buildbot, branch v21

Allow signing of artifacts with key provided by GPG agent

2024-11-05T05:07:59Z

In our case the GPG agent serves 0x1D53D1877742E911 key stored on Nitrokey3 USB dongle. GPG key is bind mounted from the host. References: https://lists.openwrt.org/pipermail/openwrt-devel/2023-May/041044.html Signed-off-by: Petr Štetiar

scripts: signall: silence pushd/popd directory changes

2024-11-04T20:35:37Z

Its not needed to have those visible in the job output as it might be misleading. Signed-off-by: Petr Štetiar

docker,worker: install pyelftools

2024-11-04T06:35:02Z

Without it, errors may appear: WARNING: Makefile 'package/feeds/telephony/freeswitch/Makefile' has a dependency on 'libpcre', which does not exist make[2]: Entering directory '/builder/shared-workdir/build/scripts/config' make[2]: 'conf' is up to date. make[2]: Leaving directory '/builder/shared-workdir/build/scripts/config' Checking 'python3-pyelftools'... failed. Checking 'python3-dev'... ok. Checking 'python3-setuptools'... ok. Checking 'swig'... ok. u-boot: Please install the Python3 elftools module Fixes: 3ac7d39bd4c3 ("buildworker,buildmaster: bump Debian to version 12") Signed-off-by: Paul Spooren

Revert "buildworker,buildmaster: bump Debian to version 12"

2024-11-04T06:12:05Z

This reverts commit 3ac7d39bd4c364d76e78b3ba50c23a68e0b05c0f as it was decided to stay on Debian 11 for 24.10 release as well. Signed-off-by: Petr Štetiar

buildworker: start: fix broken non TLS setups

2024-11-04T06:12:04Z

Changes in commit 3812ff7bb296 ("buildworker: start: fix worker startup failure after update") broke non TLS setups. So lets fix it by setting SSL: only if BUILDWORKER_TLS is set. Fixes: 3812ff7bb296 ("buildworker: start: fix worker startup failure after update") Reported-by: Paul Spooren Signed-off-by: Petr Štetiar

phase1,phase2: GitPoller: fix deprecated API warning for pollinterval

2024-10-12T08:03:30Z

Fixes following warning: gitpoller.py:103: buildbot.warnings.DeprecatedApiWarning: [3.11.3 and later] pollinterval has been deprecated: please use pollInterval Signed-off-by: Petr Štetiar

phase2: signpack: fix sha256sums signatures of apk packages.adb index

2024-10-12T08:01:42Z

Currently the sha256sum verification of apk's packages.adb index fails as the file is modified with `apk adbsign`, but we currently don't send the sha256sums file to the master, thus it can't be fixed during signing. So lets pack sha256sums files and ship them to master for proper signing. Fixes: a94d4e15fdc1 ("add APK signing logic") Signed-off-by: Petr Štetiar

phase2: signpack: code format

2024-10-12T08:01:41Z

So its more readable and diffs of changes are more clear, thus easier to review. Signed-off-by: Petr Štetiar

scripts: signall: fix finish function not called when apk adbsign failed

2024-09-29T18:21:02Z

The `finish 3` was not being called when the `apk adbsign` command failed within the `find` command using `-exec`. This happened because `find` does not exit with a non-zero status when the command executed by `-exec` fails, so the `|| finish 3` condition was not triggered. So lets replace the `find ... -exec ...` construct with a loop and call `finish 3` immediately if it fails. Fixes: a94d4e15fdc1 ("add APK signing logic") Signed-off-by: Petr Štetiar

scripts: signall: fix wrong sha256sum on apk packages.adb index

2024-09-29T17:59:15Z

Currently the sha256sum verification of apk's packages.adb index fails as the file is modified with `apk adbsign`. So lets update sha256sum of all packages.adb indexes after they were signed with `apk adbsign`. While at it fix formatting. Fixes: a94d4e15fdc1 ("add APK signing logic") Signed-off-by: Petr Štetiar