From 4c88d23e2d7e325fae35a97399ab044be800c448 Mon Sep 17 00:00:00 2001 From: Gary Lowell Date: Tue, 14 Jan 2014 15:28:38 +0000 Subject: [PATCH] minor adjustments to rpm signing Check in Gary's adjustments to the RPM signing scripts. These changes were present on the Jenkins server. Signed-off-by: Ken Dreyer --- sign_and_index_rpm_repo.sh | 2 +- sign_rpms.sh | 12 ++++++++++-- 2 files changed, 11 insertions(+), 3 deletions(-) diff --git a/sign_and_index_rpm_repo.sh b/sign_and_index_rpm_repo.sh index 45b2b6a6..a146b7df 100755 --- a/sign_and_index_rpm_repo.sh +++ b/sign_and_index_rpm_repo.sh @@ -35,7 +35,7 @@ do echo "indexing $dir" if [ -d $dir ] ; then createrepo $dir - gpg --detach-sign --armor -u $keyid $dir/repodata/repomd.xml + gpg --batch --yes --detach-sign --armor -u $keyid $dir/repodata/repomd.xml fi done diff --git a/sign_rpms.sh b/sign_rpms.sh index e494506e..cbb522d9 100755 --- a/sign_rpms.sh +++ b/sign_rpms.sh @@ -1,4 +1,4 @@ -#!/bin/bash -x +#!/bin/bash set -e @@ -23,9 +23,17 @@ echo "signing rpms, version $cephvers key $keyid" #rpm --addsign --define "_gpg_name $keyid" $rpm #use expect wrapper to supply null passphrase +#shopt -s nocasematch for rpm in `find ${repodir}/${cephvers} -name "*.rpm"` do - $bindir/rpm-autosign.exp --define "_gpg_name $keyid" $rpm + signature=$(rpm -qi -p $rpm 2>/dev/null | grep ^Signature) + if grep -iq $keyid <<< "$signature" ; then + echo "skipping: $rpm" + else + echo "signing: $rpm" + $bindir/rpm-autosign.exp --define "_gpg_name $keyid" $rpm + fi done +#shopt -u nocasematch echo done -- 2.39.5