Skip to content

Conversation

xmj
Copy link
Member

@xmj xmj commented Dec 1, 2018

To allow multiple publishers per build, separate the publishing
function into its own space, and add sftp/cp examples.

While there, make use of clean room builds in hbsd-update-build
and remove the assumption that all published builds must be signed
(here be dragons).

To allow multiple publishers per build, separate the publishing
function into its own space, and add sftp/cp examples.

While there, make use of clean room builds in hbsd-update-build
and remove the assumption that all published builds must be signed
(here be dragons).
@xmj xmj force-pushed the separate_publishing branch from 21d86e1 to 70326f9 Compare December 2, 2018 10:32
@lattera lattera self-requested a review December 14, 2018 20:37
@lattera lattera self-assigned this Dec 14, 2018
@lattera lattera added the enhancement New feature or request label Dec 14, 2018
@lattera
Copy link
Member

lattera commented Dec 14, 2018

Thank you for the contribution! I plan to review this PR either tonight or tomorrow.

rm -f ${tmpfile}
}

function do_sign() {
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

do_sign is probably not the best name for this function. update_dns_entry is likely better.


${TOPDIR}/updatedns.zsh ${apikey} hardenedbsd.org ${dnsentry} ${dnsstr}
sign=$(jq -r ".builds[${i}].sign" ${config})
if [ "${sign}" != "null" ]; then
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

.builds[N].sign ought to be a called something more appropriate, perhaps updatedns. It should also be a boolean type, and checked as an optional boolean in code.

local dnsentry apikey dnsstr
local config=$1 i=$2 dnsstr=$3
dnsentry=$(jq -r ".builds[${i}].sign.dns" ${config})
apikey=$(jq -r ".signing.apikey" ${config})
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Similar to above, the DNS integration isn't for signing.

@lattera
Copy link
Member

lattera commented Mar 15, 2019

Friendly ping. :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants