File tree Expand file tree Collapse file tree 1 file changed +7
-6
lines changed
Expand file tree Collapse file tree 1 file changed +7
-6
lines changed Original file line number Diff line number Diff line change @@ -27,20 +27,21 @@ echo "--- Prepare keys context"
2727VAULT_TOKEN=$( vault write -field=token auth/approle/login role_id=" $VAULT_ROLE_ID_SECRET " secret_id=" $VAULT_SECRET_ID_SECRET " )
2828export VAULT_TOKEN
2929
30- # Signing keys
31- vault read -field=key secret/release/signing > $KEY_FILE
32- KEYPASS_SECRET=$( vault read -field=passphrase secret/release/signing)
33- export KEYPASS_SECRET
34- export KEY_ID_SECRET=D88E42B4
35-
3630# Prepare a secure temp folder not shared between other jobs to store the key ring
3731export TMP_WORKSPACE=/tmp/secured
3832export KEY_FILE=$TMP_WORKSPACE " /private.key"
33+
3934# Secure home for our keyring
4035export GNUPGHOME=$TMP_WORKSPACE " /keyring"
4136mkdir -p $GNUPGHOME
4237chmod -R 700 $TMP_WORKSPACE
4338
39+ # Signing keys
40+ vault read -field=key secret/release/signing > $KEY_FILE
41+ KEYPASS_SECRET=$( vault read -field=passphrase secret/release/signing)
42+ export KEYPASS_SECRET
43+ export KEY_ID_SECRET=D88E42B4
44+
4445# Import the key into the keyring
4546echo " $KEYPASS_SECRET " | gpg --batch --import " $KEY_FILE "
4647
You can’t perform that action at this time.
0 commit comments