This will enable artifact signing for apex uploads 41/16341/6
authorAric Gardner <agardner@linuxfoundation.org>
Mon, 4 Jul 2016 19:20:39 +0000 (15:20 -0400)
committerAric Gardner <agardner@linuxfoundation.org>
Tue, 5 Jul 2016 19:42:22 +0000 (15:42 -0400)
commitd688859a6e5abfacb5069272994bdce2ad0e9f66
treea7ec7afa277c903e36a14fc85d778458db631348
parent6e5fc37495ddbf9dd6ac19efe4e8fbd0aa474dfe
This will enable artifact signing for apex uploads

sources gpg_import_key.sh which:
-installs gpg2
-imports key
-grabs proper key based on $NODE_NAME

only tries to sign if the key is correctly imported
otherwise it will skip signing and just do the upload

Keys have only been created for lf intel and ericsson labs
Keys are only unique per company
Master pubkey has not been sent to the key server
Or brought into the web of trust.
Lets see that this works as I expected rather than
having to go through the pain of revoking these keys.

Change-Id: Ifa4bc4e11407c53f8174f6c64945949bf66d6535
Signed-off-by: Aric Gardner <agardner@linuxfoundation.org>
jjb/apex/apex-upload-artifact.sh
utils/gpg_import_key.sh [new file with mode: 0644]