[ 
https://issues.apache.org/jira/browse/SOLR-15361?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Chris M. Hostetter updated SOLR-15361:
--------------------------------------
    Attachment: SOLR-15361.patch
        Status: Open  (was: Open)

attaching a rough patch that uses the {{signing}} plugin to add {{signDistTar}} 
and {{signDistZip}} tasks to {{solr/packaging}} along with a help file 
explaining how to use them and configure your signing key.

I'm still not clear on gradle concepts like "configurations" and "archives" vs 
"artifacts" let alone "publications" ... but this keeps it simple by signing 
the outputs of the {{distTar}} and {{distZip}} tasks

I tried to get fancy by including some logic in {{gradle/releasing.gradle}} to 
look for all sub-projects that used the {{SigningPlugin}} and the 
{{DistributionPlugin}} and add the task to all of them (thinking that would 
help us down the road if/when we add src.tgz files, or modules that get 
realized independently, etc...) .... but i couldn't get it to work – so i 
reverted to keeping it simple.

 

[~dweiss]-- what do you think?

 

> update gradle build to support gpg signing of tgz/zip distributions
> -------------------------------------------------------------------
>
>                 Key: SOLR-15361
>                 URL: https://issues.apache.org/jira/browse/SOLR-15361
>             Project: Solr
>          Issue Type: Task
>      Security Level: Public(Default Security Level. Issues are Public) 
>            Reporter: Chris M. Hostetter
>            Priority: Major
>         Attachments: SOLR-15361.patch
>
>
> the gradle build does not currently have any support for gpg signing the 
> distributions we produce.
> this is neccessary for releases, and for being able to "smoke test" our 
> Dockerfiles prior to release (by creating mock download servers to confirm 
> {{docker build}} can correctly fetch the {{tgz}} & {{tgz.asc}} files we point 
> it at)



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to