From 19f9251be325abb8f732f55ce28dbbc5287d5010 Mon Sep 17 00:00:00 2001 From: Corentin Le Molgat Date: Thu, 11 Mar 2021 15:50:31 +0100 Subject: [PATCH] Add encrypted gpg release key --- tools/release/build_delivery_mac.sh | 22 +++++++++++++++++++++- tools/release/build_delivery_unix.sh | 23 ++++++++++++++++++++++- tools/release/or-tools.snk.enc | Bin 0 -> 2352 bytes tools/release/private-key.gpg.enc | Bin 0 -> 5248 bytes tools/release/settings.xml.enc | Bin 0 -> 592 bytes 5 files changed, 43 insertions(+), 2 deletions(-) create mode 100644 tools/release/or-tools.snk.enc create mode 100644 tools/release/private-key.gpg.enc create mode 100644 tools/release/settings.xml.enc diff --git a/tools/release/build_delivery_mac.sh b/tools/release/build_delivery_mac.sh index 732beb42a3..78da3cb40b 100755 --- a/tools/release/build_delivery_mac.sh +++ b/tools/release/build_delivery_mac.sh @@ -6,6 +6,11 @@ if [[ -z "${DOTNET_SNK}" ]]; then exit 1 fi +if [[ -z "${ORTOOLS_TOKEN}" ]]; then + echo "ORTOOLS_TOKEN: not found !" | tee build.log + exit 1 +fi + # Clean everything make clean make clean_third_party @@ -52,8 +57,13 @@ else command -v mvn | xargs echo "mvn: " | tee -a build.log java -version 2>&1 | head -n 1 | grep 1.8 fi +# Maven central need gpg sign and we store the release key encoded using openssl +command -v openssl +command -v openssl | xargs echo "openssl: " | tee -a build.log +command -v gpg +command -v gpg | xargs echo "gpg: " | tee -a build.log -# C# +#.Net command -v dotnet command -v dotnet | xargs echo "dotnet: " | tee -a build.log @@ -79,6 +89,16 @@ echo -n "Build Third Party..." | tee -a build.log make third_party UNIX_PYTHON_VER=3.9 echo "DONE" | tee -a build.log +######################## +## Install Java gpg ## +######################## +echo -n "Install Java gpg" | tee -a build.log +openssl aes-256-cbc -pass pass:$ORTOOLS_TOKEN -in tools/release/private-key.gpg.enc -out private-key.gpg -d +gpg --batch --import private-key.gpg +mkdir -p ~/.m2 +openssl aes-256-cbc -pass pass:$ORTOOLS_TOKEN -in tools/release/settings.xml.enc -out ~/.m2/settings.xml -d +echo "DONE" | tee -a build.log + ##################### ## C++/Java/.Net ## ##################### diff --git a/tools/release/build_delivery_unix.sh b/tools/release/build_delivery_unix.sh index 9f1c594aff..726210e7f7 100755 --- a/tools/release/build_delivery_unix.sh +++ b/tools/release/build_delivery_unix.sh @@ -6,6 +6,11 @@ if [[ -z "${DOTNET_SNK}" ]]; then exit 1 fi +if [[ -z "${ORTOOLS_TOKEN}" ]]; then + echo "ORTOOLS_TOKEN: not found !" | tee build.log + exit 1 +fi + # Clean everything make clean make clean_third_party @@ -18,6 +23,7 @@ make print-OR_TOOLS_VERSION | tee build.log command -v gcc | xargs echo "gcc: " | tee -a build.log command -v cmake | xargs echo "cmake: " | tee -a build.log command -v make | xargs echo "make: " | tee -a build.log + command -v swig | xargs echo "swig: " | tee -a build.log # python @@ -35,8 +41,13 @@ else command -v jar | xargs echo "jar: " | tee -a build.log command -v mvn | xargs echo "mvn: " | tee -a build.log fi +# Maven central need gpg sign and we store the release key encoded using openssl +command -v openssl +command -v openssl | xargs echo "openssl: " | tee -a build.log +command -v gpg +command -v gpg | xargs echo "gpg: " | tee -a build.log -# dotnet +# .Net command -v dotnet | xargs echo "dotnet: " | tee -a build.log ############################### @@ -61,6 +72,16 @@ echo -n "Build Third Party..." | tee -a build.log make third_party UNIX_PYTHON_VER=3 echo "DONE" | tee -a build.log +######################## +## Install Java gpg ## +######################## +echo -n "Install Java gpg" | tee -a build.log +openssl aes-256-cbc -pass pass:$ORTOOLS_TOKEN -in tools/release/private-key.gpg.enc -out private-key.gpg -d +gpg --batch --import private-key.gpg +mkdir -p ~/.m2 +openssl aes-256-cbc -pass pass:$ORTOOLS_TOKEN -in tools/release/settings.xml.enc -out ~/.m2/settings.xml -d +echo "DONE" | tee -a build.log + ##################### ## C++/Java/.Net ## ##################### diff --git a/tools/release/or-tools.snk.enc b/tools/release/or-tools.snk.enc new file mode 100644 index 0000000000000000000000000000000000000000..d1465cdde4a29ba50de3b959bc71270e183c077f GIT binary patch literal 2352 zcmV-03D5RZVQh3|WM5xs<-T?@1JUW`k3UCqDk0|X<`Z`*er0Vz+w9LNnergwxWA+N zOL+=Mr?h!lKJ$NJ<7LP#hpt)!JMrKmHy*n05)aMdg5JJ3@FsPt5rR(~As&sZ`qU6! zPc}=mR{RheI+HT?G~;EOYrK~477xRE>v1KN|<8JBn?`g;OyH<`pc9+ z?B_L+qvsQOxN|Nt{x-r$g7Krm^`@K3nO#v2`RZiWzVXU{o4?oi?z*dCo=7P-Nj6;X zAGl7W>gN3ua2jgGJzzic4c^g5Wo!?V2~fn%_4t(}{Jzz-2Eqz|s5_ALGMNEq+=qOE zHz(uyUs0&tv16P1CRO?QGtljmqm(u^Q9_Duka@a#QLEqnQX-)7#V4>*Gh?f2bbwvqbMql&vBdj2{;t{i zoOZ%)dMH<2;6E}`MYLkhA&X5ZodDx7l*g(3-InLL=1M;N8 zvoEkPC)xBN)#aGM7d^1=ptJ5w(wpUT?V~l*_}TWQj6}@A`zl=EbIh!UpX}1(w+sva z8q5+1RkdU%kNul6Lz4%{3JZy#5Y!~~=dbD9_7m}Y#t@VHr<-5!wSfUk{$iCMWW z4^376dcv#u7EAn|LKh08x>O2RmhJsSQw=fEH!DVw8l>X{S^QFRgh+fQH%8Q0>p((G zfv~OZlKnW=3=6@M29xIR!ajg8x1kCi|>` z*mdS0d{|fzNHF#5-=N*y9!eYI`0xX?cbNfZdRZN<0b#HmyZ=%>?7yTv0!(XBJ4PMK zZ*0U({Du9a!RVj9rUulTLR`vVT%nFzXBPz?6MPA4F{d2f1RzjPB{A;&>IY%kzGX5S zF|~HV1rj+t)f@{&81s}i+emv8DCu9SSdq%R=dZnW8-Nmu-tDQhK!ke#Ko&(Dvl6gG zM@?T8cL*Wo<6#`r^z>b&hQqyVYDsTq&h;FjYx!pb_tibo^$c=zSqH3u`t2X8*+tck zdNgBIF_OD{EX;#U{=Gf-Y6_{O0{ME#o$=A)wAOc)AKj47zJP?SoFr+C)>BgTgnDT3V z1L?8IO;aDs3$-V6Agv1dDXa-D5s3&O{K+hmsr{?FRzDS4$gdXq@8Ps zL3WDv@Ua+Y>0!)|mVq<@X==E&Nu^!!Ij~gNyuq3qJ~w3iT)@EjC`0Mcbv*TB5u+`x z$~7B0z|{8=Cn)k_MX2#o3Vn88+qd=j-WMaKBWq;ei)P$IgxnoXJi{wb`pPN`Q~@52 z^wf^k`g8E$=~6fFFm1OfZm8f1_`%GYxt=%udPj=a2l%R7JLJqNWWf3ZK(fI^L}M;v zH_Xf6dQAZ5z!w!YFzUd+z1b(Db#ooco02?B3e36mNen;Ktd zWIwa@MFiIDyksvQz1jVn-be(E)v_xo&qX>%g1$h8^1_Z@O>Wyz2!|<7*Z+dh4IKqE zNW946?jVw56)jo(vmYj8bo;BvA`jLcW+ZWvlKFlBCKQ#XD;p+Ye$i!h7D8MOb;-S1tiUe zx%5M>fvy#7io+Xnd+BOz8$=xgl^~nni9s(I4E~vR=3%hTVA5K(xll2iV$(jTsXNT~ z={54Ss)F$v$F#UpOO@5jE~Ysv!PE^jmfU!JAdWf=AhWHH{c?T5u+u^J`6>9rLcCv*crWfiC5PgmZ=|RBP@NM1 literal 0 HcmV?d00001 diff --git a/tools/release/private-key.gpg.enc b/tools/release/private-key.gpg.enc new file mode 100644 index 0000000000000000000000000000000000000000..71f0d8e03caa2b52ff5cf0ea0950441e991b88f6 GIT binary patch literal 5248 zcmV-`6o2beVQh3|WM5zB&1+G9)%MArNtYXqEvXsXeiS>4`H9H+ePTcAA`tc<;*yt(hYp`c8jmPrbJ`11mtMO8{-h9Kwj z6#Y8}924qUugqNHZ6fZxqlARok!FtL3yt%EGWt_jWmNKwVg@!2!VP6f^iV-FkQi2! zx(PK%9_#RyhcQww$lN+aj=3#JFtj%h5jYXjTeV>Ctd|Xg33Jj>xb<#f30s!Pbp@L+ z-*@jjOuxw`y1z(_Cgm0;g-_NlEt#U{NLyxpz2weg0Sg1xDt~~j>{H|bqq*ffMWwcf}v{i$9Blt^Bl$ms;$UumN_hJlpxQToSqQt%cxs;%79n9-O7i~ zU&%TT*4n!-_PIhUVkCoL+qEE)cHDk61=E-8)3AV}PEGS>PjTr)oqw4kdJP3h>C zdkFps7h-~DLW|L1cj#x%%58V7V~@6j#(~ILCVM}l2RPPv4sXLNtt86BG3E2)?w}RlY_)sC1r2XN29Y8f(0^=1L)9PRCX#T%W?N4Gro>&Lqr5ppCD{9fyKa z)HN*;?JRk%kX5IxhBGz#CRbM0v;kpV=}9fLwT<_z(y2;>et`KHUc~Kuo7EFk>_c83 z5e2rL4>aCx@=(&1dj`cP>enXN4_V#CV&GCnQd{)1`%Cj5nn@v!ih~nt07PQT@|*~9 zxDb8{dB+wGV2futL8U=?KH{Oi^+mM!LH(3k6x~-)yzZp8mXNPyYIkzzH*fHHaGKy( ziS#IpqagoY=1KCVg?RI21=h9FM4801r{?XfFXH4GB$(H^?ZzA&N-UG8YxYMk@Tets z9BJ_IU_NSWXfqQ~Ve_C)3p{|1^B8pPthqrI9 zsk}3z)qK?H*Dx3w5gTM3kqwn|HouYbUCpyXi;ha3 z{KED{t72CX)ZX)&=Q$t;?{06_4AU1Eu##h=0U+#!9Hi9fY4>KPlWk}&xy_A4=eeyR z4Bmz&sT(*Gq2gs^@K>0^|I_*$cm4}|!gSb`Q8ft|G?07hRMr!q&?knz!v@_Ir>LgC z+_dHiKSQnXPwIO?_X4v1D&NF9=|jd=wy)M77C;{$`>dDDlj%>Hd-p-Ag>pw*-o}(cA}>;ElWW{8l>K?&A65TcU?usGcv*vIh!w&5_wsAT>cMsvq%Xp3G3b4w}h;D@|Xf}ZAD1u%=5<3GOz0h z>BE)7=NM_8&PI~&?0Hg6N7jS@bdki&0SXoh6%!-3c{1p5iXO!I3#k#u{m;z1*NDel z&1rnvy}4Axi$yJ5`39B=oQ{-V@b1pTX!b8Q#wG2_xg*qO7V~hbKN&rK4{?-u`ioMx zmn*&RmslA}I~e&$w)YAZW*+Q`cH28oRl&>2Lz92J@^lpwWL$i#0*Tk?ja9hn=GMD; z7eKAK-&AGeg`LVz0AyR0?OD;?eOK+*KJcNB(~0UnAhiQQS8F8Eaeii}l9V`9<}@DX zCrHm5_zSE3hRiUvW^c{p*x3eDM9kK3-*hUC{xgBfmGFTixlA|i=>(jA5~n1cwrs;R;@4s#!vThEda@s zFHqQX#GAetry)gjuf2l3FMd6k#+IkrLa-N_q!p4Ut4Nkjz8$?)pe4V@0Iu&TZ{PVn z^E}LY{fdQBGGy#BS(C)rqSMjW@PdOtJ?Kk{zn5&n4v^+) zYm>9*GyB>8_s9;+`_x=K6 ztnrRXHK(=^(9I$#gA`69+y6AJRo4klAR6k$s~Xu?pEbu%=D<1-J5-e%T<6cLHAQ1` z(daJej)ek$+oAC3JgLni1cPb^5ZSl_8CWqu9E9$nFvy3W-B&gNT3L6XCP&H@EzljF z%PY-$?K&Lsqk2D%e0msEj{8Pu}f8JCv11wU9*ow@!k!+%ArZ-5>R9WUwt0K#32eeExZ zx~Wv&X*Aegjbk4(g#(LT0*!U5l&zm<_B+a$ByTERNu*vSt~o;*zRp$vx6hCSDR%nf z&n2QuahyZU0RIo1GK54eK={FJ#;x>&2eMmiPj7Kn$5jDg53;p-x#BxhY)j29tkC#F2ked zM7ek7h4%j z)0grzS}2v*QrH1^*gD19;m|>1zx@pf@uqLrWGv1p!+}EZc?__Uj!Lf-l`brxx)K)A zFEa0bo;X>4F_b|5yT!9(>95sq8i|!`V~>=8lsok!o}NE~#F^0`+-C{T*!Cmqri(Jx zX}HmVQrUCfEL{j055od%D&JHL-tFF9NB~0Ch4PH)`;qCD-6SYPsH$YU&OwU5F>?po z^Mj9VGQ(^)O1B#6TdB_mXhjf|q?|S9YKD74;`IFAYaRbsqSt22Qn0XK3N_!CK0@jf zhWF8m+BPz*?sQ8D3{MK9SpZa@7*{#lOvAL2V{4HMbHRVk8#Lk7mx6zbhd48bC1)Kx z07lo7dz(XYE9n0I!hVme1kUp=^-Mv_w5%N2R!aGc*p#X--3&@_)p5%}r7(?rIP~sa zU0TTEUg^xSt{WEn#DRlhc7(QfWIAQSp_U-hAQseXjS;?zv9bsO88y|@uyfM6HCH>> zEX3Dem&%t^2BPPpn@CGDO5>G#RV~PGiTuW9X2MG@hhL{d;plu4CmMY;LG z8lS3zJxMoHl&3!CN}3J1IC`AE>d>n~lTZf0uQS+hgjBYW(@wJj`;^4@N_AdG##0jP z;yDa2fmHjBss}hM73`8*bQuqcy1BtD*kZw&I9_1Dq->||)$M21iktAUshC#%_QtsF z<2ZSKM>T=rz={OVX^ioYK(?+@k(oNwnjY|kd`cye(Kq=OVFEp*#kf_VqnswMEIXCS zqrK`arH765-hzQOA^!BA+|G`eH_=70-}_0SJOTIaZCvN(0QD?L16pok5FJEG_D!nqqojX8lzHrIWZI+Y& zv(C|1d@2J)hB{sJRs9u=SuHBQiY-UQW-UVp4$A6>8zT+8i3=^EhmEH4!wROm4ZRXV_oz z;$#2!&!2-H}f7uU4bBMNUl%9O-WSQG9DJ=Ve4v~!-bS-sbj{417u^vtj z-4s&0l5_BYTe{q^Z$@P=4Fx78k>e@oUX?oH!^RD;m_p~9S)~&@n(ZR`U)T72PdgK! zHlMD2GENQ7whIK|qr59{LJ<^D>q2n5d~0BxM^-vK+(7tvx!re0FbRC|$og!QscO_% z++f?_wJfaYvcC8J+?l-B4sk0TP;f;~y(Gb!wei|qj!o3)qb1XE7S9xX-<$*)_tv9e zf!lInNjMD<_+8iCZ1aV>nc{tgv3CMmsg+#mOwBW|&Q5{s`QnOtk{diW<@hCK@Trhb z|EXlkP9P(xv!5>^XA}YKbJADO6NZ(9Dt4`a!l-&&!^(Aajwt5z(X9&SjOpWsz)o)I zs!e7s;&z6ZCf5HcK2kI|3mE>~B-suy0tNKx9evul!zHyYIp=mi!Llb6E@kmXaP?T- z3_lV3uT74+s_6D`PJK)1ii{+~7v%}{0!7jEJZ$PA?=*Pfs3QY2Q7<HZFa= ztF^3b`X?||BYX>ouuwVrfko#+0*7Il1(pFb57JTD?BiLN9b&0P9 zV(2JKz!9b7l~n}`Q*zV4sS)P^tcf3KZgTnIaB#jJI2r)es7smMCmNW{ZJ?Q<%KY?D!7BQ zR*74(L3mn5VK{?)D1nUWBRU^#m7Ny1R9p#EqHb=ZQRaEuz<{0eyW5T- zmjqRV8?BbHvlUu}RD?}Ui<9&KM=odwz0~011wE~HBX;?Vkxpq4cJ>B9X;x!#uf+uR zwaY_aNXWDDb6rF$RZm7#CwK7(s^-Fg(z&2hXqtVw0;4{xF4Kj9H!CVPI>|4EW@&Kw zbJG{DC`PjTX3?!j-ma#B4W62>BRaprC%kc&%z*ob70f7JDs-3<7R1}{?Xk_Y^*SQ! zQ7YN;buFvC#?H$pt3jIdh>mUv5O8f*=0TvJw@(< zNi7y(@t96~Z^(nL&QAZahw-BeW{$GJQto7HbUEzf!5;dprKu_O{}gXbLk8fv(1!TuvOJ&B%&w@RR5!% z%`Wv({lrX2d2wd##X1JQqKAiF8p)avS0@z(lRx~&GLaN&H9^+(!E1f}MMAK_KrGf% zgh8;?q7{Nt`RoTrl=GE`Wx zZCz>Yo(J+mmW@5bW}LNW?Olz5y(7GeuPRQ=ioe1 z`f9UV_m-76Pq9DA1D*GSqnP*D%la~m=>5KcuUK}BS}HmU1Fmt#%WLrHEM)%&m1TK literal 0 HcmV?d00001