yetangitu/airsonic
1
0
Fork 0
mirror of https://github.com/airsonic/airsonic.git synced 2025-10-03 09:49:17 +02:00
Code Issues Releases Wiki Activity

Add sha256sums and gpg sign outside of maven process

Browse source 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
This commit is contained in:
Andrew DeMaria 2019-07-13 16:17:44 -06:00
parent 3b8993e860
commit 8db4ec12e1
No known key found for this signature in database
GPG key ID: 0A3F5E91F8364EDF
4 changed files with 37 additions and 42 deletions
Download patch file Download diff file Expand all files Collapse all files

4
airsonic-main/pom.xml
View file

@ -634,6 +634,10 @@
<groupId>org.owasp</groupId> <groupId>org.owasp</groupId>
<artifactId>dependency-check-maven</artifactId> <artifactId>dependency-check-maven</artifactId>
</plugin> </plugin>
<plugin>
<groupId>net.nicoulaj.maven.plugins</groupId>
<artifactId>checksum-maven-plugin</artifactId>
</plugin>
</plugins> </plugins>
</build> </build>
<profiles> <profiles>

22
contrib/release.md
View file

@ -20,37 +20,41 @@ Release Steps
6. Package 6. Package
mvn clean verify -P docker,sign mvn clean verify -P docker
7. push up branch and tag 7. Sign sha256sums file
gpg2 --clearsign artifacts-checksums.sha
8. push up branch and tag
git push origin vX.Y.Z git push origin vX.Y.Z
git push -u origin release-X.Y git push -u origin release-X.Y
8. Create new release on github 9. Create new release on github
- Draft new Relase - Draft new Relase
- Choose existing tag - Choose existing tag
- Title is "Airsonic X.Y.Z" - Title is "Airsonic X.Y.Z"
- Contents are the relevant entry of the CHANGELOG.md file - Contents are the relevant entry of the CHANGELOG.md file
- Upload `airsonic.war` and `airsonic.war.asc` - Upload `airsonic.war` and `artifacts-checksums.sha`
9. Update latest docker tag 10. Update latest docker tag
docker tag airsonic/airsonic:X.Y.Z-RELEASE airsonic/airsonic:latest docker tag airsonic/airsonic:X.Y.Z-RELEASE airsonic/airsonic:latest
10. Docker login with airsonic credentials in `airsonic-passwords` repo 11. Docker login with airsonic credentials in `airsonic-passwords` repo
docker login docker login
11. Push images 12. Push images
docker push airsonic/airsonic:X.Y.Z-RELEASE docker push airsonic/airsonic:X.Y.Z-RELEASE
docker push airsonic/airsonic:latest docker push airsonic/airsonic:latest
12. Checkout master branch and bump maven version to next snapshot version 13. Checkout master branch and bump maven version to next snapshot version
git checkout master git checkout master
mvn versions:set -DnewVersion=X.Y+1.0-SNAPSHOT mvn versions:set -DnewVersion=X.Y+1.0-SNAPSHOT
13. Git commit and push 14. Git commit and push

13
integration-test/pom.xml
View file

@ -203,19 +203,6 @@
</includes> </includes>
</configuration> </configuration>
</plugin> </plugin>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-gpg-plugin</artifactId>
<version>1.6</version>
<executions>
<execution>
<phase>none</phase>
<goals>
<goal>sign</goal>
</goals>
</execution>
</executions>
</plugin>
</plugins> </plugins>
</build> </build>

40
pom.xml
View file

@ -326,6 +326,26 @@
<artifactId>maven-surefire-plugin</artifactId> <artifactId>maven-surefire-plugin</artifactId>
<version>2.22.0</version> <version>2.22.0</version>
</plugin> </plugin>
<plugin>
<groupId>net.nicoulaj.maven.plugins</groupId>
<artifactId>checksum-maven-plugin</artifactId>
<version>1.8</version>
<executions>
<execution>
<phase>package</phase>
<goals>
<goal>artifacts</goal>
</goals>
</execution>
</executions>
<configuration>
<algorithms>
<algorithm>SHA-256</algorithm>
</algorithms>
<individualFiles>false</individualFiles>
<shasumSummary>true</shasumSummary>
</configuration>
</plugin>
</plugins> </plugins>
</pluginManagement> </pluginManagement>
@ -417,25 +437,5 @@
<module>integration-test</module> <module>integration-test</module>
</modules> </modules>
</profile> </profile>
<profile>
<id>sign</id>
<build>
<plugins>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-gpg-plugin</artifactId>
<version>1.6</version>
<executions>
<execution>
<phase>verify</phase>
<goals>
<goal>sign</goal>
</goals>
</execution>
</executions>
</plugin>
</plugins>
</build>
</profile>
</profiles> </profiles>
</project> </project>