package signing and uploading without passwords

tools/packaging/debian/create_package.cmake

@@ -24,7 +24,7 @@ if (NOT IS_RELEASE)
   set(PACKAGE_VERSION "${PACKAGE_VERSION}~rc${PACKAGE_RELEASE_CANDIDATE}")
 endif ()
 
-set(PACKAGE_VERSION "${PACKAGE_VERSION}~ppa1~${PACKAGE_DISTRIBUTION}")
+set(PACKAGE_VERSION "${PACKAGE_VERSION}~ppa5~${PACKAGE_DISTRIBUTION}")
 set(PACKAGE_VERSION_FULL "${PACKAGE_VERSION}-1")
 
 set(PACKAGE_CONTACT "Simon Praetorius <simon.praetorius@tu-dresden.de>")
@@ -88,6 +88,5 @@ file(WRITE ${DEBIAN_DIR}/compat "9\n")
 file(WRITE ${DEBIAN_DIR}/soure/format "3.0 (quilt)\n")
 
 # generate the debian package
-execute_process(COMMAND debuild -S -sa
-# execute_process(COMMAND debuild -d -us -uc
-                WORKING_DIRECTORY ${OUT_DIR}/${PACKAGE_PREFIX})
+execute_process(COMMAND ./generate_package.sh ${OUT_DIR}/${PACKAGE_PREFIX} ${PACKAGE_VERSION_FULL} ${IN_DIR}
+                WORKING_DIRECTORY ${IN_DIR})

tools/packaging/debian/generate_package.sh

+#!/bin/bash
+
+if [ $# -lt 3 ] ; then
+  echo "Usage: generate_package.sh root-dir amdis-version bin-dir"
+  exit 1
+fi
+
+ROOT="$1"
+VERSION="$2"
+BIN="$3"
+CHANGES_FILE="${ROOT}/../amdis_${VERSION}_source.changes"
+
+cd $ROOT
+debuild -uc -us -S -sa
+
+# export GNUPGHOME=/srv/amdis-deploy/gnupg
+
+# build debian source package and sign it using gpg
+echo "${AMDIS_PGP_PASSPHRASE}" >> /tmp/amdis_passphrase
+debsign -p"$BIN/gpg_pass.sh /tmp/amdis_passphrase" -S -k99F411D7 ${CHANGES_FILE} #3B1E713A
+
+$BIN/ssh_add_pass.sh /amdis/id_rsa /tmp/amdis_passphrase
+
+# upload the package
+dput ppa:math-iwr/ppa ${CHANGES_FILE}
+
+rm -f /tmp/amdis_passphrase

tools/packaging/debian/gpg_pass.sh

+#!/bin/bash
+
+if [ $# -ne 1 ] ; then
+  echo "Usage: gpg-pass.sh passfile additional-arguments..."
+  exit 1
+fi
+
+PWD_FILE="$1"
+shift 1
+
+eval $(gpg-agent --daemon --allow-preset-passphrase --max-cache-ttl 7200)
+cat ${PWD_FILE} | /usr/lib/gnupg/gpg-preset-passphrase --preset key:99F411D7
+export GPG_TTY=`tty`
+gpg  --batch --use-agent $@
+/usr/lib/gnupg/gpg-preset-passphrase --forget key:99F411D7

tools/packaging/debian/ssh_add_pass.sh

+#!/bin/bash
+
+if [ $# -ne 2 ] ; then
+  echo "Usage: ssh-add-pass.sh keyfile passfile"
+  exit 1
+fi
+
+eval $(ssh-agent)
+pass=$(cat $2)
+
+/amdis/tools/tcl/bin/expect << EOF
+  spawn ssh-add $1
+  expect "Enter passphrase"
+  send "$pass\r"
+  expect eof
+EOF