bin/sign-updated-udfs

   1 #!/bin/bash
   2
   3 set -eu
   4 set -x
   5
   6 cd "${RELEASE_CHECKOUT:?}"
   7 find "${RELEASE_CHECKOUT:?}/wiki/src/upgrade/" \
   8      -type f -name upgrades.yml | \
   9     while read -r udf; do
  10         if [ -n "$(git status --porcelain "${udf:?}")" ]; then
  11             for _ in 1 2 3; do
  12                 if gpg -u "${TAILS_SIGNATURE_KEY:?}" \
  13                        --armor \
  14                        --detach-sign "${udf:?}"; then
  15                     break
  16                 fi
  17             done
  18             mv --force "${udf:?}.asc" "${udf:?}.pgp"
  19             "${RELEASE_CHECKOUT:?}/config/chroot_local-includes/usr/src/iuk/bin/tails-iuk-check-upgrade-description-file" "${udf:?}" \
  20                 || break
  21         fi
  22     done