ZacharyZhang-NY/omarchy-pkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add --skip-signing option

Browse Source
This commit is contained in:
Ryan Hughes
2025-08-28 23:04:48 +03:00
parent c57c9620de
commit c7b4bdd3a1
2 changed files with 71 additions and 53 deletions
Download Patch File Download Diff File Expand all files Collapse all files
build/import-gpg-keys.sh
+35 -31
View File
@@ -3,41 +3,46 @@
echo "==> Importing GPG keys..."
# Import signing key (required)
echo " -> Importing signing key..."
# Import with batch mode and no tty for automated signing
echo "$GPG_PRIVATE_KEY" | gpg --batch --import || {
echo " -> ERROR: Failed to import signing key"
exit 1
}
# Check if signing is enabled
if [[ "$SKIP_SIGNING" == true ]]; then
echo " -> Skipping signing key import (--skip-signing enabled)"
else
# Import signing key (required for signing)
echo " -> Importing signing key..."
# Import with batch mode and no tty for automated signing
echo "$GPG_PRIVATE_KEY" | gpg --batch --import || {
echo " -> ERROR: Failed to import signing key"
exit 1
}
# Configure GPG for automated signing with passphrase
echo "allow-loopback-pinentry" >>~/.gnupg/gpg-agent.conf
echo "pinentry-mode loopback" >>~/.gnupg/gpg.conf
gpg-connect-agent reloadagent /bye 2>/dev/null || true
# Configure GPG for automated signing with passphrase
echo "allow-loopback-pinentry" >>~/.gnupg/gpg-agent.conf
echo "pinentry-mode loopback" >>~/.gnupg/gpg.conf
gpg-connect-agent reloadagent /bye 2>/dev/null || true
# Extract key ID and configure
KEY_ID=$(gpg --list-secret-keys --keyid-format LONG | grep "sec" | head -1 | awk '{print $2}' | cut -d'/' -f2)
if [[ -n "$KEY_ID" ]]; then
# Trust the key using fingerprint
FINGERPRINT=$(gpg --list-secret-keys --with-colons | grep "^fpr" | head -1 | cut -d':' -f10)
echo "$FINGERPRINT:6:" | gpg --import-ownertrust
# Set as default key in makepkg.conf
echo "GPGKEY=\"$KEY_ID\"" >>~/.makepkg.conf
echo " -> Signing key configured: $KEY_ID"
# Extract key ID and configure
KEY_ID=$(gpg --list-secret-keys --keyid-format LONG | grep "sec" | head -1 | awk '{print $2}' | cut -d'/' -f2)
if [[ -n "$KEY_ID" ]]; then
# Trust the key using fingerprint
FINGERPRINT=$(gpg --list-secret-keys --with-colons | grep "^fpr" | head -1 | cut -d':' -f10)
echo "$FINGERPRINT:6:" | gpg --import-ownertrust
# Set as default key in makepkg.conf
echo "GPGKEY=\"$KEY_ID\"" >>~/.makepkg.conf
echo " -> Signing key configured: $KEY_ID"
# Test signing with the key and passphrase
echo " -> Testing GPG signing capability..."
echo "test" | gpg --batch --yes --pinentry-mode loopback --passphrase "$GPG_PASSPHRASE" --sign --local-user "$KEY_ID" >/dev/null 2>&1
if [[ $? -ne 0 ]]; then
echo " -> ERROR: Failed to sign with the provided passphrase"
echo " -> Please check your passphrase and try again"
# Test signing with the key and passphrase
echo " -> Testing GPG signing capability..."
echo "test" | gpg --batch --yes --pinentry-mode loopback --passphrase "$GPG_PASSPHRASE" --sign --local-user "$KEY_ID" >/dev/null 2>&1
if [[ $? -ne 0 ]]; then
echo " -> ERROR: Failed to sign with the provided passphrase"
echo " -> Please check your passphrase and try again"
exit 1
fi
echo " -> GPG signing test successful"
else
echo " -> ERROR: Could not extract key ID"
exit 1
fi
echo " -> GPG signing test successful"
else
echo " -> ERROR: Could not extract key ID"
exit 1
fi
# Read the gpg-keys.txt file for verification keys
@@ -68,4 +73,3 @@ else
fi
echo " -> GPG setup complete"