[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [libra-dev] Build with signed JARs

Thanks for the hints, Chris. 

It looks like the Mylyn project has release solved the issue for them. I will take a deeper look. I opened bug 339236 [1] to track the progress. 

[1] https://bugs.eclipse.org/bugs/show_bug.cgi?id=339236

Greetings,
Kaloyan

-----Original Message-----
From: Chris Aniszczyk [mailto:caniszczyk@xxxxxxxxx] 
Sent: 08 ÐÐÑÑ 2011 Ð. 16:06 Ñ.
To: Raev, Kaloyan
Cc: Libra developers list
Subject: Re: Build with signed JARs

On Tue, Mar 8, 2011 at 7:29 AM, Raev, Kaloyan <kaloyan.raev@xxxxxxx> wrote:
> I suppose you have some experience with this with the EGit project. The
> Libra project has similar build infrastructure setup â Hudson + Tycho.
>
> I have the necessary privileges to sign jars with the Eclipse.org
> certificate. I am just looking for an automated way to produce the p2 repo
> with signed bundles.
>
> Could you share any hints how you produce p2 repository with signed bundles
> for the EGit project?

At the moment, we do this manually in EGit which sucks. We only do
this when spinning a release.
     http://wiki.eclipse.org/EGit/Contributor_Guide#Signing

Since after you sign, you have to regenerate the p2 repo with the
publisher and then categorize the site with a category.xml...

The ideal solution is to have this part of the build and have it
toggable when you release. I've been working on a Tycho example that
takes all the lessons I've learned from setting up builds at
eclipse.org... it's not done yet but it's a start.
     http://wiki.eclipse.org/Minerva#Signing

The only project I know of that has signing as part of their
Tycho-based build is Mylyn...
     https://bugs.eclipse.org/bugs/show_bug.cgi?id=332321#c24

Maybe you can look in depth at what they did and then get it to work
with your build? I haven't had enough time to look at it and come up
with a generic example... last time I looked at it it needed a bit of
work.

Sorry I couldn't help more on this.

-- 
Cheers,

Chris Aniszczyk
http://aniszczyk.org
+1 860 839 2465