diff --git a/headless-services/jdt-ls-extension/pom.xml b/headless-services/jdt-ls-extension/pom.xml index 7e29d7639..c1b27e665 100644 --- a/headless-services/jdt-ls-extension/pom.xml +++ b/headless-services/jdt-ls-extension/pom.xml @@ -51,6 +51,9 @@ true vmware 3.9.4.202211021051 + + signer + /home/bamboo/.ssh/id_rsa @@ -61,6 +64,32 @@ ${env.bamboo_vault_signing_passphrase} + + + vm-signing + + + + exec-maven-plugin + org.codehaus.mojo + + + VM JAR Sign + package + + exec + + + + + + ${project.build.directory} + + + + + + @@ -98,6 +127,7 @@ https://dist.springsource.com/release/TOOLS/third-party/misc-p2-repo/${misc.p2.repo.version} + @@ -176,5 +206,22 @@ + + + + + exec-maven-plugin + org.codehaus.mojo + + scripts/sign-jars.sh + + ${vm-signing.ssh.user} + ${vm-signing.ssh.key} + + + + + + diff --git a/headless-services/jdt-ls-extension/scripts/sign-jars.sh b/headless-services/jdt-ls-extension/scripts/sign-jars.sh new file mode 100755 index 000000000..e5ec9edc7 --- /dev/null +++ b/headless-services/jdt-ls-extension/scripts/sign-jars.sh @@ -0,0 +1,29 @@ +set -e +target_folder=$1 +if [ -d "$target_folder" ] +then + echo "Sign JARs in directory: $target_folder" + files=`ls $target_folder` + for file in $files + do +# echo "Found $file..." + if ! [ -d $file ] + then +# echo "Looking at: $target_folder/$file" + extension="${file##*.}" +# echo "Detected extension = $extension" + if [ "$extension" = "jar" ] + then + echo "Copying $file to remote machine..." + scp -i $SSH_KEY $target_folder/$file $SSH_USER@vm-tools.spring.vmware.com:/opt/bamboo + echo "Signing $file..." + ssh -i $SSH_KEY $SSH_USER@vm-tools.spring.vmware.com -- /build/apps/signing/signserver/signc -v --input=/opt/bamboo/$file --keyid=jarsign_vmware --signmethod="jdk-1.8.0_121" --output=/opt/bamboo/$file + echo "Copying **signed** $file back... (into $target_folder/$file)" + scp -i $SSH_KEY $SSH_USER@vm-tools.spring.vmware.com:/opt/bamboo/$file $target_folder/$file + echo "Cleaning up remote machine..." + ssh -i $SSH_KEY $SSH_USER@vm-tools.spring.vmware.com -- rm /opt/bamboo/$file + echo "Successfully signed $file" + fi + fi + done +fi