forked from vmware-tanzu/tanzu-cli
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Allow building multiple RPM packages (vmware-tanzu#837)
This allows to have different packages signed with different keys. To achieve this, the building of RPM packages is now done by hack/rpm/build_package.sh while building the final repository is now done by hack/rpm/build_package_repo.sh. This approach allows to call hack/rpm/build_package.sh more than once with different RPM_PACKAGE_NAME and then build the repo with all the new packages as a last step. Signed-off-by: Marc Khouzam <[email protected]>
- Loading branch information
1 parent
c699b39
commit 18b6706
Showing
5 changed files
with
137 additions
and
74 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,85 @@ | ||
| #!/usr/bin/env bash | ||
|
|
||
| # Copyright 2024 VMware, Inc. All Rights Reserved. | ||
| # SPDX-License-Identifier: Apache-2.0 | ||
|
|
||
| # This script expects the RPM packages to already be present in the _output/rpm/tanzu-cli directory | ||
| # It will create a repository in the same directory and sign it with the provided key | ||
| # If the RPM_SIGNER environment variable is not set, the repository will not be signed | ||
|
|
||
| set -e | ||
| set -x | ||
|
|
||
| if [ $(uname) != "Linux" ]; then | ||
| echo "This script must be run on a Linux system" | ||
| exit 1 | ||
| fi | ||
|
|
||
| # Use DNF and if it is not installed fallback to YUM | ||
| DNF=$(command -v dnf || command -v yum || true) | ||
| if [ -z "$DNF" ]; then | ||
| echo "This script requires the presence of either DNF or YUM package manager" | ||
| exit 1 | ||
| fi | ||
|
|
||
| BASE_DIR=$(cd $(dirname "${BASH_SOURCE[0]}"); pwd) | ||
| OUTPUT_DIR=${BASE_DIR}/_output/rpm/tanzu-cli | ||
| # Directory where the packages are stored | ||
| PKG_DIR=${OUTPUT_DIR} | ||
| ROOT_DIR=${BASE_DIR}/../.. | ||
|
|
||
| # Install build dependencies | ||
| if ! command -v createrepo &> /dev/null; then | ||
| $DNF install -y createrepo yum-utils | ||
| fi | ||
|
|
||
| cd ${ROOT_DIR} | ||
|
|
||
| ###################### | ||
| # Build the repository | ||
| ###################### | ||
|
|
||
| # Prepare the existing repository info so we can sync from it | ||
| RPM_METADATA_BASE_URI=${RPM_METADATA_BASE_URI:=https://storage.googleapis.com/tanzu-cli-installer-packages} | ||
| RPM_REPO_GPG_PUBLIC_KEY_URI=${RPM_REPO_GPG_PUBLIC_KEY_URI:=https://storage.googleapis.com/tanzu-cli-installer-packages/keys/TANZU-PACKAGING-GPG-RSA-KEY.gpg} | ||
| if [ "${RPM_METADATA_BASE_URI}" = "new" ]; then | ||
| echo | ||
| echo "Building a brand new repository" | ||
| echo | ||
| else | ||
| cat << EOF | tee /tmp/tanzu-cli.repo | ||
| [tanzu-cli] | ||
| name=Tanzu CLI | ||
| baseurl=${RPM_METADATA_BASE_URI}/rpm/tanzu-cli | ||
| enabled=1 | ||
| gpgcheck=1 | ||
| repo_gpgcheck=1 | ||
| gpgkey=${RPM_REPO_GPG_PUBLIC_KEY_URI} | ||
| EOF | ||
|
|
||
| # Sync the metadata so we can update it | ||
| # Use the --source flag to avoid downloading the actual RPMs | ||
| reposync --repoid=tanzu-cli --download-metadata -p ${OUTPUT_DIR} -c /tmp/tanzu-cli.repo --norepopath --source -y | ||
| # Remove the old signature, which won't be valid anymore | ||
| rm -f ${OUTPUT_DIR}/repodata/repomd.xml.asc | ||
|
|
||
| # Now list the existing RPMs so we can pretend to have them locally | ||
| for p in $(reposync --repoid=tanzu-cli -c /tmp/tanzu-cli.repo -u -y | grep ${RPM_METADATA_BASE_URI}); do | ||
| echo "Found package: $p" | ||
| touch ${PKG_DIR}/$(basename $p) | ||
| done | ||
| fi | ||
|
|
||
| # Create the repository metadata | ||
| createrepo --update --skip-stat ${OUTPUT_DIR} | ||
|
|
||
| # Now that the repo is created, remove the fake empty packages so they don't | ||
| # risk being copied over the real ones in the final repository. | ||
| find ${PKG_DIR} -type f -empty -delete | ||
|
|
||
| if [[ ! -z "${RPM_SIGNER}" ]]; then | ||
| # instead of ... gpg --detach-sign --armor repodata/repomd.xml | ||
| ${RPM_SIGNER} ${OUTPUT_DIR}/repodata/repomd.xml | ||
| else | ||
| echo skip rpmsigning repo | ||
| fi |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters