1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
|
#!/bin/sh
TMPSIG=$(mktemp)
TMPLNK=$(mktemp)
TMPSIG2000=$(mktemp -t XXXXXXXX.2000)
TMPSIG2018=$(mktemp -t XXXXXXXX.2018)
TMPSIG2021=$(mktemp -t XXXXXXXX.2021)
TMPSIG2023=$(mktemp -t XXXXXXXX.2023)
TMPSIG2024=$(mktemp -t XXXXXXXX.2024)
TMPSIG2025=$(mktemp -t XXXXXXXX.2025)
cd /home/rpmbuild/site/rpms
for dep in fedora/{39,40,41}/*/{i386,x86_64,aarch64} enterprise/{8,9,10}/*/{x86_64,aarch64}
do
[[ $dep =~ /modular ]] && continue
[[ $dep =~ /debug-modular ]] && continue
arch=${dep##*/}
LST=""
if [ -d $dep/repodata -a $dep -nt $dep/repodata -a ! -f $dep/.closed ]
then echo "== Nouveaux RPM dans $dep =="
if [ $arch = x86_64 ]; then
find $dep -name \*.rpm -a -newer $dep/repodata -print >>$TMPSIG
elif [ $arch = aarch64 ]; then
find $dep -name \*.noarch.rpm -a -newer $dep/repodata -print >>$TMPLNK
find $dep -name \*.aarch64.rpm -a -newer $dep/repodata -print >>$TMPSIG
else
find $dep -name \*.noarch.rpm -a -newer $dep/repodata -print >>$TMPLNK
find $dep -name \*.i?86.rpm -a -newer $dep/repodata -print >>$TMPSIG
fi
fi
done
# if something added in SRPMS, search for new SRPM
if [ SRPMS -nt SRPMS/repodata ]; then
find SRPMS -name \*.rpm \( -newer SRPMS/repodata -o -mtime -1 \) -print >>$TMPSIG
fi
if [ -s $TMPSIG ]; then
echo "À signer:"; sort < $TMPSIG
# old
grep el7 $TMPSIG > $TMPSIG2000
# 2018
grep el8 $TMPSIG > $TMPSIG2018
# 2021
grep el9 $TMPSIG > $TMPSIG2021
# 2023
grep fc39 $TMPSIG > $TMPSIG2023
# 2024
grep fc40 $TMPSIG > $TMPSIG2024
grep fc41 $TMPSIG >> $TMPSIG2024
grep el10 $TMPSIG >> $TMPSIG2024
# 2025
grep src.rpm $TMPSIG > $TMPSIG2025
if [ -s $TMPSIG2025 ]; then
echo "== Signature des $(cat $TMPSIG2025 | wc -l) nouveaux RPM (2025) =="
if rpmsign --define '_gpg_path /home/remi/.gnupgrpm' --define "_gpg_name 83833E4687A4AA03B6AC94F2061566968F1F4B2D" --addsign $(cat $TMPSIG2025)
then echo done.
else exit 1
fi
fi
if [ -s $TMPSIG2024 ]; then
echo "== Signature des $(cat $TMPSIG2024 | wc -l) nouveaux RPM (2024) =="
if rpmsign --define '_gpg_path /home/remi/.gnupgrpm' --define "_gpg_name CF1DF0057CE85DFF5B2F2A37C2FD3B2C2A0948E4" --addsign $(cat $TMPSIG2024)
then echo done.
else exit 1
fi
fi
if [ -s $TMPSIG2023 ]; then
echo "== Signature des $(cat $TMPSIG2023 | wc -l) nouveaux RPM (2023) =="
if rpmsign --define '_gpg_path /home/remi/.gnupgrpm' --define "_gpg_name 50A5E157DFE548EC7C05E9D8D5933DAB6DEFD35E" --addsign $(cat $TMPSIG2023)
then echo done.
else exit 1
fi
fi
if [ -s $TMPSIG2021 ]; then
echo "== Signature des $(cat $TMPSIG2021 | wc -l) nouveaux RPM (2021) =="
if rpmsign --define '_gpg_path /home/remi/.gnupgrpm' --define "_gpg_name B1ABF71E14C9D74897E198A8B19527F1478F8947" --addsign $(cat $TMPSIG2021)
then echo done.
else exit 1
fi
fi
if [ -s $TMPSIG2018 ]; then
echo "== Signature des $(cat $TMPSIG2018 | wc -l) nouveaux RPM (2018) =="
if rpmsign --define '_gpg_path /home/remi/.gnupgrpm' --define "_gpg_name 6B38FEA7231F87F52B9CA9D8555097595F11735A" --addsign $(cat $TMPSIG2018)
then echo done.
else exit 1
fi
fi
if [ -s $TMPSIG2000 ]; then
echo "== Signature des $(cat $TMPSIG2000 | wc -l) nouveaux RPM (old) =="
if rpmsign --define '_gpg_path /home/remi/.gnupgrpm' --define "_gpg_name 1EE04CCE88A4AE4AA29A5DF5004E6F4700F97F56" --addsign $(cat $TMPSIG2000)
then echo done.
else exit 1
fi
fi
else echo "Rien à signer."
fi
if [ -s $TMPLNK ]
then echo "== Création des liens (noarch) =="
cat $TMPLNK | while read dest
do
srce=${dest/\/ppc64/\/x86_64}
srce=${srce/\/ppc/\/x86_64}
srce=${srce/\/i386/\/x86_64}
srce=${srce/\/armhfp/\/x86_64}
srce=${srce/\/aarch64/\/x86_64}
ln -f $srce $dest && echo $dest
done
else echo "Rien à lier."
fi
for dep in SRPMS fedora/{39,40,41}/*/{i386,x86_64,aarch64} enterprise/{8,9,10}/*/{x86_64,aarch64}
do
[[ $dep =~ /modular ]] && continue
[[ $dep =~ /debug-modular ]] && continue
if [ -d $dep/repodata -a $dep -nt $dep/repodata -a ! -f $dep/.closed ]
then echo "== Actualisation de $dep =="
pushd $dep
mkrepo nocheck
touch repodata
popd
#else echo "== $dep est à jour =="
fi
done
|
