Generate repomd.xml.asc

bin/rpm-s3

@@ -118,6 +118,18 @@ def sign(rpmfile):
         logging.error("Unable to sign package: %s", e)
         exit(1)
 
+def sign_metadata(repomdfile):
+    """Requires a proper ~/.rpmmacros file. See <http://fedoranews.org/tchung/gpg/>"""
+    cmd = "gpg --detach-sign --armor '%s'" % repomdfile
+    logging.info(cmd)
+    try:
+        child = pexpect.spawn(cmd)
+        child.expect(pexpect.EOF)
+    except pexpect.EOF, e:
+        print "Unable to sign repository metadata '%s' - %s" % (repomdfile, child.before)
+        logging.error("Unable to sign repository metadata: %s", e)
+        exit(1)
+
 def setup_repository(repo, repopath):
     """Make sure a repo is present at repopath"""
     key = repo._grab.check("repodata/repomd.xml")
@@ -193,6 +205,11 @@ def update_repodata(repopath, rpmfiles, options):
         logging.info("rpmfile: %s", rpmfile)
         s3grabber.upload(rpmfile, os.path.basename(rpmfile))
 
+
+    # Generate repodata/repomd.xml.asc
+    if options.sign:
+        sign_metadata(os.path.join(tmpdir, 'repodata', 'repomd.xml'))
+
     # Replace metadata on s3
     s3grabber.syncdir(os.path.join(tmpdir, 'repodata'), 'repodata')
 

test/test.sh

@@ -4,9 +4,15 @@ set -e
 
 DIR=$( cd "$( dirname "$0" )" && pwd )
 ROOT_DIR="$(dirname "$DIR")"
+TMPDIR=$(mktemp -d)
+
+cp -r ${DIR}/.gnupg $TMPDIR/
+chmod 0700 $TMPDIR/.gnupg
+cp ${DIR}/.rpmmacros $TMPDIR/
 
 # used to get .rpmmacros and .gnupg
-HOME="$DIR"
+HOME="$TMPDIR"
+echo "HOME=$HOME"
 
 $ROOT_DIR/bin/rpm-s3 -b ${BUCKET:="pkgr-development-rpm"} -v -p gh/crohr/test/centos6/master --sign --keep 1000 ${DIR}/*.rpm