CI: Added .deb and maven deploy

airbus-cyber · Dec 24, 2021 · 14516b1 · 14516b1
1 parent 13d14ab
commit 14516b1
Showing 1 changed file with 36 additions and 6 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -16,8 +16,8 @@ jobs:
           cache: maven
       - name: Retrieve variables from pom
         id: requestPom
+        working-directory: plugin
         run: |
-          cd plugin
           echo ::set-output name=name::$(mvn help:evaluate -Dexpression=project.name -q -DforceStdout)
           echo ::set-output name=version::$(mvn help:evaluate -Dexpression=project.version -q -DforceStdout)
           echo ::set-output name=graylogVersion::$(mvn help:evaluate -Dexpression=project.parent.version -q -DforceStdout)
@@ -36,28 +36,43 @@ jobs:
           path: graylog2-server
       - name: Build Graylog
         if: steps.cache.outputs.cache-hit != 'true'
+        working-directory: graylog2-server
         run: |
-          cd graylog2-server
           mvn compile -DskipTests=true --batch-mode
       - name: Cache node_modules
         uses: actions/cache@v2
         with:
           path: plugin/node_modules
           key: ${{ hashFiles('plugin/yarn.lock') }}
       - name: Build plugin
+        working-directory: plugin
         run: |
-          cd plugin
           mvn package --batch-mode
+      - name: Package signed .deb
+        working-directory: plugin
+        env:
+          GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
+          PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+        run: |
+          echo -n "$GPG_PRIVATE_KEY" | gpg2 --batch --allow-secret-key-import --import
+          gpg2 --export-secret-keys --batch --pinentry-mode loopback --passphrase "$PASSPHRASE" > $HOME/.gnupg/secring.gpg
+          mvn jdeb:jdeb --settings deployment/settings.xml
       - name: Check license headers
+        working-directory: plugin
         run: |
-          cd plugin
           mvn license:check
-      - name: Archive jar
+      - name: Archive .jar
         uses: actions/upload-artifact@v2
         with:
           name: jar
           path: plugin/target/${{ steps.requestPom.outputs.name }}-${{ steps.requestPom.outputs.version }}.jar
           if-no-files-found: error
+      - name: Archive .deb
+        uses: actions/upload-artifact@v2
+        with:
+          name: deb
+          path: plugin/target/${{ steps.requestPom.outputs.name }}-${{ steps.requestPom.outputs.version }}.deb
+          if-no-files-found: error
 
   backendTests:
     runs-on: ubuntu-20.04
@@ -83,13 +98,28 @@ jobs:
     needs: [build, backendTests]
     if: startsWith(github.ref, 'refs/tags/')
     steps:
-      - name: Download jar from build
+      - name: Download .jar from build
         uses: actions/download-artifact@v2
         with:
           name: jar
+      - name: Download .deb from build
+        uses: actions/download-artifact@v2
+        with:
+          name: deb
       - name: Release
         uses: softprops/action-gh-release@v1
         with:
           files: |
             *.jar
+            *.deb
           fail_on_unmatched_files: true
+      - name: Deploy to Maven Central
+        working-directory: plugin
+        env:
+          SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}
+          SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
+          GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
+          PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+        run: |
+          echo -n "$GPG_PRIVATE_KEY" | gpg2 --batch --allow-secret-key-import --import
+          mvn clean deploy -DskipTests=true --settings deployment/settings.xml