-
Notifications
You must be signed in to change notification settings - Fork 3
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Extend publishing functionality #1
base: master
Are you sure you want to change the base?
Conversation
To allow multiple publishers per build, separate the publishing function into its own space, and add sftp/cp examples. While there, make use of clean room builds in hbsd-update-build and remove the assumption that all published builds must be signed (here be dragons).
21d86e1
to
70326f9
Compare
Thank you for the contribution! I plan to review this PR either tonight or tomorrow. |
done | ||
|
||
rm -f ${tmpfile} | ||
} | ||
|
||
function do_sign() { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
do_sign
is probably not the best name for this function. update_dns_entry
is likely better.
|
||
${TOPDIR}/updatedns.zsh ${apikey} hardenedbsd.org ${dnsentry} ${dnsstr} | ||
sign=$(jq -r ".builds[${i}].sign" ${config}) | ||
if [ "${sign}" != "null" ]; then |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
.builds[N].sign
ought to be a called something more appropriate, perhaps updatedns
. It should also be a boolean type, and checked as an optional boolean in code.
local dnsentry apikey dnsstr | ||
local config=$1 i=$2 dnsstr=$3 | ||
dnsentry=$(jq -r ".builds[${i}].sign.dns" ${config}) | ||
apikey=$(jq -r ".signing.apikey" ${config}) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Similar to above, the DNS integration isn't for signing.
Friendly ping. :) |
To allow multiple publishers per build, separate the publishing
function into its own space, and add sftp/cp examples.
While there, make use of clean room builds in hbsd-update-build
and remove the assumption that all published builds must be signed
(here be dragons).