performancecopilot#130 Almost there with the SSH_AGENT/SCM integration. Git tag works.

Author: tallpsmith

RELEASING.md

@@ -9,7 +9,7 @@ To release parfait out to the wider community, you will need the following:
    * An account on [OSS Sonatype Repo](https://oss.sonatype.org/)
 
 If you're releasing from a Mac/OSX, then you'll also need:
-   * Docker/colima/Podman
+   * Docker Desktop (due to SSH_AGENT needs, Docker Desktop is the only one that works...)
 
 
 OSS Sonatype

releasing-scripts/docker-release-build.sh

@@ -10,5 +10,19 @@ echo "Importing GPGKEY"
 # thank goodness for Google
 echo $MAVEN_GPG_PASSPHRASE | gpg --batch --yes --passphrase-fd 0  --import  /root/gpgkeyexport/gpgkey.prvt.asc
 
+
+echo "Adding Github to known_hosts files"
+# see https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/githubs-ssh-key-fingerprints
+cat << EOF >> ~/.ssh/known_hosts
+github.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl
+github.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBEmKSENjQEezOmxkZMy7opKgwFB9nkt5YRrYMjNuG5N87uRgg6CLrbo5wAdT/y6v0mKV0U2w0WZ2YB/++Tpockg=
+github.com ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCj7ndNxQowgcQnjshcLrqPEiiphnt+VTTvDP6mHBL9j1aNUkY4Ue1gvwnGLVlOhGeYrnZaMgRK6+PKCUXaDbC7qtbW8gIkhL7aGCsOr/C56SJMy/BCZfxd1nWzAOxSDPgVsmerOBYfNqltV9/hWCqBywINIR+5dIg6JTJ72pcEpEjcYgXkE2YEFXV1JHnsKgbLWNlhScqb2UmyRkQyytRLtL+38TGxkxCflmO+5Z8CSSNY7GidjMIZ7Q4zMjA2n1nGrlTDkzwDCsw+wqFPGQA179cnfGWOWRVruj16z6XyvxvjJwbz0wQZ75XK5tKSb7FNyeIEs4TT4jk+S4dhPeAUC5y+bDYirYgM4GC7uEnztnZyaVWQ7B381AK4Qdrwt51ZqExKbQpTUNn+EjqoTwvqNj4kqx5QUCI0ThS/YkOxJCXmPUWZbhjpCg56i+2aB6CmK2JGhn57K5mj0MNdBXA4/WnwH6XoPWJzK5Nyu2zB3nAZp+S5hpQs+p1vN1/wsjk=
+EOF
+
+# echo "configuring Git"
+git config --global user.email "$GIT_EMAIL"
+git config --global user.name "$GIT_USERNAME"
+git config --global --list
+
 echo "Building Parfait"
 mvn clean verify gpg:sign

releasing.sh

@@ -5,12 +5,18 @@ set -e
 [ ! -f .releasing.env ] && echo ".releasing.env file not found" && exit 1
 source .releasing.env
 
-[ ! $GIT_USERNAME ] && echo "GIT_USERNAME is not set" && exit 1
-[ ! $GIT_EMAIL ] && echo "GIT_EMAIL is not set" && exit 1
-[ ! $GPG_PASSPHRASE ] && echo "GPG_PASSPHRASE is not set" && exit 1
+[ ! "$GIT_USERNAME" ] && echo "GIT_USERNAME is not set" && exit 1
+[ ! "$GIT_EMAIL" ] && echo "GIT_EMAIL is not set" && exit 1
+[ ! "$GPG_PASSPHRASE" ] && echo "GPG_PASSPHRASE is not set" && exit 1
 
-docker build . -t parfait-build
-docker run --rm --env GIT_USERNAME="${GIT_USERNAME}" --env GIT_EMAIL="${GIT_EMAIL}" --env MAVEN_GPG_PASSPHRASE="${GPG_PASSPHRASE}" -v `pwd`:/parfait -v ~/.m2:/root/.m2 -v ~/gpgkeyexport:/root/gpgkeyexport parfait-builder sh -c 'releasing-scripts/docker-release-build.sh'
+docker build . -t parfait-builder
+# This runs the Docker-based build:
+#   * sets up Git & PGP environment variables
+#   * mounts the code base into /parfait (which becomes the WORKDIR)
+#   * mounts your GPG exported key (see RELEASING.md for the requirements there)
+#   * mounts the SSH_AUTH_SOCK so you can leverage your local SSH agent
+#   * then launches the releasing-scripts/docker-release-build.sh to perform the build inside the container
+docker run --rm --env GIT_USERNAME="${GIT_USERNAME}" --env GIT_EMAIL="${GIT_EMAIL}" --env MAVEN_GPG_PASSPHRASE="${GPG_PASSPHRASE}" --env SSH_AUTH_SOCK="/run/host-services/ssh-auth.sock" --volume `pwd`:/parfait --volume ~/.m2:/root/.m2 --volume ~/gpgkeyexport:/root/gpgkeyexport --mount type=bind,src=/run/host-services/ssh-auth.sock,target=/run/host-services/ssh-auth.sock parfait-builder sh -c 'releasing-scripts/docker-release-build.sh'