Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use pre-generated RSA keys for signing packages #3

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

PhoenixMage
Copy link

Keys are stored as Repository secrets within Drone.
An environment statement similar to the below would need to be added to the build step of the aports .drone.yml:

  environment:
    PKG_SIGN_KEY:
      from_secret: pkg_sign_key

The secret within the drone console would be named pkg_sign_key and would contain the multiline RSA key you want to use such as from ~/.abuild/.rsa

This would allow adding a step to upload the package post build such as to an AWS S3 container or via scp to a filestore so it can be used on your own systems that container the corressponding public key.

If the required configuraion doesnt exist it will revert to previous behaviour and auto gen keys on build.

@PhoenixMage PhoenixMage changed the title Allow package signing keys to be stored in Drone secret repo Use pre-generated RSA keys for signing packages Dec 15, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant