Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Extend publishing functionality #1

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

xmj
Copy link
Member

@xmj xmj commented Dec 1, 2018

To allow multiple publishers per build, separate the publishing
function into its own space, and add sftp/cp examples.

While there, make use of clean room builds in hbsd-update-build
and remove the assumption that all published builds must be signed
(here be dragons).

To allow multiple publishers per build, separate the publishing
function into its own space, and add sftp/cp examples.

While there, make use of clean room builds in hbsd-update-build
and remove the assumption that all published builds must be signed
(here be dragons).
@xmj xmj force-pushed the separate_publishing branch from 21d86e1 to 70326f9 Compare December 2, 2018 10:32
@lattera lattera self-requested a review December 14, 2018 20:37
@lattera lattera self-assigned this Dec 14, 2018
@lattera lattera added the enhancement New feature or request label Dec 14, 2018
@lattera
Copy link
Member

lattera commented Dec 14, 2018

Thank you for the contribution! I plan to review this PR either tonight or tomorrow.

done

rm -f ${tmpfile}
}

function do_sign() {
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

do_sign is probably not the best name for this function. update_dns_entry is likely better.


${TOPDIR}/updatedns.zsh ${apikey} hardenedbsd.org ${dnsentry} ${dnsstr}
sign=$(jq -r ".builds[${i}].sign" ${config})
if [ "${sign}" != "null" ]; then
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

.builds[N].sign ought to be a called something more appropriate, perhaps updatedns. It should also be a boolean type, and checked as an optional boolean in code.

local dnsentry apikey dnsstr
local config=$1 i=$2 dnsstr=$3
dnsentry=$(jq -r ".builds[${i}].sign.dns" ${config})
apikey=$(jq -r ".signing.apikey" ${config})
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Similar to above, the DNS integration isn't for signing.

@lattera
Copy link
Member

lattera commented Mar 15, 2019

Friendly ping. :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants