add public key file to repo
[osm/devops.git] / tools / gen-repo.sh
1 #!/bin/bash
2
3 function usage() {
4 echo -e "usage: $0 [OPTIONS] BUILD"
5 echo -e " OPTIONS"
6 echo -e " -p <passphrase file>: gpg passphrase file"
7 echo -e " -i <incoming repo> "
8 echo -e " -o <outgoing repo> "
9 echo -e " -k <gpg key> "
10 echo -e " -j <jfrog cli> "
11 echo -e " -d <base dir> "
12 echo -e " -b <build> "
13 echo -e " -r <release dir> "
14 echo -e " -h <rsync user@host> "
15 echo -e " -R <rsync options> "
16 echo -e " -P <public key file> "
17 exit 1
18 }
19
20 function FATAL() {
21 echo -e $1
22 exit 1
23 }
24
25 function dump_vars() {
26 echo "incoming repo: $IN_REPO"
27 echo "outgoing repo: $OUT_REPO"
28 echo "GPGKEY: $GPGKEY"
29 echo "JFROG_CLI: $JFROG_CLI"
30 echo "REPO_BASE: $REPO_BASE"
31 echo "RELEASE_DIR: $RELEASE_DIR"
32 echo "BUILD: $BUILD"
33 echo "RSYNC_USER_HOST $RSYNC_USER_HOST"
34 echo "RSYNC_OPTIONS $RSYNC_OPTIONS"
35 echo "PUBLIC_KEY_FILE $PUBLIC_KEY_FILE"
36 }
37
38 IN_REPO="unstable"
39 OUT_REPO="stable"
40 GPGKEY=71C0472C
41 JFROG_CLI=~/jfrog
42 REPO_BASE=repo
43 RELEASE_DIR=ReleaseTWO
44 RSYNC_USER_HOST=osmusers@osm-download.etsi.org
45 CURR_DIR=$(pwd)
46 PUBLIC_KEY_FILE=~/OSM\ ETSI\ Release\ Key.gpg
47
48 while getopts ":p:i:o:k:j::d:b:r:h:R:P:" o; do
49 case "${o}" in
50 p)
51 PASSPHRASE_FILE=${OPTARG}
52 ;;
53 i)
54 IN_REPO=${OPTARG}
55 ;;
56 o)
57 OUT_REPO=${OPTARG}
58 ;;
59 k)
60 GPGKEY=${OPTARG}
61 ;;
62 j)
63 JFROG_CLI=${OPTARG}
64 ;;
65 d)
66 BASE_DIR=${OPTARG}
67 ;;
68 b)
69 BUILD=${OPTARG}
70 ;;
71 r)
72 RELEASE_DIR=${OPTARG}
73 ;;
74 h)
75 RSYNC_USER_HOST=${OPTARG}
76 ;;
77 R)
78 RSYNC_OPTIONS=${OPTARG}
79 ;;
80 P)
81 PUBLIC_KEY_FILE=${OPTARG}
82 ;;
83 *)
84 usage
85 exit 1
86 ;;
87 esac
88 done
89
90 dump_vars
91
92 BASE_DIR=$REPO_BASE/osm/debian/$RELEASE_DIR
93
94 [ -z "$BUILD" ] && FATAL "missing option: -b <build>"
95
96 [ -x $JFROG_CLI ] || FATAL "jfrog cli not found. Please install https://www.jfrog.com/getcli/ and use option '-j <jfrog cli location>'"
97
98 $JFROG_CLI rt download --build "$BUILD" osm-release || FATAL "Failed to download"
99
100 BUILD_NUMBER=$(basename "$BUILD")
101
102 [ $PASSPHRASE_FILE ] && GPG_PASSPHRASE="--no-tty --no-use-agent --passphrase \"$(cat $PASSPHRASE_FILE)\""
103
104 mkdir -p $BASE_DIR/dists
105
106 cp -R $BUILD_NUMBER/dists/$IN_REPO $BASE_DIR/dists/$OUT_REPO
107 cp -R $BUILD_NUMBER/pool $BASE_DIR/
108
109 cd $BASE_DIR
110
111 for i in RO osmclient openvim SO UI; do
112
113 # gpg sign the packages
114 dpkg-sig -g "$GPG_PASSPHRASE" -k $GPGKEY --sign builder pool/$i/*.deb
115
116 # mkdir -p dists/stable/$i/binary-amd64/
117 apt-ftparchive packages pool/$i > dists/$OUT_REPO/$i/binary-amd64/Packages
118 rm -f dists/$OUT_REPO/$i/binary-amd64/Packages.gz
119 gzip -9fk dists/$OUT_REPO/$i/binary-amd64/Packages
120 done
121
122 # Generate the root Release
123 # pushd dists/
124 apt-ftparchive release dists/$OUT_REPO > dists/$OUT_REPO/Release
125 #gzip -9fk dists/$OUT_REPO/Release
126
127 rm -f dists/$OUT_REPO/InRelease
128 eval gpg $GPG_PASSPHRASE --no-tty --default-key $GPGKEY --clearsign -o dists/$OUT_REPO/InRelease dists/$OUT_REPO/Release
129
130 rm -f dists/$OUT_REPO/Release.gpg
131 eval gpg $GPG_PASSPHRASE --no-tty --default-key $GPGKEY -abs -o dists/$OUT_REPO/Release.gpg dists/$OUT_REPO/Release
132
133 echo "performing rsync of repo $RELEASE_DIR/dist/$OUT_REPO to osm-download.etsi.org:/repos/"
134 cd $CURR_DIR/$REPO_BASE
135
136 # copy over the public key file
137 [ "$PUBLIC_KEY_FILE" ] && cp "$PUBLIC_KEY_FILE" osm/debian/$RELEASE_DIR
138
139 rsync -avR $RSYNC_OPTIONS osm/debian/$RELEASE_DIR rsync://$RSYNC_USER_HOST/repos