#130 GPG Passphrase hell no. 28478575...

Author: tallpsmith

releasing-scripts/docker-release-build.sh

@@ -5,11 +5,24 @@ set -e
 echo "Starting PMCD"
 /usr/libexec/pcp/lib/pmcd start
 
+# Setup GPG agent in this container to allow preset passphrases
+mkdir -p /root/.gnupg
+chmod -R 500 /root/.gnupg
+echo allow-preset-passphrase  >> /root/.gnupg/gpg-agent.conf
+
 echo "Importing GPGKEY"
 # this trick allows the GPG secret key to be imported via the command line
 # thank goodness for Google
 echo $MAVEN_GPG_PASSPHRASE | gpg --batch --yes --passphrase-fd 0  --import  /root/gpgkeyexport/gpgkey.prvt.asc
 
+# now iterate over each KEYGRIP you can see and preset the passphrase (one of them will be the right one)
+echo "Dumping keygrips"
+gpg --list-secret-keys --with-keygrip
+for KEYGRIP in `gpg --list-secret-keys --with-keygrip | grep Keygrip | awk -F = '{print $2}'`; do /usr/libexec/gpg-preset-passphrase --preset --passphrase $MAVEN_GPG_PASSPHRASE $KEYGRIP; done
+
+# now do a simple GPG sign to 'prime' the gpg to ensure when Maven ends up running this GPG cache thing is ready
+echo "Doing a fake GPG signing now to prime the GPG agent password cache"
+echo "test" | gpg --clearsign
 
 echo "Adding Github to known_hosts files"
 # see https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/githubs-ssh-key-fingerprints