Commit aefcb06f by Leonard Gram

build: verifies the rpm packages signatures.

Closes #12370
parent 332e59d3
......@@ -148,6 +148,11 @@ jobs:
name: sign packages
command: './scripts/build/sign_packages.sh'
- run:
name: verify signed packages
command: |
curl https://grafanarel.s3.amazonaws.com/RPM-GPG-KEY-grafana > ~/.rpmdb/pubkeys/grafana.key
./scripts/build/verify_signed_packages.sh dist/*.rpm
- run:
name: sha-sum packages
command: 'go run build.go sha-dist'
- run:
......
#!/bin/bash
_files=$*
ALL_SIGNED=0
for file in $_files; do
rpm -K "$file" | grep "pgp.*OK" -q
if [[ $? != 0 ]]; then
ALL_SIGNED=1
echo $file NOT SIGNED
else
echo $file OK
fi
done
exit $ALL_SIGNED
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment