tech(build): sign and deploy packages to s3

circle.yml

@@ -37,8 +37,9 @@ deployment:
       - pip install awscli
       - ./scripts/build/build_container.sh
       - ./scripts/build/deploy.sh
+      - sudo apt-get update; sudo apt-get install rpm; sudo apt-get install expect
       - ./scripts/build/sign_packages.sh
-      - aws s3 sync ./dist s3://$NIGHTLY_BUCKET_NAME
+      - aws s3 sync ./dist s3://$BUCKET_NAME/master
       #- ./scripts/trigger_grafana_docker_build.sh ${TRIGGER_GRAFANA_DOCKER_CIRCLECI_TOKEN}
   gh_tag:
     tag: /^v[0-9]+(\.[0-9]+){2}(-.+|[^-.]*)$/
@@ -48,7 +49,7 @@ deployment:
       - pip install awscli
       - ./scripts/build/build_container.sh
       - ./scripts/build/deploy.sh
-      #- ./scripts/build/sign_packages.sh
-      #- aws s3 sync ./dist s3://$BUCKET_NAME
+      - ./scripts/build/sign_packages.sh
+      - aws s3 sync ./dist s3://$BUCKET_NAME/release
       #- ./scripts/trigger_grafana_docker_build.sh ${TRIGGER_GRAFANA_DOCKER_CIRCLECI_TOKEN}
 

scripts/build/rpmmacros

+%_signature gpg
+%_gpg_path /home/ubuntu/.gnupg
+%_gpg_name Grafana
+%_gpgbin /usr/bin/gpg

scripts/build/sign_packages.sh

@@ -4,6 +4,6 @@ git clone git@github.com:torkelo/private.git ~/private-repo
 
 gpg --allow-secret-key-import --import ~/private-repo/signing/private.key
 
-cp rpmmacros ~/.rpmmacros
+cp ./scripts/build/rpmmacros ~/.rpmmacros
 
 ./scripts/build/sign_expect $GPG_KEY_PASSWORD dist/*.rpm