tasks/gpg.rake

#
#    Licensed to the Apache Software Foundation (ASF) under one or more
#    contributor license agreements.  See the NOTICE file distributed with
#    this work for additional information regarding copyright ownership.
#    The ASF licenses this file to You under the Apache License, Version 2.0
#    (the "License"); you may not use this file except in compliance with
#    the License.  You may obtain a copy of the License at
#
#       http://www.apache.org/licenses/LICENSE-2.0
#
#    Unless required by applicable law or agreed to in writing, software
#    distributed under the License is distributed on an "AS IS" BASIS,
#    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
#    See the License for the specific language governing permissions and
#    limitations under the License.
#

module Buildr
  module GPG
    extend self

    def sign_task(pkg)
      file(pkg.to_s + '.asc') do
        puts "GPG signing #{pkg.to_spec}"
        cmd = 'gpg',
               '--local-user', ENV['GPG_USER'],
               '--armor',
               '--output', pkg.to_s + '.asc'
        cmd += ['--passphrase', ENV['GPG_PASS']] if ENV['GPG_PASS']
        cmd += ['--detach-sig', pkg]
        #cmd << { :verbose => true }
        #sh *cmd
        system *cmd
      end
    end

    def sign_and_upload(pkg)
      task(:upload).enhance do
        artifact = Buildr.artifact(pkg.to_spec_hash.merge(:type => "#{pkg.type}.asc"))
        artifact.from sign_task(pkg)
        artifact.invoke
        artifact.upload
      end
    end
  
    def gpg_sign_before_upload
      self.enhance do 
        [self, self.projects].flatten.each { |prj|
          prj.packages.each { |pkg| sign_and_upload(pkg) }
          prj.packages.map {|pkg| pkg.pom }.uniq.each { |pom| sign_and_upload(pom) }
        }
      end
    end
  end
end

class Buildr::Project
  include Buildr::GPG
end