buildbot: sign APK index file

freifunk-berlin · Nov 14, 2024 · 9fb4772 · 9fb4772
1 parent c7a72da
commit 9fb4772
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/roles/buildbot/files/packages.py b/roles/buildbot/files/packages.py
@@ -110,6 +110,13 @@ def branchToFalterBranch(props):
     }
     return o2f.get(props["branch"])
 
+@util.renderer
+def signCommand(props, wwwdir):
+    match props["branch"]:
+        case "main" | "testbuildbot":
+            return f'apk adbsign --allow-untrusted --sign-key apk.snapshot.PRIVATE.pem {wwwdir}/falter/packages.adb'
+        case _:
+            return f'signify-openbsd -S -m {wwwdir}/falter/Packages -s packagefeed_master.sec'
 
 # Fans out to one builder per arch and blocks for the results.
 def packagesFactory(f, wwwPrefix):
@@ -292,10 +299,7 @@ def packagesArchFactory(f, wwwPrefix, wwwURL, alpineVersion):
             command=[
                 "sh",
                 "-c",
-                util.Interpolate(
-                    "signify-openbsd -S -m %(kw:wwwdir)s/falter/Packages -s packagefeed_master.sec",
-                    wwwdir=wwwdir,
-                ),
+                signCommand.withArgs(wwwdir)
             ],
         )
     )