58cb728310
This is step 1 in promoting the openafs deb packages to the openstack-ci PPA. It should grab the debs from the gate build and sign the .changes file with our key. This is intentionally not uploading yet as we just want to test the secret import and signing path before we add the key and permissions to the upstream PPA. Change-Id: Idd91818093588113b84c1d91b4895df589aa7912
52 lines
1.4 KiB
YAML
52 lines
1.4 KiB
YAML
- hosts: all
|
|
tasks:
|
|
|
|
- name: Install PPA private key
|
|
include_role:
|
|
name: add-gpgkey
|
|
|
|
- name: Download source package artifacts
|
|
include_role:
|
|
name: download-artifact
|
|
vars:
|
|
download_artifact_api: "https://zuul.opendev.org/api/tenant/{{ zuul.tenant }}"
|
|
download_artifact_type: deb.tar.gz
|
|
download_artifact_pipeline: gate
|
|
download_artifact_job: openafs-deb-package-build
|
|
download_artifact_directory: '{{ ansible_user_dir }}'
|
|
|
|
- name: Extract sources
|
|
unarchive:
|
|
src: '{{ ansible_user_dir }}/openafs-debs.tar.gz'
|
|
dest: '{{ ansible_user_dir }}'
|
|
remote_src: yes
|
|
|
|
- name: Find changes files
|
|
find:
|
|
paths: '{{ ansible_user_dir }}/openafs'
|
|
patterns: '*.changes'
|
|
register: _changes_files
|
|
|
|
- name: Install dependencies
|
|
package:
|
|
name:
|
|
- devscripts
|
|
- dput
|
|
become: yes
|
|
|
|
- name: Sign changes file
|
|
shell: |
|
|
debsign -k "{{ gpg_key.key_id }}" -S --debs-dir "{{ zuul.executor.work_root }}" "{{ item }}"
|
|
loop: "{{ _changes_files.files | map(attribute='path') | list }}"
|
|
|
|
- name: Setup dput config
|
|
copy:
|
|
dest: '{{ ansible_user_dir }}/.dput.cf'
|
|
content: |
|
|
[ppa-openafs]
|
|
fqdn = ppa.launchpad.net
|
|
method = ftp
|
|
incoming = ~openstack-ci-core/ubuntu/openafs
|
|
login = anonymous
|
|
|