ci: Sign RPMs

2025-11-16 06:58:52 -06:00
parent 2b7954bb52
commit 7f673e3b5a
2 changed files with 51 additions and 0 deletions
--- a/ci/Jenkinsfile
+++ b/ci/Jenkinsfile
@@ -40,6 +40,36 @@ pipeline {
                            }
                        }
                    }
+
+                    stage('Sign') {
+                        when {
+                            branch 'main'
+                        }
+                        environment {
+                            GNUPGHOME = "${env.WORKSPACE_TMP}/gnupg"
+                        }
+                        steps {
+                            withCredentials([
+                                file(
+                                    credentialsId: 'rpm-gpg-key',
+                                    variable: 'RPM_GPG_PRIVATE_KEY',
+                                ),
+                                file(
+                                    credentialsId: 'rpm-gpg-key-passphrase',
+                                    variable: 'RPM_GPG_KEY_PASSPHRASE',
+                                ),
+                            ]) {
+                                sh '. ci/sign.sh'
+                            }
+                        }
+                    }
+
+                    stage('Archive') {
+                        steps {
+                            archiveArtifacts '*.rpm'
+                        }
+                    }
+
                }
            }
        }