armored .asc signature alongside .sig
This commit is contained in:
@@ -56,6 +56,7 @@ ASSET_PATH="$destbin/$assetname.tar.gz"
|
||||
SIGNER_KEY="svatantrya@bitcoin-after.life"
|
||||
ASSET_SHA256="$ASSET_PATH.sha256"
|
||||
ASSET_SIG="$ASSET_PATH.sig"
|
||||
ASSET_ASC="$ASSET_PATH.asc"
|
||||
|
||||
giteahost="https://bitcoin-after.life/gitea"
|
||||
url_releases="$giteahost/api/v1/repos/$OWNER/$REPO/releases"
|
||||
@@ -100,7 +101,12 @@ prepare_release(){
|
||||
sha256sum "$asset_tar_gz" > "$asset_tar_gz.sha256"
|
||||
|
||||
if ! gpg --batch --yes --detach-sign --local-user "$SIGNER_KEY" "$asset_tar_gz"; then
|
||||
echo_e "error signing release tarball"
|
||||
echo_e "error signing release tarball (binary)"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if ! gpg --batch --yes --detach-sign --armor --output "$asset_tar_gz.asc" --local-user "$SIGNER_KEY" "$asset_tar_gz"; then
|
||||
echo_e "error signing release tarball (ascii-armored)"
|
||||
exit 1
|
||||
fi
|
||||
)
|
||||
@@ -139,7 +145,7 @@ add_asset_release() {
|
||||
exit 1
|
||||
fi
|
||||
|
||||
local assets=("$ASSET_PATH" "$ASSET_SHA256" "$ASSET_SIG")
|
||||
local assets=("$ASSET_PATH" "$ASSET_SHA256" "$ASSET_SIG" "$ASSET_ASC")
|
||||
for asset in "${assets[@]}"; do
|
||||
if [ ! -f "$asset" ]; then
|
||||
echo_e "missing asset: $asset"
|
||||
@@ -166,9 +172,12 @@ Verification Instructions:
|
||||
SHA256 Checksum:
|
||||
sha256sum -c $assetname.tar.gz.sha256
|
||||
|
||||
GPG Signature:
|
||||
GPG Signature (binary):
|
||||
gpg --verify $assetname.tar.gz.sig $assetname.tar.gz
|
||||
|
||||
GPG Signature (ASCII-armored):
|
||||
gpg --verify $assetname.tar.gz.asc $assetname.tar.gz
|
||||
|
||||
Signed by Svātantrya (svatantrya@bitcoin-after.life)")
|
||||
|
||||
release_data=$(jq -n -c \
|
||||
|
||||
Reference in New Issue
Block a user