2015-10-16 10:37:32 +00:00
|
|
|
# Copyright (C) 2015 Intel Corporation
|
|
|
|
# Released under the MIT license (see COPYING.MIT for the terms)
|
|
|
|
|
2016-05-25 03:37:11 +00:00
|
|
|
SUMMARY = "Makes public keys of the signing keys available"
|
2015-10-16 10:37:32 +00:00
|
|
|
LICENSE = "MIT"
|
2016-02-19 16:45:25 +00:00
|
|
|
|
|
|
|
|
|
|
|
inherit allarch deploy
|
2015-10-16 10:37:32 +00:00
|
|
|
|
|
|
|
EXCLUDE_FROM_WORLD = "1"
|
2016-02-19 16:45:25 +00:00
|
|
|
INHIBIT_DEFAULT_DEPS = "1"
|
|
|
|
|
2016-05-12 08:37:56 +00:00
|
|
|
SYSROOT_DIRS += "${sysconfdir}/pki"
|
|
|
|
|
2016-03-10 10:02:58 +00:00
|
|
|
PACKAGES =+ "${PN}-ipk ${PN}-rpm ${PN}-packagefeed"
|
2015-10-16 10:37:32 +00:00
|
|
|
|
2016-02-19 16:45:25 +00:00
|
|
|
FILES_${PN}-rpm = "${sysconfdir}/pki/rpm-gpg"
|
2016-03-10 10:02:58 +00:00
|
|
|
FILES_${PN}-ipk = "${sysconfdir}/pki/ipk-gpg"
|
2016-02-19 16:45:25 +00:00
|
|
|
FILES_${PN}-packagefeed = "${sysconfdir}/pki/packagefeed-gpg"
|
2015-10-16 10:37:32 +00:00
|
|
|
|
2016-02-19 16:45:25 +00:00
|
|
|
python do_get_public_keys () {
|
2016-01-25 12:21:34 +00:00
|
|
|
from oe.gpg_sign import get_signer
|
|
|
|
|
2015-10-16 10:37:32 +00:00
|
|
|
if d.getVar("RPM_SIGN_PACKAGES", True):
|
|
|
|
# Export public key of the rpm signing key
|
2016-02-10 14:15:57 +00:00
|
|
|
signer = get_signer(d, d.getVar('RPM_GPG_BACKEND', True))
|
2016-02-19 16:45:25 +00:00
|
|
|
signer.export_pubkey(os.path.join(d.expand('${B}'), 'rpm-key'),
|
2016-02-10 14:15:57 +00:00
|
|
|
d.getVar('RPM_GPG_NAME', True))
|
2015-10-16 10:37:32 +00:00
|
|
|
|
2016-03-10 10:02:58 +00:00
|
|
|
if d.getVar("IPK_SIGN_PACKAGES", True):
|
|
|
|
# Export public key of the ipk signing key
|
|
|
|
signer = get_signer(d, d.getVar('IPK_GPG_BACKEND', True))
|
|
|
|
signer.export_pubkey(os.path.join(d.expand('${B}'), 'ipk-key'),
|
|
|
|
d.getVar('IPK_GPG_NAME', True))
|
|
|
|
|
2015-10-16 10:37:32 +00:00
|
|
|
if d.getVar('PACKAGE_FEED_SIGN', True) == '1':
|
|
|
|
# Export public key of the feed signing key
|
2016-02-10 14:15:57 +00:00
|
|
|
signer = get_signer(d, d.getVar('PACKAGE_FEED_GPG_BACKEND', True))
|
2016-02-19 16:45:25 +00:00
|
|
|
signer.export_pubkey(os.path.join(d.expand('${B}'), 'pf-key'),
|
2016-02-10 14:15:57 +00:00
|
|
|
d.getVar('PACKAGE_FEED_GPG_NAME', True))
|
2015-10-16 10:37:32 +00:00
|
|
|
}
|
2016-02-19 16:45:25 +00:00
|
|
|
do_get_public_keys[cleandirs] = "${B}"
|
|
|
|
addtask get_public_keys before do_install
|
|
|
|
|
|
|
|
do_install () {
|
|
|
|
if [ -f "${B}/rpm-key" ]; then
|
|
|
|
install -D -m 0644 "${B}/rpm-key" "${D}${sysconfdir}/pki/rpm-gpg/RPM-GPG-KEY-${DISTRO_VERSION}"
|
|
|
|
fi
|
2016-03-10 10:02:58 +00:00
|
|
|
if [ -f "${B}/ipk-key" ]; then
|
|
|
|
install -D -m 0644 "${B}/ipk-key" "${D}${sysconfdir}/pki/ipk-gpg/IPK-GPG-KEY-${DISTRO_VERSION}"
|
|
|
|
fi
|
2016-02-19 16:45:25 +00:00
|
|
|
if [ -f "${B}/pf-key" ]; then
|
|
|
|
install -D -m 0644 "${B}/pf-key" "${D}${sysconfdir}/pki/packagefeed-gpg/PACKAGEFEED-GPG-KEY-${DISTRO_VERSION}"
|
|
|
|
fi
|
|
|
|
}
|
|
|
|
|
|
|
|
do_deploy () {
|
|
|
|
if [ -f "${B}/rpm-key" ]; then
|
|
|
|
install -D -m 0644 "${B}/rpm-key" "${DEPLOYDIR}/RPM-GPG-KEY-${DISTRO_VERSION}"
|
|
|
|
fi
|
2016-03-10 10:02:58 +00:00
|
|
|
if [ -f "${B}/ipk-key" ]; then
|
|
|
|
install -D -m 0644 "${B}/ipk-key" "${DEPLOYDIR}/IPK-GPG-KEY-${DISTRO_VERSION}"
|
|
|
|
fi
|
2016-02-19 16:45:25 +00:00
|
|
|
if [ -f "${B}/pf-key" ]; then
|
|
|
|
install -D -m 0644 "${B}/pf-key" "${DEPLOYDIR}/PACKAGEFEED-GPG-KEY-${DISTRO_VERSION}"
|
|
|
|
fi
|
|
|
|
}
|
|
|
|
do_deploy[sstate-outputdirs] = "${DEPLOY_DIR_RPM}"
|
|
|
|
# cleandirs should possibly be in deploy.bbclass but we need it
|
|
|
|
do_deploy[cleandirs] = "${DEPLOYDIR}"
|
|
|
|
# clear stamp-extra-info since MACHINE is normally put there by deploy.bbclass
|
|
|
|
do_deploy[stamp-extra-info] = ""
|
|
|
|
addtask deploy after do_get_public_keys
|