export SCRIPTVARS=/srv/ftp-master.debian.org/dak/config/debian/vars
. $SCRIPTVARS
-umask 027
-
# And use one locale, no matter what the caller has set
export LANG=C
export LC_ALL=C
# should be relative to the general base dir later
COPYTARGET="${base}/keyrings"
+GNUPGHOME="${base}/s3kr1t/dot-gnupg"
base="${base}/scripts/builddkeyrings"
TARGET="${base}/keyrings"
REMOVED="${base}/removed-buildd-keys.gpg"
+STAMPFILE="${base}/updatedkeyring"
-mkdir -p "${TARGET}/keyrings"
+mkdir -p "${TARGET}/buildd-keyrings"
-for arch in $archs; do
- if [ -f ${base}/${arch}/keyring.gpg ]; then
- cp -al ${base}/${arch}/keyring.gpg ${TARGET}/keyrings/buildd-${arch}-keyring.gpg
- chmod 0644 ${TARGET}/keyrings/buildd-${arch}-keyring.gpg
- fi
-done
+if [ -f "${STAMPFILE}" ]; then
+ rm -f "${STAMPFILE}"
+ for arch in $archs; do
+ if [ -f ${base}/${arch}/keyring.gpg ]; then
+ cp -afl ${base}/${arch}/keyring.gpg ${TARGET}/buildd-keyrings/buildd-${arch}-keyring.gpg
+ chmod 0644 ${TARGET}/buildd-keyrings/buildd-${arch}-keyring.gpg
+ fi
+ done
-cd ${TARGET}
-sha512sum keyrings/* > sha512sums
+ cd ${TARGET}
+ sha512sum buildd-keyrings/* > sha512sums
-rm -f ${TARGET}/sha512sums.txt
-SIGNINGKEY=$(dak admin c signingkeyids)
-gpg --no-options --batch --no-tty --armour --default-key ${SIGNINKEY} --clearsign -o "${TARGET}/sha512sums.txt" "${TARGET}/sha512sums"
-rm -f ${TARGET}/sha512sums
+ rm -f ${TARGET}/sha512sums.txt
+ SIGNINGKEY=B1326A8D
+ GNUPGHOME=${GNUPGHOME} gpg --no-options --batch --no-tty --armour --default-key ${SIGNINGKEY} --clearsign -o "${TARGET}/sha512sums.txt" "${TARGET}/sha512sums"
+ rm -f ${TARGET}/sha512sums
+fi