Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bugfix: Automatically generated linux installer packages are not being signed. #1111

Merged
merged 2 commits into from
Jan 24, 2025

Conversation

steelhead31
Copy link
Contributor

@steelhead31 steelhead31 commented Jan 24, 2025

Fixes #1110 

The passing of the relevant key to the gradle builds to produced sign rpms & apks was not working correctly due to the calling of the gradle build outside of the withCredentials block.

Alpine needs the rsa gpg key
Rhel / Suse need the gpg key
Debian does not use the jenkins provided gpg key.

This code explicitly forces each package type to be built and signed correctly.

Once this is merged, I'll push updated packages for everything that has already been released.

Copy link

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A block has been put on this Pull Request as this repository is temporarily under a code freeze due to an ongoing release cycle.

If this pull request needs to be merged during the release cycle then please comment /merge and a PMC member will be able to remove the block.

If the code freeze is over you can remove this block by commenting /thaw.

@steelhead31 steelhead31 marked this pull request as ready for review January 24, 2025 16:06
@steelhead31
Copy link
Contributor Author

This now produces signed packages..

rpm -qpi temurin-23-jre-23.0.2.0.0.7-0.x86_64.rpm
Name        : temurin-23-jre
Version     : 23.0.2.0.0.7
Release     : 0
Architecture: x86_64
Install Date: (not installed)
Group       : java
Size        : 164303948
License     : GPLv2 with exceptions
Signature   : RSA/SHA256, Fri 24 Jan 2025 03:54:50 PM GMT, Key ID 843c48a565f8f04b
Source RPM  : temurin-23-jre-23.0.2.0.0.7-0.src.rpm
Build Date  : Fri 24 Jan 2025 03:53:34 PM GMT
Build Host  : 17252dcb95fc
Relocations : /usr/lib/jvm/temurin-23-jre 
Packager    : Eclipse Adoptium Package Maintainers <[email protected]>
Vendor      : Eclipse Adoptium
URL         : https://projects.eclipse.org/projects/adoptium
Summary     : Eclipse Temurin 23 JRE
Description :
Eclipse Temurin JRE is an OpenJDK-based runtime environment to execute
applications and components using the programming language Java.
 

JDK

rpm -qpi temurin-23-jdk-23.0.2.0.0.7-0.x86_64.rpm
Name        : temurin-23-jdk
Version     : 23.0.2.0.0.7
Release     : 0
Architecture: x86_64
Install Date: (not installed)
Group       : java
Size        : 367548950
License     : GPLv2 with exceptions
Signature   : RSA/SHA256, Fri 24 Jan 2025 03:51:55 PM GMT, Key ID 843c48a565f8f04b
Source RPM  : temurin-23-jdk-23.0.2.0.0.7-0.src.rpm
Build Date  : Fri 24 Jan 2025 03:48:55 PM GMT
Build Host  : 09b85ad36500
Relocations : /usr/lib/jvm/temurin-23-jdk 
Packager    : Eclipse Adoptium Package Maintainers <[email protected]>
Vendor      : Eclipse Adoptium
URL         : https://projects.eclipse.org/projects/adoptium
Summary     : Eclipse Temurin 23 JDK
Description :
Eclipse Temurin JDK is an OpenJDK-based development environment to create
applications and components using the programming language Java.

Copy link
Contributor

@andrew-m-leonard andrew-m-leonard left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looks ok

Copy link
Contributor

@adamfarley adamfarley left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@steelhead31
Copy link
Contributor Author

/merge

Copy link

Approval to merge during the lockdown cycle

Please can two Adoptium PMC members comment /approve?

@andrew-m-leonard
Copy link
Contributor

/approve

1 similar comment
@jerboaa
Copy link
Contributor

jerboaa commented Jan 24, 2025

/approve

@github-actions github-actions bot dismissed their stale review January 24, 2025 16:28

Thank you @andrew-m-leonard and @jerboaa for your approvals, this pull request is now approved to merge during release.

@tellison tellison merged commit c8df680 into adoptium:master Jan 24, 2025
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Unsigned rpm packages in repository
6 participants