Sign firmware with private key stored as Jenkins credentials.

master
Icedream 2017-05-26 21:48:15 +02:00
parent cee7eb131e
commit bd9e7c5d6b
Signed by: icedream
GPG Key ID: 1573F6D8EFE4D0CF
2 changed files with 14 additions and 1 deletions

View File

@ -2131,7 +2131,8 @@ FREETZ_CHECK_CHANGED=y
# FREETZ_FWMOD_SKIP_MODIFY is not set
# FREETZ_FWMOD_SKIP_PACK is not set
# FREETZ_FWMOD_FORCE_PACK is not set
# FREETZ_FWMOD_SIGN is not set
FREETZ_FWMOD_SIGN=y
FREETZ_FWMOD_SIGN_PRIVATE_KEY_PASSWORD="VUJ2XN7tYNiqmTYUcdGFcNq91BlmKjbz"
# FREETZ_FWMOD_USBROOT is not set
# FREETZ_FWMOD_NFSROOT is not set

12
Jenkinsfile vendored
View File

@ -16,6 +16,18 @@ node("linux && amd64 && docker") {
apt install -y bc
"""
withCredentials([
file(credentialsId: 'freetz.image_signing.asc', variable: 'FREETZ_IMAGE_SIGNING_ASC'),
file(credentialsId: 'freetz.image_signing.key', variable: 'FREETZ_IMAGE_SIGNING_KEY'),
file(credentialsId: 'freetz.image_signing.pem', variable: 'FREETZ_IMAGE_SIGNING_PEM'),
]) {
sh """
cp \"\${FREETZ_IMAGE_SIGNING_ASC}\" "\${HOME}/.freetz.image_signing.asc"
cp \"\${FREETZ_IMAGE_SIGNING_KEY}\" "\${HOME}/.freetz.image_signing.key"
cp \"\${FREETZ_IMAGE_SIGNING_PEM}\" "\${HOME}/.freetz.image_signing.pem"
"""
}
stage("Build") {
ansiColor('xterm') {
sh """