ben
/
build-valetudo
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Validating sha256 hash checksums when building the latest commit (snapshots) #1

Merged
ben merged 6 commits from hashes into main 2024-02-12 23:12:45 +00:00
Conversation 0 Commits 6 Files Changed 2 +22 -6
2 changed files with 22 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
.pipeline/version.sh
View File

@ -16,7 +16,13 @@ fi
if [[ -n "${BUILD_SNAPSHOT}" && "${BUILD_SNAPSHOT}" != "false" ]]; then if [[ -n "${BUILD_SNAPSHOT}" && "${BUILD_SNAPSHOT}" != "false" ]]; then
# Jenkins will set this to "false" since it is the name of the build parameter # Jenkins will set this to "false" since it is the name of the build parameter
VALETUDO_NPM_VERSION=$(jq -r .version ${PWD_REPO_PATH}/Valetudo/package.json) if [[ "$(basename $(pwd))" == "Valetudo" ]]; then
PACKAGE_JSON="$(pwd)/package.json"
else
PACKAGE_JSON="${PWD_REPO_PATH}/Valetudo/package.json"
fi
VALETUDO_NPM_VERSION=$(jq -r .version $PACKAGE_JSON)
VALETUDO_VERSION="${VALETUDO_NPM_VERSION}-SNAPSHOT" VALETUDO_VERSION="${VALETUDO_NPM_VERSION}-SNAPSHOT"
elif [[ -z "${VALETUDO_VERSION}" ]]; then elif [[ -z "${VALETUDO_VERSION}" ]]; then
# latest tag (annotated or not) # latest tag (annotated or not)

20
Jenkinsfile vendored
View File

@ -25,6 +25,7 @@ pipeline {
script { script {
// used in post success // used in post success
env.GITEA_USER = env.JOB_NAME.split('/')[0] env.GITEA_USER = env.JOB_NAME.split('/')[0]
env.GITEA_SECRET_ID = "gitea-user-${env.GITEA_USER}-full-token"
env.VALETUDO_GIT_URL = params.use_github ? "https://github.com/Hypfer" : "https://git.sudo.is/mirrors" env.VALETUDO_GIT_URL = params.use_github ? "https://github.com/Hypfer" : "https://git.sudo.is/mirrors"
sh "env" sh "env"
@ -32,7 +33,9 @@ pipeline {
git(url: env.VALETUDO_GIT_URL + "/Valetudo", branch: env.VALETUDO_MAIN_BRANCH) git(url: env.VALETUDO_GIT_URL + "/Valetudo", branch: env.VALETUDO_MAIN_BRANCH)
sh("git fetch --tags") sh("git fetch --tags")
env.VALETUDO_VERSION = sh(script: "../.pipeline/version.sh", returnStdout: true).trim() env.VALETUDO_VERSION = sh(script: "../.pipeline/version.sh", returnStdout: true).trim()
sh "git checkout ${env.VALETUDO_VERSION}" if (env.BUILD_SNAPSHOT != "true") {
sh "git checkout ${env.VALETUDO_VERSION}"
}
} }
currentBuild.displayName += " - v${env.VALETUDO_VERSION}" currentBuild.displayName += " - v${env.VALETUDO_VERSION}"
currentBuild.description = "Valetudo v${env.VALETUDO_VERSION}" currentBuild.description = "Valetudo v${env.VALETUDO_VERSION}"
@ -46,7 +49,7 @@ pipeline {
sh ".pipeline/build.sh" sh ".pipeline/build.sh"
} }
} }
stage('Checksums') { stage('checksums') {
steps { steps {
sh ".pipeline/check-sha256sums.sh" sh ".pipeline/check-sha256sums.sh"
} }
@ -56,6 +59,16 @@ pipeline {
sh ".pipeline/package.sh" sh ".pipeline/package.sh"
} }
} }
stage('publish') {
when {
branch "main"
}
steps {
withCredentials([string(credentialsId: env.GITEA_SECRET_ID, variable: 'GITEA_SECRET')]) {
sh ".pipeline/publish.sh"
}
}
}
} }
post { post {
always { always {
@ -63,9 +76,6 @@ pipeline {
} }
success { success {
archiveArtifacts(artifacts: "dist/*", fingerprint: true) archiveArtifacts(artifacts: "dist/*", fingerprint: true)
withCredentials([string(credentialsId: "gitea-user-${env.GITEA_USER}-full-token", variable: 'GITEA_SECRET')]) {
sh ".pipeline/publish.sh"
}
} }
cleanup { cleanup {
sh ".pipeline/clean.sh" sh ".pipeline/clean.sh"