add checksum verification and signature step
This commit is contained in:
@@ -56,7 +56,7 @@ release-docker-mkcachemount:
|
|||||||
endif
|
endif
|
||||||
|
|
||||||
##################### PRODUCING A RELEASE #############
|
##################### PRODUCING A RELEASE #############
|
||||||
.PHONY: release wrapup-and-checksum check-git-clean sign clean ensure-release-toolchain
|
.PHONY: release wrapup-and-checksum check-git-clean verify-and-sign clean ensure-release-toolchain
|
||||||
|
|
||||||
ensure-release-toolchain:
|
ensure-release-toolchain:
|
||||||
# ensure the toolchain is actually the one we expect
|
# ensure the toolchain is actually the one we expect
|
||||||
@@ -211,7 +211,8 @@ tag-release:
|
|||||||
test -n "$(ZREPL_TAG_VERSION)" || exit 1
|
test -n "$(ZREPL_TAG_VERSION)" || exit 1
|
||||||
git tag -u '328A6627FA98061D!' -m "$(ZREPL_TAG_VERSION)" "$(ZREPL_TAG_VERSION)"
|
git tag -u '328A6627FA98061D!' -m "$(ZREPL_TAG_VERSION)" "$(ZREPL_TAG_VERSION)"
|
||||||
|
|
||||||
sign:
|
verify-and-sign:
|
||||||
|
cd "$(ARTIFACTDIR)/release" && sha512sum -c sha512sum.txt
|
||||||
gpg -u '328A6627FA98061D!' \
|
gpg -u '328A6627FA98061D!' \
|
||||||
--armor \
|
--armor \
|
||||||
--detach-sign $(ARTIFACTDIR)/release/sha512sum.txt
|
--detach-sign $(ARTIFACTDIR)/release/sha512sum.txt
|
||||||
|
|||||||
@@ -112,6 +112,10 @@ The procedure to issue a release is as follows:
|
|||||||
```
|
```
|
||||||
make download-circleci-release JOB_NUM=66079
|
make download-circleci-release JOB_NUM=66079
|
||||||
```
|
```
|
||||||
|
* Verify checksums and sign the checksums file:
|
||||||
|
```
|
||||||
|
make verify-and-sign
|
||||||
|
```
|
||||||
* Create GitHub release and upload artifacts:
|
* Create GitHub release and upload artifacts:
|
||||||
```bash
|
```bash
|
||||||
gh release create vX.Y.Z --title "vX.Y.Z" --notes "See changelog" --draft
|
gh release create vX.Y.Z --title "vX.Y.Z" --notes "See changelog" --draft
|
||||||
|
|||||||
Reference in New Issue
Block a user