Add sha256sums and gpg sign outside of maven process

Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
This commit is contained in:
Andrew DeMaria
2019-07-13 16:19:45 -06:00
parent 3b8993e860
commit 8db4ec12e1
4 changed files with 37 additions and 42 deletions
+4
View File
@@ -634,6 +634,10 @@
<groupId>org.owasp</groupId> <groupId>org.owasp</groupId>
<artifactId>dependency-check-maven</artifactId> <artifactId>dependency-check-maven</artifactId>
</plugin> </plugin>
<plugin>
<groupId>net.nicoulaj.maven.plugins</groupId>
<artifactId>checksum-maven-plugin</artifactId>
</plugin>
</plugins> </plugins>
</build> </build>
<profiles> <profiles>
+13 -9
View File
@@ -20,37 +20,41 @@ Release Steps
6. Package 6. Package
mvn clean verify -P docker,sign mvn clean verify -P docker
7. push up branch and tag 7. Sign sha256sums file
gpg2 --clearsign artifacts-checksums.sha
8. push up branch and tag
git push origin vX.Y.Z git push origin vX.Y.Z
git push -u origin release-X.Y git push -u origin release-X.Y
8. Create new release on github 9. Create new release on github
- Draft new Relase - Draft new Relase
- Choose existing tag - Choose existing tag
- Title is "Airsonic X.Y.Z" - Title is "Airsonic X.Y.Z"
- Contents are the relevant entry of the CHANGELOG.md file - Contents are the relevant entry of the CHANGELOG.md file
- Upload `airsonic.war` and `airsonic.war.asc` - Upload `airsonic.war` and `artifacts-checksums.sha`
9. Update latest docker tag 10. Update latest docker tag
docker tag airsonic/airsonic:X.Y.Z-RELEASE airsonic/airsonic:latest docker tag airsonic/airsonic:X.Y.Z-RELEASE airsonic/airsonic:latest
10. Docker login with airsonic credentials in `airsonic-passwords` repo 11. Docker login with airsonic credentials in `airsonic-passwords` repo
docker login docker login
11. Push images 12. Push images
docker push airsonic/airsonic:X.Y.Z-RELEASE docker push airsonic/airsonic:X.Y.Z-RELEASE
docker push airsonic/airsonic:latest docker push airsonic/airsonic:latest
12. Checkout master branch and bump maven version to next snapshot version 13. Checkout master branch and bump maven version to next snapshot version
git checkout master git checkout master
mvn versions:set -DnewVersion=X.Y+1.0-SNAPSHOT mvn versions:set -DnewVersion=X.Y+1.0-SNAPSHOT
13. Git commit and push 14. Git commit and push
-13
View File
@@ -203,19 +203,6 @@
</includes> </includes>
</configuration> </configuration>
</plugin> </plugin>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-gpg-plugin</artifactId>
<version>1.6</version>
<executions>
<execution>
<phase>none</phase>
<goals>
<goal>sign</goal>
</goals>
</execution>
</executions>
</plugin>
</plugins> </plugins>
</build> </build>
+20 -20
View File
@@ -326,6 +326,26 @@
<artifactId>maven-surefire-plugin</artifactId> <artifactId>maven-surefire-plugin</artifactId>
<version>2.22.0</version> <version>2.22.0</version>
</plugin> </plugin>
<plugin>
<groupId>net.nicoulaj.maven.plugins</groupId>
<artifactId>checksum-maven-plugin</artifactId>
<version>1.8</version>
<executions>
<execution>
<phase>package</phase>
<goals>
<goal>artifacts</goal>
</goals>
</execution>
</executions>
<configuration>
<algorithms>
<algorithm>SHA-256</algorithm>
</algorithms>
<individualFiles>false</individualFiles>
<shasumSummary>true</shasumSummary>
</configuration>
</plugin>
</plugins> </plugins>
</pluginManagement> </pluginManagement>
@@ -417,25 +437,5 @@
<module>integration-test</module> <module>integration-test</module>
</modules> </modules>
</profile> </profile>
<profile>
<id>sign</id>
<build>
<plugins>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-gpg-plugin</artifactId>
<version>1.6</version>
<executions>
<execution>
<phase>verify</phase>
<goals>
<goal>sign</goal>
</goals>
</execution>
</executions>
</plugin>
</plugins>
</build>
</profile>
</profiles> </profiles>
</project> </project>