From 2d711650e210acee3323e747cbea628d41451464 Mon Sep 17 00:00:00 2001 From: Aqua-sama Date: Thu, 6 Dec 2018 12:22:43 +0100 Subject: PKGBUILD: add gpg key signing for plugins --- linux/makepkg/PKGBUILD | 9 +++++++++ tools/gpgkey.preset | 18 ++++++++++++++++++ 2 files changed, 27 insertions(+) create mode 100644 tools/gpgkey.preset diff --git a/linux/makepkg/PKGBUILD b/linux/makepkg/PKGBUILD index 9a45114..67b0245 100644 --- a/linux/makepkg/PKGBUILD +++ b/linux/makepkg/PKGBUILD @@ -74,5 +74,14 @@ package() { # Install cd $srcdir/build DESTDIR="$pkgdir" ninja install + + msg Creating signing key in $srcdir/build/gpg + mkdir $srcdir/build/gpg + gpg2 --homedir=$srcdir/build/gpg --batch --generate-key $srcdir/smolbote/tools/gpgkey.preset + + msg Signing plugins + for so in $pkgdir/usr/local/lib/smolbote/plugins/*.so; do + gpg2 --homedir=$srcdir/build/gpg --batch --yes --local-user=smolbote@localhost --detach-sign --output=$so.sig $so + done } diff --git a/tools/gpgkey.preset b/tools/gpgkey.preset new file mode 100644 index 0000000..c33c12c --- /dev/null +++ b/tools/gpgkey.preset @@ -0,0 +1,18 @@ +# https://www.gnupg.org/documentation/manuals/gnupg/Unattended-GPG-key-generation.html +# To generate key: gpg2 --homedir=gpg-fakehome --batch --generate-key --expert gpgkey.preset +# To list key: gpg2 --homedir=gpg-fakehome --list-keys +%echo Generating GPG key (ed25519-sign) + +Key-Type: EdDSA +Key-Curve: ed25519 +Key-Length: 256 +Key-Usage: sign + +Name-Real: smolbote build process +Name-Email: smolbote@localhost + +Passphrase: null + +%commit +%echo Generating key done + -- cgit v1.2.1