This is an automated email from the ASF dual-hosted git repository. bchapuis pushed a commit to branch 752-release-automation in repository https://gitbox.apache.org/repos/asf/incubator-baremaps.git
commit 5a63c8890c00eea4162876ca23e4c3092810e765 Author: Bertil Chapuis <[email protected]> AuthorDate: Thu Mar 14 11:22:08 2024 +0100 Fix maven gpg configuration --- .github/workflows/release.yml | 50 +++++++++++++------- pom.xml | 6 --- secret | 107 ++++++++++++++++++++++++++++++++++++++++++ 3 files changed, 139 insertions(+), 24 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 6f6aa7dd..86589d4c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -20,16 +20,11 @@ jobs: java-version: 17 distribution: temurin cache: maven - server-id: apache - server-username: ${{ secrets.SERVER_USERNAME }} - server-password: ${{ secrets.SERVER_PASSWORD }} - gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }} - gpg-passphrase: ${{ secrets.GPG_PASSPHRASE }} - name: Extract version run: echo ::set-output name=value::$(mvn -q -Dexec.executable=echo -Dexec.args='${project.version}' --non-recursive exec:exec) id: version - name: Build project - run: mvn install -P release -B + run: mvn install -B # Create a GitHub release draft - name: Create GitHub Release @@ -47,9 +42,9 @@ jobs: - name: Sign and hash source release shell: bash run: | - echo "${{ secrets.GPG_PRIVATE_KEY }}" | base64 --decode | gpg --import + echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --import --batch shasum -a 512 "./baremaps-cli/target/apache-baremaps-${{ steps.version.outputs.value }}-incubating-src.tar.gz" > "./baremaps-cli/target/apache-baremaps-${{ steps.version.outputs.value }}-incubating-src.tar.gz.sha512" - gpg --no-tty --quiet --pinentry-mode loopback --default-key "$GPG_KEY_ID" --batch --yes --passphrase "$GPG_PASSPHRASE" --output "./baremaps-cli/target/apache-baremaps-${{ steps.version.outputs.value }}-incubating-src.tar.gz.asc" --detach-sign --armor "./baremaps-cli/target/apache-baremaps-${{ steps.version.outputs.value }}-incubating-src.tar.gz" + gpg --no-tty --quiet --pinentry-mode loopback --default-key "${{ secrets.GPG_KEY_ID }}" --batch --yes --passphrase "${{ secrets.GPG_PASSPHRASE }}" --output "./baremaps-cli/target/apache-baremaps-${{ steps.version.outputs.value }}-incubating-src.tar.gz.asc" --detach-sign --armor "./baremaps-cli/target/apache-baremaps-${{ steps.version.outputs.value }}-incubating-src.tar.gz" - name: Upload source release id: upload-source-release uses: actions/upload-release-asset@v1 @@ -85,9 +80,9 @@ jobs: - name: Sign and hash source release shell: bash run: | - echo "${{ secrets.GPG_PRIVATE_KEY }}" | base64 --decode | gpg --import + echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --import --batch shasum -a 512 "./baremaps-cli/target/apache-baremaps-${{ steps.version.outputs.value }}-incubating-bin.tar.gz" > "./baremaps-cli/target/apache-baremaps-${{ steps.version.outputs.value }}-incubating-bin.tar.gz.sha512" - gpg --no-tty --quiet --pinentry-mode loopback --default-key "$GPG_KEY_ID" --batch --yes --passphrase "$GPG_PASSPHRASE" --output "./baremaps-cli/target/apache-baremaps-${{ steps.version.outputs.value }}-incubating-bin.tar.gz.asc" --detach-sign --armor "./baremaps-cli/target/apache-baremaps-${{ steps.version.outputs.value }}-incubating-bin.tar.gz" + gpg --no-tty --quiet --pinentry-mode loopback --default-key "${{ secrets.GPG_KEY_ID }}" --batch --yes --passphrase "${{ secrets.GPG_PASSPHRASE }}" --output "./baremaps-cli/target/apache-baremaps-${{ steps.version.outputs.value }}-incubating-bin.tar.gz.asc" --detach-sign --armor "./baremaps-cli/target/apache-baremaps-${{ steps.version.outputs.value }}-incubating-bin.tar.gz" - name: Upload binary release id: upload-binary-release uses: actions/upload-release-asset@v1 @@ -119,11 +114,30 @@ jobs: asset_name: apache-baremaps-${{ steps.version.outputs.value }}-incubating-bin.tar.gz.asc asset_content_type: text/plain - - -# - name: Publish artifacts -# run: mvn deploy -P release -B -# env: -# MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }} -# MAVEN_CENTRAL_TOKEN: ${{ secrets.MAVEN_CENTRAL_TOKEN }} -# MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }} + release-maven: + name: Release on Maven + runs-on: ubuntu-latest + steps: + # Checkout code, set up Java 17, build project, and extract version + - name: Checkout code + uses: actions/checkout@v3 + - name: Set up Java 17 + uses: actions/setup-java@v3 + with: + java-version: 17 + distribution: temurin + cache: maven + server-id: apache + server-username: SERVER_USERNAME + server-password: SERVER_PASSWORD + gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }} + gpg-passphrase: GPG_PASSPHRASE + - name: Extract version + run: echo ::set-output name=value::$(mvn -q -Dexec.executable=echo -Dexec.args='${project.version}' --non-recursive exec:exec) + id: version + - name: Build project + env: + SERVER_USERNAME: ${{ secrets.SERVER_USERNAME }} + SERVER_PASSWORD: ${{ secrets.SERVER_PASSWORD }} + GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }} + run: mvn deploy -P release -B diff --git a/pom.xml b/pom.xml index 6df7ab8f..d04d94c6 100644 --- a/pom.xml +++ b/pom.xml @@ -648,12 +648,6 @@ limitations under the License. <goal>sign</goal> </goals> <phase>verify</phase> - <configuration> - <gpgArguments> - <arg>--pinentry-mode</arg> - <arg>loopback</arg> - </gpgArguments> - </configuration> </execution> </executions> </plugin> diff --git a/secret b/secret new file mode 100644 index 00000000..fd5e34cf --- /dev/null +++ b/secret @@ -0,0 +1,107 @@ +-----BEGIN PGP PRIVATE KEY BLOCK----- + +lQdGBGXyyX0BEADIOnT0+ng+UmdHk56d7zKDG6kIt8bmdFq8kpd0qpULBAeI2aOU +0lZyUNpuHqEy8JQdk0iHQXdE9nWx7NzI2FAeY+CTTiRvBFsqUq2UDJW5UlmyYREs +vXYuxdqTO2j0iEikUM798e0rJ9izQTstgo5ZDeF4IFRcL3J2UFTt+6rZsGeUGwPT ++/8oeeCdlvDwXU8C2LshEjH8s9TAGArJGEBgtPAUBQf68V2T4h/GDXoQ89WPBaYn +wKgN4TFB8FVzDD936IsLSLhytv2vwzn+yI8B5qByicQLFLpeZeKZJF6M8pGQBPSj +9NOby+5CcFRWI6QLUm7yTkCKaXjf4AMmQDc22NNA43F/may1PLHFbZUiN3OQMmbN +uOrIiMCIP8Sy0JWEyIjkDiD9zwa+Kc+URzPq58erSucADAoBA8LITe9P7A2wwfb8 +ht9OXWWczWgxw18Ahn0TvLHnybj4cOHm21qg1E5/2qQDXmyILDBo94VswdtdtuMI +TL3KjofM0t8o6tg+LRE7E/ABMAwTc5KaaqFmrYcjITMoGwW0G5hxQuooxYhWYdTC +L4U9ZInbgNngSxyD1UUyz40n+3AEOSMFhUxUCYkMVzGoiQVJdPV6mZH3OBtkfYBb +3oKtGSTiFU7GN+ZO4aTj16thH+af3jv5KlK+67dxA/EWR0+h+zNuelWdMQARAQAB +/gcDAv8HUjGXfzzh+y3x60Y3Mjmjcc3oMVfyj7WQdb2VvkcJfNecfk1ltrvgASRc +NOCK6wyYxDJpZqwas8WVd0Q5bXKMmrkNCTrIQ2zF74d5BswHEOgj4FLNT4xqLovI +Neh5BrByi/1H4ki22aRzs8wuY7jG0IFF1aGmaAxKT18q477RUbmnDUP/6yh9gFny +PwBImdl2+mRSanYNkLDMOCmQXYiQ/QvTQteJZRLFMFqF6PDmKe1Yqw2nPwR+fBO4 +701iUZltvzI4NsADkmamj4uVK9BwB40M5jbusimDqtLTC2Y4w3hvEVFDD9Tem++b +L3JSfkyWi0biX2JmPKJFb9yPrchWqkozsbIkW7zlnMJizmp8dFaDr1NSBnj+AKDr +Eb/iibZcgQxBRXWR1/V4CDQmDSdjBeba7iPyjtPrzsWyuvG3po0zDoKyFxQgoxrL +0bT4wQEaJ2g3D2TPoIENcmnJSg+zJQ7L9fpnwcyQix7qIkYPvDQahFWeDA802Ar/ +vAzPa1IVIFhj/0AH7xs4xjMOz3+QLkzIv8oEKFj7+zUNxl2uixqS3N5I5zot1g8L +5ioWnl32sgr/df9YwvAZ4X2D8dLNzxKZxigr6D6arU+nNwvukjXCh80xHxzSq2Gh +ZsdvMr27HDloOqQVPXmwYn/7EDTgk/nhSFxIMD1qsjhKpZP0xze3FViyteobveDF +nCZ3SN8wimotlXtMp6/90yUbwrMcc5UbjFBbyuXlARTKTYn901AxOd8iz8A0PHT/ +QRQQnHpyKDQavl1bNLHbsdLepZcp35rJ2784cKj8Am8gdIt2NMOiB6j43TmTEoP+ +pz7Kly0jPNuxgbPk025Jqnrxj8/EZC1zhV1phl3/Aa8syvNS8ZDJFHRqWW0/BQZI +8j0ueKhH4vxr6zmfi8neWk2ukXWf4h5dUgZoxxVbmDIrqX+KxupKdGw39qXDYgbE +S4BPoxsqWlGys9pul+vUGqhPQWn3G6IldFhs/NfI2FvbTb5PrE/DkaBMo+LIJdUP +hpj0eKj6MKIV7umtIzj2i/ds152IDXP5Q2rcT8QhvjEpfD28RNolBRvsk4BN/GYS +BDvXr86+AlEuvE1+u88tZz5vf6PPQhODUh1Th0DUp3wY2Pi1QdoPzOigMG7VyWpX +hqMJbpZahGZc5jea+22HMh5N+GT1Qs0K5te0OSv/im625LhnZ03NwEdzPFUXxj6h +pYUVoQRU9cpWcMQ15FdvcJSeRIBUxTnTnVx56rXuwj0J/7seDPA/CpZx9l0/4/VJ +J5dX5cBYYqpv2Re/z7zPJVP0UscjwYRq5s4FQx/d96v72Awo1r088b6ZsgxUkpyK +O38elUtaa/g8WslawZ1bu9U3LP4ndZifc8gxbFMYpJBpDO0bkl/LffTrdVIYUl6H +85VHqY+pDUc1dPXeKDXK5PtKj4yiSunY2v9NCp4WSOkCbc/H6fzWjewjBl4woUdj +lt4EhJN6jSCT7CwA29unYYPfiWRn1RKvR6JIDRDB1KGVfgPweuGpoPKF2L78tp0f +qQf2embmesKEvsw4c9avI6BhNwG7sd98tltX9x1koflFEGavMBNg4syOpCzQ6o86 +OBl60OACJVCW+Fx0sq+IYdzTEDgC4MQDFrti1R9oV1/AOlN5mM2fEEmB5sWlP/Tq +/qkyI4WljtCi5N6LmiolHRV+iXa4jHcAttC3OMOBItSNCCul+hed7qbtCbiR0M1n +EE1EMr4rr/nR/6kLWEaCYGnTLIG9Y5gyzF0rs2qmVoRkJmf4QDE9rUe0I0JlcnRp +bCBDaGFwdWlzIDxiY2hhcHVpc0BnbWFpbC5jb20+iQJXBBMBCABBFiEEOlQDhHz1 +nFX1M/kJuFEzCc0jcAsFAmXyyX0CGwMFCQAnjQAFCwkIBwICIgIGFQoJCAsCBBYC +AwECHgcCF4AACgkQuFEzCc0jcAuZyw/9E27HeXC2yxFDICHe5gm3Wljz/lK9vpp3 +uYM5fIcXlhKMR2WVlxy4XNwuRILMdhpMY16FAZdvyB9UzBspKgWK3oo0noVH4sHn +FmwuoYPJM4FdXiySjJQhv6C/ki6kCsLgDTddEoR7bkf/AebJs59LslRqCQpV+0Dk +v8a6wE9ONjF2F9hOje/UQcFjYa1KqHs2Bwto1Oq8cjJzwwY8ZX7D4C1KwXKFZOf/ +gQKCDmCkRrINOAfuaFgAtN6hkuvZ7VfFE2sDlHcjsCMaKRjEkyDXTMiddolP5Ou2 +tKyA6pRz2O5tM5XYyptGUGH9kMaPv5Mou8hC8ARAK7bjtxbL9iU4XK0Zh5KWF5PT +SmUCwGtqdgF/uTO/2DRc7amHAvRSDi3MFr0Q0TXDbDhqYAlu//AGS5UmaI8QxMJn +ST5OQRrXbLQE3TJihQeboKpJAIoTi2jcFTo6o2t05Kbyfsf8zYrpffWbV9YnEoqK +reuMFaxywLDQgYrACJ+vEixceyob7dsrDLEJZtR8Dy2RKk3jXhxc2pOxLCtyUpm6 +Dn2B0xJbgqkUBT9fAvvtFX1/IEnBMkHWsUmTNwEJfkepdtflKN1GaPoKE1WKIWKl +1jM0RFcxp/ZwbFsFUZolhCrQOcaJvSG4jYaM8DvqYAGBxJ7WdZMIfJExa0rMt7az +WEzgtR7zVvSdB0YEZfLJfQEQANly0uaUR69DHWI2dA0ZUR7tGAx/6ZwCMfmcsMjt +jjvSDelCthaeqniyh+bZkMpbDynlkUxTwdnPRJYpkLr19SsVXPkdRtRcASdbbeoH +RmV9KaeEHMCQfmqZpU3qmS3vqLO9jiL5NH1kS/kvlXn/I5Czgd3r0bUI5I6KiQEM +u7D2UD+xd74SOyeXqXEKGxiYTfTJiJo1x616Gc4Gj+u/KuANJfE6JX2UMnLvuQsA +YoMNFW7qqoAxN4oY5NV3z/OQU36y6wpJ3UKkOjOdcZcnu0AnSam9yVGsqW76MTuP +QsQ7rSfkyOikVfvLGWZX3Lv4X2vRoGWLhiNZ/xkC+DkMDiIpVY7fTXJcHorhuATa +addkJ+D2Pz3zaNYpNwZEgPMiiBBYhYc9REoEl0on1kT9bWJsx0xw/6d5CJasvovQ +x2MRAhKLZg71x2+zR7topaYFl8Lsn6Z3fDeet7kiuriTUGV+X87Xp143p3U4raFE +v9dZDB0f1gUiwe77KVQ6aZjnCQeVnZX7rbXikxBEvdNmrZUDTnwSbpskB6LN1qt/ +td3q8KADK1+Ww7dQCXgh2SbFcAT7WRsBD7JwlN4EXwGojJ19+n1oBCmvNKerMTZX +wmYPiMbcNE4b9Qo1mR766vLPClzorasZiTOPVmcC3AlAlWJ+j33MnHT4i4qFFoES +QSS/ABEBAAH+BwMCcVNtEwiW+CD7DNnY7xqD4X4hDe2K5nneC3k7NjShSgtfMRBh +0jfdGGHaDcC5QQ4oUZ2u2UAoCksQZHxAkCNwx4/5tNkJMNGzJM+kmEdo5vzegPqf +VpPj5zMsHVXp8/a/5IG+nODgjFxQDfhDYJDqsC1XNuWhHL34qjF8W1zyqVZ1LH0W +MN7foX5lZcZqTlkhLae0Zxgmmf6orWiIduvARM4UOlb0uIO+HbZysUIwhTJasmUO +EWNXBFOLrqff2n0nG+RN99tahx546k8Bdc2eV9B82SVB+xH5cBtL/P4vlAJ3kOif +1GdqJV7o7y7JxNSKQjE/WylUllj9cgx43MLgdy0vFF/SPYxForCF6QkULHLUEVPE +4CQ/g9kfCJIXX9RyBQmPU1YGn+PWlzOFXYzEfFKCCbzmJStY7DtSJdK4SFs88fZb +SHC+kaP2nKSvP49rRBf6DBNs4Byo0YsCzW5hvgo1k4mbZM6ZowP5SbDYwet3bUbv +rmzlH0FxwanWIuFVQkHWHf2U0do+Mhhk556OMXC+fz/TvVcyS3kDi2ATto6ynSp6 +hTuvCRnOOpyi5nyTuec5E5FIcxelMZrct2+wkjA2sD2vyKsgGiorP5cI3ZCR2yzr +HbQ4ybgNl0JxZYmjkdaHqClfGf/n4yII7EfVhE1JsGQFgPva8MVPIJJu28589p/X +8zuZM3SbjQetqwEyK2cwwbtCnBxIqslR0HRE0Fr2LBlrFIznIO105ApQYHre2huy +iVeeeCEqpPIu3TtGBurfEmGj2aPAF+LdYVIXo4Us3QYnVGtNINR7DvLSyA9ASysr +eDJ+8Dnkj7h+UusMhlRsimhh3VD8EnGi/HVHPqyngJ4V/BQLoKE9L33yP2Mks/8G +pjmBnkrkBG8dK5dKTpr5kpBwK418qudRSaOHZGraxDDmv63/bbTghZPwdSq/5O0c +s7KEpTYwSXbMP+7189L3U7qHDTUySwGJmaQsynnvY69Q5sW4n20WzlEQC3WZ4VYy +8LTKltnM8oaLu0rbWYSwbiUh6oWCDok+c/5uFlHD6CyAJ8iv+itHj1nQLgSXqLe3 +5Loxn2ylC5YabZKeWF/opNXwS+BOcB5BwSF3q3SBGgd7sJnhncuODN+jmi16Y9jd +tRGflheo/00fg0w9PTg2O0yEfhFJntZh/yQ6xQ8aTPIM0CqpVaJ59I0ETdVlqRIh +CIq6bQbC3/BtjQUKgLBTGx1aU66+f++K5BUcgQHvlqHCgd2gzblVtD7bZsOO/uJI +NrV/yUsMSrGEek5JFkXEI/GbLgwlP4/ElLtfd4bbnbzkdtKc7HPwTVuZ7mJSAN+e +gpwZ22AB/iuAUZswfOm9hfG5djcb52Ed0h05UmAStStJT5JlxwXFzMvjvKRjGBcN +/Tz/DY0hM8GtUXanUBwTv2HJ16nYGg1ZMIzQO8B0rzdbZJbFNs+NIRFTwfceCh4F +oxsHvkgu0RBMthlRTxng6DS+w2d9L29n8mDofJBe8TniHA1Qas+lvDJJMm2pFtsN +vqPIjCtOHOfephS6ti/L8LdQJgVnYBUjtr6IELTOc4FBwd9olWCqv3HQa7r8NEEi +bQK81xVi4TM1Spm5fz2386QsBUjdbjkYI5y0c3YIv6Ttkj+1s3ikIkunYLKjpQJ4 +Ivk+VZ7dQyT3giP8CwaQ11B/GOnp4PM2ufy/i25hDk9/3I8hFvBWYt9SWLrsbeEH +9NO3T9Z5/o37kYxF2puqn9fgnyc2QwdxcERwfaeDvsRVd82xhyIABUAK7baiBNGR +/okCPAQYAQgAJhYhBDpUA4R89ZxV9TP5CbhRMwnNI3ALBQJl8sl9AhsMBQkAJ40A +AAoJELhRMwnNI3AL+p4P/RHWjfwkg7gOGE+kRCYyWdwYMnCHa7yFytyp17RIzfhT +XPDL5gsBvE2R/zSa2vwH3paFn4wx69IpSFdS/REMaLC9SFcB3W2juDm6jU4gEZ5t +ANEVg/OQhONUrOEulE1GaP4Rr9DG+omWSj0aNY3VnWoKYowk5ezSib6UQdGGJRRk +1Dn2kJZ1Stbnh5T3EtF1LcL/69NUuMPTA4wIJ4if53KIj27KNPVqkKGaCjF0gwLX +w29bZPKZvfWhvibDtFVUCLYSiuZWU5+9clhfsgFy8UwsGmAnZwFhU7K5kkgs/g/5 +jKjJsPIL/HTWsN1FSDf5I9N0cKExaAY4wRyIiZV0L/asTX3frmjZqg3+EuuyZ19p +aLW2xamVU5KYBsZ1Y4KFJqye95QCJH0aaiytCHjx9mtO0QkrTQ9gSU8bJZgg8w8P +pN5kjUJhPbZvgW18qUWRvIpf35U9+hn6nmOXu1Wq8UnDSVCM4Akb3RSiY44L/qKH +2nMpje+6LwOdO9IbfCGl+Xk+0lAvbezTk7lU/NNKL+O9PyCnzymS2l3PBDFFG7ue +FrBSWhVMaZr0stZQhMo/kQdoEs/SOmdswr5+3oCxx2s/pEfkas6m44vKuqu8wiWY +EU/rx6flPt4SDPa2wNZ6rnEqHaZ2yXuf03VSth006eWjjcHiOysubG3uWw5bIWz1 +=cp/J +-----END PGP PRIVATE KEY BLOCK-----
