Skip to content
Snippets Groups Projects
user avatar
Pavel Vondruska authored
e7ffbe6f
History

Automaticky build upraveneho kernelu s moznosti pouzit gitlab artifacts jako debian repository

pridani repozitare do sources.list

wget https://repo.metacentrum.cz/gitlab-kernel11/pgp-key.public -O /etc/apt/pgp-key.public
echo 'deb [signed-by=/etc/apt/pgp-key.public]  https://repo.metacentrum.cz/gitlab-kernel11 ./' >> /etc/apt/sources.list.d/gitlab-kernel.list

apache pro zkraceni URL a pridani query stringu

RewriteEngine on
RewriteCond %{REQUEST_URI} ^/gitlab-kernel11/
RewriteRule "^/gitlab-kernel11/(.*)" https://gitlab.cesnet.cz/702/provoz/kernel-debian/-/jobs/artifacts/master/raw/build/$1?job=build:bullseye

vygenerovani gpg pro podepsani repozitare

echo '8ru7a1n3_51ln3.hesl@' > pass
./create_gpg.sh

pridani promenne PASS do gitlabu

  • u projektu Settings -> CI/CD -> Variables -> Add variable -> Key: PASS, Value: obsah_pass, Mask variable

vygenerovani metadat repozitare (je v make.sh)

cd build
dpkg-scanpackages . /dev/null > Packages
gzip -9k Packages
./generate-release.sh > Release

export GNUPGHOME=$PWD
export GPG_TTY=$(tty)
mkdir -p private-keys-v1.d
gpg --list-keys
cat pgp-key.private | gpg --import --pinentry-mode=loopback --passphrase "$PASS"
gpg --list-keys

cat Release | gpg --default-key gitlab --digest-algo SHA256 --cert-digest-algo SHA256 --pinentry-mode=loopback --passphrase "$PASS" -abs > Release.gpg
cat Release | gpg --default-key gitlab --digest-algo SHA256 --cert-digest-algo SHA256 --pinentry-mode=loopback --passphrase "$PASS" -abs --clearsign > InRelease

rm -vrf private-keys-v1.d pubring.kbx trustdb.gpg pgp-key.private pgp-key.public pubring.kbx~ generate-release.sh